R3721-F3210-F3171-HP High-End Firewalls High Availability Configuration Guide-6PW101

16
Task Remarks
Creating a VRRP group and configuring virtual IP
address
Required.
Configuring router priority, preemptive mode and
tracking function
Optional.
Configuring VRRP packet attributes Optional.
Enabling the trap function for VRRP Optional.
Specifying the type of MAC addresses mapped to virtual IP addresses
After you specify the type of MAC addresses mapped to the virtual IP addresses of VRRP groups and
create a VRRP group, the master in the VRRP group uses the specified type of MAC address as the source
MAC address for sending packets and uses the specified type of MAC address to answer ARP requests
from hosts so that the hosts in the internal network can learn the mapping between the IP address and the
MAC address.
The following types of MAC addresses are available to be mapped to the virtual IP address of a VRRP
group:
• Virtual MAC address—By default, a virtual MAC address is automatically created for a VRRP group
when the VRRP group is created, and the virtual IP address of the VRRP group is mapped to the
virtual MAC address. When such a mapping is adopted, the hosts in the internal network do not
need to update the mapping between the IP address and MAC address when the master changes.
• Real MAC address of an interface—In case that an IP address owner exists in a VRRP group, if the
virtual IP address is mapped to the virtual MAC address, two MAC addresses are mapped to one
IP address. To avoid such as problem, map the virtual IP address of the VRRP group to the real MAC
address of an interface to forward the packets from a host to the IP address owner.
To specify the type of MAC addresses mapped to virtual IP addresses:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Specify the type of MAC
addresses mapped to virtual
IP addresses.
vrrp method { real-mac |
virtual-mac }
Optional.
Virtual MAC address by default.
NOTE:
Specify the type of the MAC addresses mapped to the virtual IP addresses before creating a VRRP
g
roup.
Otherwise, you cannot change the type of the MAC addresses mapped to virtual IP addresses.
Specifying the VRRP control VLAN
With VLAN termination, after a port receiving a VLAN packet, it removes its VLAN tag(s) and then
forwards it at Layer 3 or processes it in other ways. VLAN termination falls in the following categories:
• Unambiguous termination—Terminates VLAN packets from a specified VLAN only. In other words,
after receiving a packet from the specific VLAN, a port configured with unambiguous VLAN
termination removes its VLAN tag.
• Ambiguous termination—Terminates VLAN packets from multiple VLANs whose VLAN IDs are in
the specified range. In other words, after receiving a packet from a VLAN in the specified range, a
port configured with ambiguous VLAN termination removes its VLAN tag.