BLADE OS™ Application Guide HP GbE2c Ethernet Blade Switch for c-Class BladeSystem Version 5.1 Advanced Functionality Software
Table Of Contents
- Contents
- Figures
- Tables
- Preface
- Part 1: Basic Switching
- Accessing the Switch
- The Management Network
- Local Management Using the Console Port
- The Command Line Interface
- Remote Management Access
- Client IP Address Agents
- Securing Access to the Switch
- Setting Allowable Source IP Address Ranges
- RADIUS Authentication and Authorization
- TACACS+ Authentication
- LDAP Authentication and Authorization
- Secure Shell and Secure Copy
- Configuring SSH/SCP Features on the Switch
- Configuring the SCP Administrator Password
- Using SSH and SCP Client Commands
- SSH and SCP Encryption of Management Messages
- Generating RSA Host and Server Keys for SSH Access
- SSH/SCP Integration with Radius Authentication
- SSH/SCP Integration with TACACS+ Authentication
- End User Access Control
- Ports and Trunking
- Port-Based Network Access Control
- VLANs
- Spanning Tree Protocol
- RSTP and MSTP
- Link Layer Discovery Protocol
- Quality of Service
- Accessing the Switch
- Part 2: IP Routing
- Basic IP Routing
- Routing Information Protocol
- IGMP
- OSPF
- OSPF Overview
- OSPF Implementation in BLADE OS
- OSPF Configuration Examples
- Remote Monitoring
- Part 3: High Availability Fundamentals
- High Availability
- Layer 2 Failover
- Server Link Failure Detection
- VRRP Overview
- Failover Methods
- BLADE OS Extensions to VRRP
- Virtual Router Deployment Considerations
- High Availability Configurations
- High Availability
- Part 4: Appendices
- Index
BLADE OS 5.1 Application Guide
BMD00113, September 2009 Chapter 14: High Availability 239
VRRP Overview
In a high-availability network topology, no device can create a single point-of-failure for the
network or force a single point-of-failure to any other part of the network. This means that your
network will remain in service despite the failure of any single device. To achieve this usually
requires redundancy for all vital network components.
VRRP enables redundant router configurations within a LAN, providing alternate router paths for a
host to eliminate single points-of-failure within a network. Each participating VRRP-capable
routing device is configured with the same virtual router IP address and ID number. One of the
virtual routers is elected as the master, based on a number of priority criteria, and assumes control of
the shared virtual router IP address. If the master fails, one of the backup virtual routers will take
control of the virtual router IP address and actively process traffic addressed to it.
With VRRP, Virtual Interface Routers (VIR) allow two VRRP routers to share an IP interface
across the routers. VIRs provide a single Destination IP (DIP) for upstream routers to reach various
servers, and provide a virtual default Gateway for the server blades.
VRRP Components
Each physical router running VRRP is known as a VRRP router.
Virtual Router
Two or more VRRP routers can be configured to form a virtual router (RFC 2338). Each VRRP
router may participate in one or more virtual routers. Each virtual router consists of a
user-configured virtual router identifier (VRID) and an IP address.
Virtual Router MAC Address
The VRID is used to build the virtual router MAC Address. The five highest-order octets of the
virtual router MAC Address are the standard MAC prefix (00-00-5E-00-01) defined in RFC 2338.
The VRID is used to form the lowest-order octet. For virtual routers with a VRID greater than 255,
the MAC addresses block 00:0F:6A:9A:40:00 through 00:0F:6A:9A:47:FF is allocated.
Owners and Renters
Only one of the VRRP routers in a virtual router may be configured as the IP address owner. This
router has the virtual router’s IP address as its real interface address. This router responds to packets
addressed to the virtual router’s IP address for ICMP pings, TCP connections, and so on.
There is no requirement for any VRRP router to be the IP address owner. Most VRRP installations
choose not to implement an IP address owner. For the purposes of this chapter, VRRP routers that
are not the IP address owner are called renters.