3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide

Configuring VRRP 235
Perform the following configuration in interface view.
By default, the security gateway does not authenticate VRRP packets.
n
For the standby groups on the same interface, you must set the same
authentication mode and authentication key.
Configuring the
Adver_Timer of VRRP
In a VRRP standby group, the master security gateway tells other security gateways
that it is alive by sending VRRP packets regularly. If no VRRP packets are received
after a specified period, the backup assumes the master has failed and changes its
state to master. The VRRP packet sending interval and the state transition of the
backup are controlled by two timers: Adver_Timer and Master_Down_Timer.
The Master_Down_Timer is about three times that of the Adver_Timer. Either
enormous traffic or difference of the timer settings on the security gateways can
result in abnormal timeout of the Master_Down_Timer, causing state transition.
One solution to this problem is to set Adver_Timer (in seconds) to a greater value
and/or configure preemption delay.
Perform the following configuration in interface view.
The adver_interval argument is in the range of 1 to 255 seconds and defaults to 1
second.
Configuring Interface
Tracking
The interface tracking function expands the backup functionality of VRRP. It
provides backup not only when the interface to which a standby group is assigned
fails but also when other interfaces on the security gateway become unavailable.
This is achieved by tracking interfaces. When a monitored interface goes down,
the priority of the security gateway owning this interface automatically decreases
by the value specified by value-reduced, allowing a higher priority security
gateway in the standby group to take over as the master.
Perform the following configuration in interface view.
Tab le 250 Configure the authentication mode and authentication key
Operation Command
Configure the authentication mode and
authentication key.
vrrp authentication-mode { md5 key |
simple key }
Restore the default. undo vrrp authentication-mode
Tab le 251 Configure the Adver_Timer of VRRP
Operation Command
Configure the Adver_Timer of VRRP.
vrrp vrid virtual-router-ID timer advertise
adver-interval
Restore the default.
undo vrrp vrid virtual-router-ID timer
advertise