HP VPN Firewall Appliances High Availability Configuration Guide

22
Creating a VRRP group and configuring a virtual IPv6 address
When creating a VRRP group, configure a virtual IPv6 address for the VRRP group. You can configure
multiple virtual IPv6 addresses for a VRRP group.
A VRRP group is automatically created when you specify the first virtual IPv6 address for the VRRP group.
If you specify another virtual IPv6 address for the VRRP group later, the virtual IPv6 address is added to
the virtual IPv6 address list of the VRRP group.
Configuration prerequisites
Before creating a VRRP group and configuring a virtual IPv6 address on an interface, configure an IPv6
address for the interface and make sure that it is in the same network segment as the virtual IPv6 address
to be configured.
Configuration guidelines
• When a router is the IP address owner in a VRRP group, HP recommends not using the IPv6 address
of the interface (virtual IPv6 address of the VRRP group) to establish an OSPFv3 neighbor
relationship with the adjacent router, that is, not using the ospfv3 area command to enable OSPFv3
on the interface. For more information about ospfv3 area command, see Network Management
Command Reference.
• The maximum number of VRRP groups on an interface and the maximum number of virtual IPv6
addresses in a VRRP group are both 16.
• A VRRP group is removed after you remove all the virtual IPv6 addresses in it. In addition,
configurations on that VRRP group do not take effect any longer.
• Removal of the VRRP group on the IP address owner causes IP address collision. To resolve the
collision, change the IPv6 address of the interface on the IP address owner first and then remove the
VRRP group from the interface.
Configuration procedure
To create a VRRP group and configure its virtual IPv6 address:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter the specified interface
view.
interface interface-type
interface-number
N/A
3. Create a VRRP group and
configure its virtual IPv6
address, which is a link local
address.
vrrp ipv6 vrid virtual-router-id
virtual-ip virtual-address link-local
No VRRP group is created by
default.
The first virtual IPv6 address of the
VRRP group must be a link local
address. Only one link local
address is allowed in a VRRP
group, and must be removed the
last.
4. Configure the VRRP group
with a virtual IPv6 address,
which is a global unicast
address.
vrrp ipv6 vrid virtual-router-id
virtual-ip virtual-address
Optional.
By default, no global unicast
address is configured as the virtual
IPv6 address of a VRRP group.