hp a-msr router series high availability command reference

7/29/2019 HP a-MSR Router Series High Availability Command Reference

1/76

HP A-MSR Router SeriesHigh Availability

Command Reference

Abstract

This document describes the commands and command syntax options available for the HP A Seriesproducts.

This document is intended for network planners, field technical support and servicing engineers, andnetwork administrators who work with HP A Series products.

Part number: 5998-2049

Software version: CMW520-R2207P02

Document version: 6PW100-20110810


2/76

Legal and notice information

Copyright 2011 Hewlett-Packard Development Company, L.P.

No part of this documentation may be reproduced or transmitted in any form or by any means withoutprior written consent of Hewlett-Packard Development Company, L.P.

The information contained herein is subject to change without notice.

HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS

MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITYAND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors containedherein or for incidental or consequential damages in connection with the furnishing, performance, or useof this material.

The only warranties for HP products and services are set forth in the express warranty statementsaccompanying such products and services. Nothing herein should be construed as constituting anadditional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.


3/76

iii

Contents

BFD configuration commands 1bfd authentication-mode 1bfd detect-multiplier 2bfd echo-source-ip 2bfd min-echo-receive-interval 3bfd min-receive-interval 3bfd min-transmit-interval 4bfd multi-hop destination-port 5bfd session init-mode 5display bfd debugging-switches 6display bfd interface 6display bfd session 8reset bfd session statistics 10snmp-agent trap enable bfd 10

Interface backup configuration commands 11display standby flow 11 display standby state 12standby bandwidth 14standby interface 15standby threshold 16standby timer delay 17standby timer flow-check 17standby timer startup 18standby track 19

Track configuration commands 20display track 20track bfd echo 22

track nqa 23track interface 24track interface protocol 25

VRRP configuration commands 27Common VRRP configuration commands 27

vrrp mode 27IPv4-based VRRP configuration commands 28

display vrrp 28display vrrp statistics 35reset vrrp statistics 39vrrp method 39vrrp un-check ttl 40vrrp vrid authentication-mode 41vrrp vrid preempt-mode 42vrrp vrid priority 43 vrrp vrid timer advertise 43vrrp vrid track 44 vrrp vrid track interface 45 vrrp vrid virtual-ip 46vrrp vrid weight track 47

IPv6-based VRRP configuration commands 48


4/76

iv

display vrrp ipv6 48display vrrp ipv6 statistics 56reset vrrp ipv6 statistics 60vrrp ipv6 method 60vrrp ipv6 vrid authentication-mode 61vrrp ipv6 vrid preempt-mode 62vrrp ipv6 vrid priority 63vrrp ipv6 vrid timer advertise 63vrrp ipv6 vrid track 64

vrrp ipv6 vrid track interface 65vrrp ipv6 vrid virtual-ip 66vrrp ipv6 vrid weight track 67

Support and other resources 69Contacting HP 69

Subscription service 69Related information 69

Documents 69Websites 69

Conventions 70Index 72


5/76

1

BFD configuration commands

bfd authentication-mode

DescriptionUse bfd authentication-mode to configure the BFD authentication mode on the interface.

Use undobfd authentication-mode to restore the default.

By default, no authentication is configured on an interface.

NOTE:

The authentication mode, key-id, and key (or password) used by both ends trying to establish a BFDsession must be the same. If one end changes its authentication mode, it sends the authenticationpackets in both the new and the old mode at the same time until the other end changes to the sameauthentication mode.

Syntax

bfd authentication-mode { md5 key-id key|sha1 key-id key| simple key-id password}

undobfd authentication-mode

View

Interface view

Default level

2: System level

Parameters

md5: Uses MD5 authentication.

sha1: Uses SHA-1 authentication.

simple: Uses plaint text authentication.

key-id: Authentication key ID, ranging from1 to 255.

key: A string of 1 to 16 characters. It is displayed as a 24-byte cipher text string when the display current-configuration command is executed.

password: Password, a string of 1 to 16 characters when the simple keyword is used. It is displayed whenthe display current-configuration command is executed.

Examples# Configure Ethernet 1/1 to support MD5 authentication, setting the authentication key-id to 15 and theauthentication key to BfdKey.

system-view

[Sysname] interface ethernet 1/1

[Sysname-Ethernet1/1] bfd authentication-mode md5 15 BfdKey


6/76

2

bfd detect-multiplierDescription

Use bfd detect-multiplierto configure the detection time multiplier.

Use undobfd detect-multiplierto restore the default.

The default is 5.

Syntaxbfd detect-multipliervalue

undobfd detect-multiplier

View

Interface view

Default level

2: System level

Parameters

value: Detect time multiplier, ranging from 3 to 50.Examples

# Configure the detection time multiplier as 6 on Ethernet 1/1.

system-view


[Sysname-Ethernet1/1] bfd detect-multiplier 6

bfd echo-source-ipDescription

Use bfd echo-source-ip to configure the source IP address of BFD echo packets.Use undo bfd echo-source-ip to remove the configured source IP address of BFD echo packets.

Do not configure the source IP address of BFD echo packets to belong to the same network segment asany of the interface addresses of the device. Otherwise, a large amount of ICMP redirect packets may besent by the remote device, causing network congestion.

Syntax

bfd echo-source-ip ip-address

undo bfd echo-source-ip

View

System view

Default level

2: System level

Parameters

ip-address: Source IP address of BFD echo packets.

Examples

# Configure the source IP address of echo packets as 10.1.1.1.


7/76

3

system-view

[Sysname] bfd echo-source-ip 10.1.1.1

bfd min-echo-receive-intervalDescription

Use bfd min-echo-receive-interval to configure the minimum echo packet receiving interval on the

interface.Use undobfd min-echo-receive-interval to restore the default minimum echo packet receiving interval onthe interface.

By default, the minimum echo packet receiving interval is 400 milliseconds.

Syntax

bfd min-echo-receive-intervalvalue

undo bfd min-echo-receive-interval

View

Interface view

Default level

2: System level

Parameters

value: Minimum echo receiving interval, in milliseconds. The value ranges from 200 to 1000 and must bea multiple of 100.

Examples

# Configure the minimum echo receiving interval on Ethernet 1/1 as 500 milliseconds.

system-view


[Sysname-Ethernet1/1] bfd min-echo-receive-interval 500

bfd min-receive-intervalDescription

Use bfd min-receive-interval to configure the minimum interval for receiving BFD control packets.

Use undo bfd min-receive-interval to restore the default minimum interval for receiving BFD controlpackets.

By default, the minimum interval for receiving BFD control packets is 400 milliseconds.

If the remote device sends BFD control packets at an interval shorter than the minimum receiving intervalof the local device, the remote device changes its sending interval to the minimum receiving interval of thelocal device.

Syntax

bfd min-receive-interval value

undobfd min-receive-interval

View

Interface view


8/76

4

Default level

2: System level

Parameters

value: Minimum interval for receiving BFD control packets, in milliseconds. The value ranges from 200 to1000 and must be a multiple of 100.

Examples

# Configure the minimum interval for receiving BFD control packets on Ethernet 1/1 as 500 milliseconds. system-view


[Sysname-Ethernet1/1] bfd min-receive-interval 500

bfd min-transmit-intervalDescription

Use bfd min-transmit-interval to configure the minimum interval for transmitting BFD control packets.

Use undobfd min-transmit-interval to restore the default minimum interval for transmitting BFD control

packets.By default, the minimum interval for transmitting BFD control packets is 400 milliseconds.

A proper interval ensures that the BFD control packets are not transmitted faster than the device can dealwith them. The actual interval for transmitting BFD control packets at the local device should be thegreater between the minimum interval for sending BFD control packets configured on the local interfaceand the minimum interval for receiving BFD control packets on the remote device.

Syntax

bfd min-transmit-interval value

undobfd min-transmit-interval

ViewInterface view

Default level

2: System level

Parameters

value: Minimum interval for transmitting BFD control packets, in milliseconds. The value ranges from 200to 1000 and must be a multiple of 100.

Examples

# Configure the minimum interval for transmitting BFD control packets on Ethernet 1/1 as 500

milliseconds. system-view


[Sysname-Ethernet1/1] bfd min-transmit-interval 500


9/76

5

bfd multi-hop destination-portDescription

Use bfd multi-hop destination-port to configure the destination port number for multi-hop BFD controlpackets as 3784 or 4784.

Use undobfd multi-hop destination-port to restore the default.

By default, the destination port number for multi-hop BFD control packets is 4784.Syntax

bfd multi-hop destination-port port-number

undo bfd multi-hop destination-port

View

System view

Default level

2: System level

Parameters

port-number: Destination port number of multi-hop BFD control packets, 3784 or 4784.

Examples

# Configure the destination port number for multi-hop BFD control packets as 3784.

system-view

[Sysname] bfd multi-hop destination-port 3784

bfd session init-modeDescription

Use bfd session init-mode to configure the mode for establishing a BFD session.Use undobfd session init-mode to restore the default.

By default, BFD uses active mode.

Syntax

bfd session init-mode {active|passive}

undobfd session init-mode

View

System view

Default level

2: System level

Parameters

active: Uses active mode. In active mode, BFD actively transmits BFD control packets to the remote device.

passive: Uses passive mode. In passive mode, BFD does not actively transmit a BFD control packet to theremote end. It transmits a BFD control packet only after receiving a BFD control packet from the remoteend.


10/76

6

Examples

# Configure the session establishment mode as passive.

system-view

[Sysname] bfd session init-mode passive

display bfd debugging-switches

DescriptionUse display bfd debugging-switches to display enabled BFD debugging switches.

Syntax

display bfd debugging-switches [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

|: Filters command output by specifying a regular expression. For more information about regularexpressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Examples

# Display enabled BFD debugging switches.

display bfd debugging-switches

BFD Error debugging is on

BFD Event debugging is on

BFD FSM debugging is on

BFD Packet Receive debugging is on

BFD Packet Send debugging is on

BFD SCM debugging is on

BFD Timer debugging is on

display bfd interface

DescriptionUse display bfd interface to display information about BFD-enabled interfaces.

Syntax

display bfd interface [verbose] [ | { begin | exclude | include } regular-expression ]

View

Any view


11/76

7

Default level

1: Monitor level

Parameters

verbose: Displays detailed interface information.






Examples

# Display information about BFD-enabled interfaces.

display bfd interface

Total Interface Num: 1

Interface: Serial2/1 Session Num: 1

Min Trans Inter: 200ms Min Recv Inter: 200ms

DetectMult: 3 Min Echo Recv Inter: 400ms

Auth mode: Simple

# Display detailed information about BFD-enabled interfaces.

display bfd interface verbose

Total Interface Num: 1

Interface: Serial2/1 Session Num: 1

Min Trans Inter: 200ms Min Recv Inter: 200ms

DetectMult: 3 Min Echo Recv Inter: 400ms

Auth mode: Simple

LD/RD SourceAddr DestAddr ConnType State Mode

2/2 192.168.11.11 192.168.11.10 Direct Up Ctrl

Table 1Output descriptionField Description

Interface Interface name

Session Num Number of sessions established on the local interface

Min Trans InterMinimum control packet transmit interval configured on theinterface

Min Recv InterMinimum control packet receive interval configured on theinterface

DetectMult Detection time multiplier


12/76

8

Field Description

Min Echo Recv InterMinimum echo packet receive interval configured on theinterface

Auth mode Session authentication mode: simple, MD5, or SHA-1LD Local ID of the sessionRD Remote ID of the sessionSourceAddr Source IP address of the sessionDestAddr Destination IP address of the sessionConnType Connection type of the interfaceState Session state

Mode

Working mode of the session:

Control (Ctrl) Echo (Echo)

display bfd sessionDescription

Use display bfd session to display BFD session information.

Syntax

display bfd session [verbose] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor levelParameters

verbose: Displays detailed session information.






Examples

# Display detailed BFD session information on the device.

display bfd session verbose

Total session number: 1 Up session number: 1 Init mode: Active

Session working under Ctrl mode:


13/76

9

Local Discr: 1 Remote Discr: 1

Source IP: 111.1.1.1 Destination IP: 111.1.1.2

Session State: Up Interface: Ethernet1/1

Min Trans Inter: 400ms Act Trans Inter: 400ms

Min Recv Inter: 400ms Act Detect Inter: 2000ms

Recv Pkt Num: 18 Send Pkt Num: 18

Hold Time: 1900ms Connect Type: Direct

Running Up for: 00:56:25 Auth mode: None

Protocol: OSPF

Diag Info: No Diagnostic


Total session number Total number of BFD sessions.Up session number Total number of active BFD sessions.

Init mode

BFD operating mode:

Active .

Passive.

Session working under xxmode

BFD session mode:

CtrlControl packet mode. EchoEcho mode.

Local Discr Local ID of the session.Remote Discr Remote ID of the session.Source IP Source IP address of the session.Destination IP Destination IP address of the session.Session State Session state.Interface Name of the interface of the session.Min Trans Inter Expected minimum transmit interval configured on the interface.Min Recv Inter Expected minimum receive interval configured on the interface.

Act Trans Inter Actual transmit interval.Act Detect Inter Actual session detection timer.Recv Pkt Num Number of packets received.Send Pkt Num Number of packets sent.Hold Time Length of time before the session detection timer expires.

Auth mode

Session authentication mode:

Simple. MD5. SHA-1.

Connect Type Connection type of the interface.Running up for Time interval for which the session has been up.

Protocol Registered protocol.


14/76

10

Field Description

Diag Info Diagnostic information about the session.

reset bfd session statisticsDescription

Use reset bfd session statistics to clear the BFD session statistics.

Syntax

reset bfd session statistics

View

User view

Default level

1: Monitor level

Parameters

NoneExamples

# Clear statistics about all the BFD sessions.

reset bfd session statistics

snmp-agent trap enable bfdDescription

Use snmp-agent trap enable bfd to enable sending BFD traps.

Use undosnmp-agent trap enable bfd to disable sending BFD traps.

By default, sending BFD traps is enabled.

Syntax

snmp-agent trap enable bfd

undosnmp-agent trap enable bfd

View

System view

Default level

3: Manage level

Parameters

None

Examples

# Disable sending BFD traps.

system-view

[Sysname] undo snmp-agent trap enable bfd


15/76

11

Interface backup configuration commands

display standby flowDescription

Use display standby flow to display statistics about traffic on the active interfaces participating in loadbalancing.

Syntax

display standby flow [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor levelParameters






Examples

# Display statistics about the traffic on the active interface participating in load balancing.

display standby flow

Interfacename : Serial2/0

Flow-interval(s) : 100

LastInOctets : 868168

LastOutOctets : 1818667

InFlow(Octets) : 50070

OutFlow(Octets) : 100088

BandWidth(b/s) : 9000

UsedBandWidth(b/s) : 8000


Interfacename Name of the active interface.

Flow-interval(s) Intervals for checking traffic on the active interface.

LastInOctetsSum of the octets received on the active interface until the lastcheck.


16/76

12

Field Description

LastOutOctetsSum of the octets sent on the active interface until the lastcheck.

InFlow(Octets)Sum of the octets received on the active interface during thelast interval.

OutFlow(Octets)Sum of the octets sent on the active interface during the lastinterval.

BandWidth(b/s) Bandwidth of the active interface.

UsedBandWidth(b/s)Actual bandwidth for the active interface participating in loadbalancing during the last interval.

display standby stateDescription

Use display standby state to display the state information of the active and standby interfaces.

Syntaxdisplay standby state [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters






Examples

# Display the state information of the active and standby interfaces.

display standby state

Interface Interfacestate Standbystate Standbyflag Pri Loadstate

Ethernet1/1 UP MUP MUD TO-HYPNOTIZE

Ethernet1/2 STANDBY STANDBY BU 30

Ethernet1/3 STANDBY STANDBY BU 20

Backup-flag meaning:

M---MAIN B---BACKUP V---MOVED U---USED

D---LOAD P---PULLED


17/76

13

The following tables describe the meanings of each state:

Table 4States of active and standby interfacesState Active interface Standby interface

UPIndicates that the physical link is functioning normally for datatransmission.

DOWN Indicates that the physical link is not available for data transmission, forexample, because no cable connection is present.

STANDBY

The state of the standby interfaceswhen the active interface isfunctioning. Data transmission isdisabled.

Table 5Backup state of the active interfaceState Description

MUP The active interface is working normally for data transmission.

MUPDELAYThe active interface is experiencing a delay before it transits fromnon-working state to working state. The standby interface is stillactive.

MDOWNThe active interface cannot work normally. A standby interface mustbe brought up to take over.

MDOWNDELAYThe active interface is experiencing a delay before it transits fromworking state to non-working state. The standby interface does notreally take over the job of the active interface.

Table 6Backup state of a standby interfaceState DescriptionUP State of the standby interface when it is enabled.

UPDELAYThe standby interface is experiencing a delay before it transits fromnon-working state to working state.

DOWN The standby interface cannot work normally.

DOWNDELAYThe standby interface is experiencing a delay before it transits fromworking state to non-working state. The standby interface is mostlikely still working.

STANDBYState of the standby interface when the active interface is working.

At The standby interface cannot send or receive data.

Table 7Backup flagsFlag Description

M---MAIN Indicates an active interface.

B---BACKUP Indicates a standby interface.

V---MOVEDIndicates that the interface is removed (the active interface isremoved, or all standby interfaces are removed).


18/76

14

Flag Description

U---USEDIndicates that the interface is being used as an active interface orstandby interface.

D---LOAD Indicates that the active interface participates in load balancing.

P---PULLEDIndicates that the interface board where the interface is located isremoved.

Table 8Load balancing statesState Description

WAKEThe active interface is transiting from working state to non-workingstate. The standby interface is working in load balancing state totransmit data together with the active interface.

TO-HYPNOTIZEThe standby interface is transiting from working state to non-workingstate after the traffic size decreases below the lower backup loadbalancing threshold. The standby interface is still working.

TO-WAKEThe standby interface is transiting from non-working state to workingstate after the traffic size increases above the upper backup loadbalancing threshold.

NullState other than WAKE, TO-HYPNOTIZE, and TO-WAKE. The valuefor the loadstate field is null.

standby bandwidthDescription

Use standby bandwidth to configure the active interface bandwidth used for setting the thresholds.

Use undo standby bandwidth to restore the default.By default, the available bandwidth used for setting the thresholds is 0 kbps.

NOTE:

Use this command after standby interfaces are specified. If the available bandwidth used for setting the thresholds is 0 kbps (the default value), the interface backup

module automatically obtains the actual bandwidth of the active interface to set the thresholds.

If the available bandwidth configured for setting the thresholds exceeds the actual bandwidth on the interface,load balancing does not take effect.

Related commands: standby interface.

Syntax

standby bandwidthsize

undo standby bandwidth

View

Interface view


19/76

15

Default level

2: System level

Parameters

size: Specifies the active interface bandwidth used for setting the thresholds, ranging from 0 to4,000,000 kbps.

Examples# Configure the available bandwidth used for setting the thresholds on active interface Serial 2/0 forload balancing as 10,000 kbps.

system-view

[Sysname] interface serial 2/0

[Sysname-Serial2/0] standby bandwidth 10000

standby interfaceDescription

Use standby interface to specify a standby interface for the current interface.

Use undo standby interface to remove the specified standby interface.

By default, no standby interface is specified.

This command and standby interface command cannot be configured at the same time. In other words, ifyou have configured standby interface command on the active interface, you cannot configure standbytrack command on both the active interface and its standby interface. If you have associated an interfacewith a track entry, you cannot configure the interface as the active interface or a standby interface.

Related commands: standby track.

Syntax

standby interface interface-type interface-number[ priority ]

undo standby interface interface-type interface-number

View

Interface view

Default level

2: System level

Parameters

interface-type interface-number: Specifies an interface by its type and number.

priority: Specifies the priority of a standby interface, which ranges from 0 to 255 and defaults to 0. The

greater the value, the higher the priority.Examples

# Specify interface Serial 2/1 to back up interface Serial 2/0, and assign it the priority of 50.

system-view


[Sysname-Serial2/0] standby interface serial 2/1 50


20/76

16

standby thresholdDescription

Use standby threshold to configure load balancing thresholds.

Use undo standby threshold to restore the default.

By default, load balancing threshold is disabled.Backup/load balancing works as follows:

If the available bandwidth used for setting the thresholds is 0 kbps (the default value), the interfacebackup module automatically obtains the actual bandwidth of the active interface to set thethresholds. If the available bandwidth configured for setting the thresholds exceeds the actualbandwidth on the interface, load balancing does not take effect.

When the traffic on the active interface increases above the enable-threshold, the standby interfacestarts to participate in load balancing, and when the traffic on the active interface decreases belowthe disable-threshold, the standby interface frequently switches its state from up and down. To avoidproblems, set the disable-threshold lower than half of the enable-threshold.

Use standby threshold command only on active interfaces and only after the standby interfaces arespecified.

Related commands: standby interface and standby bandwidth.

Syntax

standby threshold enable-threshold disable-threshold

undo standby threshold

View

Interface view

Default level

2: System level

Parameters

enable-threshold: Specifies the upper load balancing threshold. It indicates the percentage of theavailable active-interface bandwidth that the traffic load must exceed for the standby interface to come upfor load balancing. The value ranges from1 to 99.

disable-threshold: Specifies the lower load balancing threshold. It indicates the percentage of theavailable active-interface bandwidth that the traffic load must be less than for the standby interface inload balancing to shut down. The value ranges from1 to 99. The disable-threshold must be smaller thanthe enable-threshold.

Examples

# Configure the enable-threshold of load balancing on interface Serial 2/0 as 80 and the disable-threshold as 20.

system-view


[Sysname-Serial2/0] standby threshold 80 20


21/76

17

standby timer delayDescription

Use standby timer delay to set switchover delays on the interface.

Use undo standby timer delay to restore the default.

By default, switchover delays on the active and standby interfaces are 0, indicating immediate switchwithout any delay.

This command sets the delay timer for a standby interface to startup when the active interface is downand the delay timer for a standby interface to be disabled after the active interface is recovered.

This command must be executed after standby interfaces are specified.


Syntax

standby timer delay enable-delay disable-delay

undo standby timer delay

ViewInterface view

Default level

2: System level

Parameters

enable-delay: Specifies switchover delay from the active interface to the standby interface. The valueranges from 0 to 65,535 seconds.

disable-delay: Specifies switchover delay from the standby interface to the active interface. The valueranges from 0 to 65,535 seconds.

Examples

# Configure interface Serial 2/1 to use interface Serial 2/0 for backup and to experience 10 seconds ofdelay before switchover.

system-view


[Sysname-Serial2/0] standby interface serial 2/1

[Sysname-Serial2/0] standby timer delay 10 10

standby timer flow-check

DescriptionUse standby timer flow-check to configure the interval for checking the traffic size on the active interface.

Use undo standby timerflow-check to restore the default.

By default, the interval for checking the traffic size on the active interface is 30 seconds.

NOTE:

Use this command after standby interfaces are specified.


22/76

18


Syntax

standby timer flow-checkinterval

undo standby timer flow-check

View

Interface view

Default level

2: System level

Parameters

interval: Specifies flow check interval, ranging from30 to 600 seconds.

Examples

# Configure load balancing, backup bandwidth, and flow check interval on interface Serial 2/0 as 60seconds.

system-view


[Sysname-Serial2/0] standby timer flow-check 60

standby timer startupDescription

Use standby timer startup to set the delay timer for the backup function to take effect on system startup.

Use undo standby timer startup to restore the default.

By default, the backup function takes effect after a delay of 30 seconds.

This command takes effect on all standby interfaces working in active/backup mode and does not takeeffect on the standby interfaces working in load balancing mode.

Syntax

standby timer startup seconds

undo standby timer startup

View

System view

Default level

2: System level

Parameters

seconds: Specifies the delay timer for the backup function to take effect on system startup, which rangesfrom 0 to 65,535 seconds.

Examples

# Set the delay timer for the backup function to take effect on system startup to 40 seconds.

system-view

[Sysname] standby timer startup 40


23/76

19

standby trackDescription

Use standby track to associate an interface with a track entry.

Use undo standby track to remove the association.

By default, an interface is not associated with a track entry.This command and the standby interface command cannot be configured at the same time. In otherwords, if you have configured the standby interface command on the active interface, you cannotconfigure the standby track command on both the active interface and its standby interface. If you haveassociated an interface with a track entry, you cannot configure the interface as the active interface orstandby interface.

One interface can be associated with one track entry. If you execute this command repeatedly on oneinterface, the new configuration will overwrite the original one.

You can associate an interface with a nonexistent track entry. The track function can take effect after thetrack entry is created with the track command.

Related commands: standby interface and track.Syntax

standby track track-entry-number

undo standby track

View

Interface view

Default level

2: System level

Parameters

track-entry-number: Specifies a track entry to be monitored by its number, ranging from1 to 1024.

Examples

# Configure interface Serial 2/0 to be associated with track entry 1.

system-view


[Sysname-Serial2/0] standby track 1


24/76

20

Track configuration commands

display trackDescription

Use displaytrack to display track entry information.

Syntax

displaytrack { track-entry-number| all } [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

track-entry-number: Displays information about the specified track entry, ranging from 1 to 1024.

all: Displays information about all track entries.





regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.Example

# Display information about all track entries.

display track all

Track ID: 1

Status: Positive (notify 13 seconds later)

Duration: 0 days 0 hours 0 minutes 7 seconds

Notification delay: Positive 20, Negative 30 (in seconds)

Reference object:

NQA entry: admin test

Reaction: 10Track ID: 2

Status: Invalid



Reference object:

BFD session:

Packet type: Echo

Interface : Vlan-interface2


25/76

21

Remote IP : 192.168.40.1

Local IP : 192.168.40.2

Track ID: 3

Status: Negative



Reference object:

Track interface :

Interface status : Inserted

Interface : Vlan-interface3

Protocol : IPv4

Table 9Command outputField Description

Track ID ID of a track entry.

Status

Status of a track entry:

PositiveThe tracked object functions normally. InvalidThe tracked object is invalid. NegativeThe tracked object is abnormal.

Notify 13 seconds laterThe track module notifies the application modules of the track entry statechange 13 seconds later. The information is not displayed after the trackmodule notifies the application modules.

Duration Time period during which the track entry stays in the current state.

Notification delay: Positive 20,Negative 30 (in seconds)

The track module notifies the application modules that the status of thetrack entry changes to Positive after a delay time of 20 seconds.

The track module notifies the application modules that the status of thetrack entry changes to Negative after a delay time of 30 seconds.

Reference object The tracked object associated with the track entry.

NQA entry The NQA test group associated with the track entry.

Reaction The reaction entry associated with the track entry.

BFD session Information about the BFD session associated with the track entry.

Packet type Type of BFD session packets, which can only be Echo.

Interface Outgoing interface of BFD echo packets.

Remote IP Remote IP address of the BFD echo packets.

Local IP Local IP address of the BFD echo packets.

Track interface Information of the interface associated with the track entry.

Interface status

Interface status takes one of the following values:

Inserted. Removed.

Interface Interface to be monitored.

ProtocolPhysical status or Layer 3 protocol status of the monitored interface:

NonePhysical status of the monitored interface.


26/76

22

IPv4IPv4 protocol status of the monitored Layer 3 interface. IPv6IPv6 protocol status of the monitored Layer 3 interface.

track bfd echoDescription

Use track bfd echo to create a track entry, associate it with the BFD session, specify to use echo packetsin BFD probes, and specify the delay time for the track module to notify the application modules whenthe status of the track entry changes.

Use undo track to remove the track entry.

By default, no track entry exists.

After a track entry is created, you cannot change its settings except the delay time. To change the delaytime for this track entry, use track bfd echo delay command. To modify other settings of this track entry,first delete the entire track entry, and then create a new track entry.

When configuring collaboration between track and BFD, do not configure the virtual IP address of a

VRRP group as the local or remote address of a BFD session.Related commands: displaytrack.

Syntax

track track-entry-number bfd echo interface interface-type interface-number remote ip remote-ip local iplocal-ip[ delay { negativenegative-time| positivepositive-time} * ]

undo track track-entry-number

View

System view

Default level

2: System level

Parameters

track-entry-number: Specifies a track entry ID, ranging from 1 to 1024.

interface interface-type interface-number: Specifies an outgoing interface by its type and number for BFDecho packets.

remote ip remote-ip: Specifies the destination IP address of BFD echo packets.

local ip local-ip: Specifies the source IP address of BFD echo packets.

delay: Specifies that the track module notifies the application modules of the track entry status changeafter a specific delay time. If this keyword is not provided, the track module notifies the applicationmodules immediately when the track entry status changes.

negativenegative-time: Specifies the delay time for the track module to notify the application modulesthat the status of the track entry changes to Negative. The negative-timeargument represents the delaytime in seconds, ranging from 1 to 300.

positivepositive-time: Specifies the delay time for the track module to notify the application modules thatthe status of the track entry changes to Positive. The positive-timeargument represents the delay time inseconds, ranging from 1 to 300.


27/76

23

Examples

# Create track entry 1 that uses BFD to monitor the link between local IP address 192.168.40.2 andremote IP address 192.168.40.1 by sending BFD echo packets.

system-view

[Sysname] track 1 bfd echo interface ethernet 1/1 remote ip 192.168.40.1 local ip

192.168.40.2

track nqaDescription

Use track nqa to create a track entry, associate it with the specified reaction entry of the NQA test group,and specify the delay time for the track module to notify the application modules when the status of thetrack entry changes.



After a track entry is created, you cannot change its settings except the delay time. To change the delay

time, use track nqa delay command. To modify other settings of this track entry, first delete the entire trackentry, and then create a new track entry.

Related commands: display track; nqa and reaction (see Network Management and MonitoringCommand Reference).

Syntax

track track-entry-number nqa entry admin-name operation-tag reaction item-number [ delay { negativenegative-time| positivepositive-time} * ]


View

System viewDefault level

2: System level

Parameters


entry admin-name operation-tag: Specifies the NQA test group to be associated with the track entry. Thename of the NQA test group administrator who creates the NQA operation, admin-name is a case-insensitive string of 1 to 32 characters. The NQA operation tag, operation-tag is a case-insensitive stringof 1 to 32 characters.

reaction item-number: Specifies the reaction entry to be associated with the track entry. The item-numberargumentis the reaction entry ID, ranging from 1 to 10.

delay: Specifies that the track module notifies the application modules of the track entry status changeafter a specific delay time. If this keyword is not provided, the track module immediately notifies theapplication modules when the track entry status changes.



28/76

24

positivepositive-time: Specifies the delay time for the track module to notify the application modules thatthe status of the track entry changes to Positive. The positive-timeargument represents the delay time inseconds, ranging from 1 to 300s.

Examples

# Create track entry 1 and associate it with reaction entry 3 of the NQA test group (admin-test).

system-view

[Sysname] track 1 nqa entry admin test reaction 3

track interfaceDescription

Use track interface to create a track entry, associate it with the physical status of a specific interface, andspecify the delay time for the track module to notify the application modules when the status of the trackentry changes.


By default, no track entry to be associated with the physical status of a specific interface is created.

After a track entry is created, you cannot change its settings except the delay time. To change the delaytime, use track interface delay command. To modify other settings of this track entry, first delete the entiretrack entry, and then create a new track entry.

When a track entry to be associated with the physical status of a specific interface is created, the status ofthe track entry is Positive if the physical status of the interface is up. The status of the track entry isNegative if the physical status of the interface is down. To view the physical status of an interface, usedisplay ip interface brief command.

Related commands: display track; display ip interface brief (see, Layer 3IP Services CommandReference).

Syntax

track track-entry-number interface interface-type interface-number [ delay { negative negative-time |positivepositive-time} * ]


View

System view

Default level

2: System level

Parameters

track-entry-number: Specifies a track entry ID, ranging from 1 to 1024.interface-type interface-number: Specifies an interface by its type and number.




29/76

25


Examples

# Create track entry 1 and associate it with the physical status of interface Ethernet 1/1.

system-view

[Sysname] track 1 interface ethernet 1/1

track interface protocolDescription

Use track interface protocol to create a track entry, associate it with the protocol status of a specificinterface, and specify the delay time for the track module to notify the application modules when thestatus of the track entry changes.



After a track entry is created, you cannot change its settings except the delay time. To change the delaytime, use track interface protocol delay command. To modify other settings of this track entry, first deletethe entire track entry, and then create a new track entry.

Related commands: display track; display ip interface brief (see Layer 3IP Services CommandReference); display ipv6 interface (see Layer 3IP Services Command Reference).

Syntax

track track-entry-number interface interface-type interface-number protocol { ipv4 | ipv6 } [ delay {negativenegative-time| positivepositive-time} * ]


ViewSystem view

Default level

2: System level

Parameters


interface-type interface-number: Specifies an interface by its type and number.

ipv4: Monitors the IPv4 protocol status. When the IPv4 protocol status of an interface is up, the status ofthe track object is Positive. When the IPv4 protocol status of an interface is down, the status of the track

object is Negative. To view the IPv4 protocol status of an interface, use display ip interface briefcommand.

ipv6: Monitors the IPv6 protocol status. When the IPv6 protocol status of an interface is up, the status ofthe track object is Positive. When the IPv6 protocol status of an interface is down, the status of the trackobject is Negative. To view the IPv6 protocol status of an interface, use display ipv6 interface command.



30/76

26



Examples# Create track entry 1 and associate it with the IPv4 protocol status of interface Ethernet 1/1.

system-view

[Sysname] track 1 interface ethernet 1/1 protocol ipv4


31/76

27

VRRP configuration commands

Unless otherwise specified, interfaces that VRRP involves can only be Layer 3 Ethernet interfaces andVLAN interfaces.

Common VRRP configuration commands

vrrp modeDescription

Usevrrp mode to configure the VRRP working mode.

Use undo vrrp mode to restore the default.

By default, VRRP works in standard protocol mode.

When you configure the working mode of VRRP by using this command, both IPv4-based and IPv6-basedVRRP groups work in the specified mode.

When VRRP works in load balancing mode, the virtual IP address cannot be the same as the IP addressof any interface in the VRRP group, and the virtual IP address should be mapped to the virtual MACaddress. Otherwise, VRRP cannot work in load balancing mode.

When a VRRP group is created, you can still change the VRRP working mode. When you change theVRRP working mode, all VRRP groups on the router work in the specified mode.

Related commands: display vrrp and displayvrrp ipv6.

Syntax

vrrp mode load-balance

undo vrrp mode

View

System view

Default level

2: System level

Parameters

load-balance: Specifies VRRP to work in load balancing mode.

Examples# Configure VRRP to work in load balancing mode.

system-view

[Sysname] vrrp mode load-balance


32/76

28

IPv4-based VRRP configuration commands

display vrrpDescription

Use display vrrp to view the state information of VRRP groups.If you do not specifyverbose, only the brief state information of VRRP group is displayed.

If you specify both an interface and a VRRP group, only the state information of the specified VRRP groupon the interface is displayed. If you only specify an interface, the state information of all the VRRP groupson the interface are displayed. If you specify neither, the state information of all VRRP groups on therouter is displayed.

Syntax

displayvrrp [verbose ] [ interfaceinterface-type interface-number[vridvirtual-router-id ] ] [ | { begin |exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

verbose: Displays detailed state information of VRRP groups.

interfaceinterface-type interface-number: Displays VRRP group state information of the specified interface.The interface-typeinterface-numberargument specifies an interface by its type and number.

vrid virtual-router-id: Displays state information of the specified VRRP group. The virtual-router-idargument

specifies a VRRP group by its group number, which ranges from 1 to 255.|: Filters command output by specifying a regular expression. For more information about regularexpressions, see Fundamentals Configuration Guide.





Examples

# When VRRP works in standard protocol mode, display brief information about all VRRP groups on the

device. display vrrp

IPv4 Standby Information:

Run Mode : Standard

Run Method : Virtual MAC

Total number of virtual routers : 1

Interface VRID State Run Adver Auth Virtual

Pri Timer Type IP

---------------------------------------------------------------------


33/76

29

Eth1/1 1 Master 140 1 Simple 1.1.1.1

Table 10Output description (standard protocol mode)Field Description

Run ModeCurrent VRRP working mode. Standard represents standard protocolmode.

Run Method

Current VRRP running mode, including: Real MACReal MAC mode, the virtual IP address of the VRRP

group is mapped to the real MAC address of the interface.

Virtual MACVirtual MAC mode, the virtual IP address of the VRRPgroup is mapped to the virtual MAC address.

Total number of virtual routers Number of VRRP groups.

Interface Interface to which the VRRP group belongs.

VRID ID of the VRRP group.

Run PriRunning or current priority of the router. With VRRP trackingconfigured, when the state of the monitored interface or track entry

changes, the priority of the router changes.Adver. Timer VRRP advertisement interval, in seconds.

Auth Type

Authentication type, including:

NoneNo authentication. SimpleSimple text authentication. MD5MD5 authentication.

Virtual IP Virtual IP address of the VRRP group.

# When VRRP works in standard protocol mode, display detailed information about all VRRP groups onthe router.

display vrrp verbose


Run Mode : Standard



Interface Ethernet1/1

VRID : 1 Adver Timer : 1

Admin Status : Up State : Master

Config Pri : 150 Running Pri : 140

Preempt Mode : Yes Delay Time : 5

Auth Type : Simple Key : hello

Virtual IP : 1.1.1.1

Virtual MAC : 0000-5e00-0101

Master IP : 1.1.1.2

VRRP Track Information:

Track Interface: Eth1/2 State : Down Pri Reduced : 10

Track Object : 1 State : Positive Pri Reduced : 50


34/76

30

Table 11Output description (standard protocol mode)Field Description

Run Mode

Current VRRP working mode, including:

StandardStandard protocol mode. Load BalanceLoad balancing mode.

Run Method

Current VRRP running mode, including: Real MACReal MAC mode, the virtual IP address of the

VRRP group is mapped to the real MAC address of theinterface.

Virtual MACVirtual MAC mode, the virtual IP address ofthe VRRP group is mapped to the virtual MAC address.




Adver. Timer VRRP advertisement interval, in seconds.

Admin StatusAdministrative state, including: UP. DOWN.

State

Status of the router in the VRRP group, including:

Master. Backup. Initialize.

Config PriConfigured priority of the router. The priority value specifiedby usingvrrp vrid priority command.

Running Pri

Running priority or current priority of the router. With VRRP

tracking configured, when the state of the monitored interfaceor track entry changes, the priority of the router changes.

Preempt Mode

Preemptive mode, including:

YesThe router in the VRRP group works in preemptivemode.

NoThe router in the VRRP group works in nonpreemptivemode.

Delay Time Preemption delay, in seconds.

Become Master

Time to wait before the router becomes the master, inmilliseconds.

Only routers in backup mode have this information.

Auth Type



Key Authentication key.

Virtual IP Virtual IP address of the VRRP group.


35/76

31

Field Description

Virtual MACVirtual MAC address that corresponds to the virtual IP addressof the VRRP group. It is only displayed when the router is in thestate of master.

Master IPPrimary IP address of the interface where the router in the stateof master resides.

VRRP Track InformationInformation about the tracked interface or object. It is onlydisplayed when thevrrp vrid track orvrrp vrid track interfacecommand is executed.

Track InterfaceThe interface to be tracked. It is only displayed when thevrrpvrid track interface command is executed.

Track ObjectThe track entry to be tracked. It is only displayed when thevrrp vrid track command is executed.

State

State of the tracked interface or track entry.

The state of a tracked interface includes:

Up. Down. Removed.The state of a track entry includes:

Invalid. Negative. Positive. Not existing.

# When VRRP works in load balancing mode, display brief information about all VRRP groups on therouter.

display vrrp


Run Mode : Load Balance



Interface VRID State Run Address Active

Pri

----------------------------------------------------------------------

Eth1/1 1 Master 140 1.1.1.1 Local

----- VF 1 Active 255 000f-e2ff-0011 Local

Table 12Output description (load balancing mode)Field Description

Run Mode




36/76

32

Field Description

Run Method

Current VRRP running mode, including:

Real MACReal MAC mode, which means the virtual IPaddress of the VRRP group is mapped to the real MACaddress of the interface.

Virtual MACVirtual MAC mode, which means the virtualIP address of the VRRP group is mapped to the virtual MACaddress.



VRID ID of the VRRP group or ID of the VF.

State

If the VRID is number, this field indicates the status of therouter in the VRRP group, including Master, Backup, andInitialize.

If the VRID is VF number, this field indicates the status of theVF in the VRRP group, including Active, Listening, andInitialize.

Run Pri

If the VRID is number, this field indicates the running priorityof the router, or in other words, the current priority of therouter. With VRRP tracking configured, if the state of themonitored interface or track entry changes, the priority ofthe router changes.

If the VRID is VF number, this field indicates the runningpriority of the VF. With VF tracking configured, if the stateof the monitored track entry changes, the priority of the VFchanges.

Address

If the VRID is number, this field indicates the virtual IPaddress of the VRRP group.

If the VRID is VF number, this field indicates the virtual MACaddress of the VF.

Active

If the VRID is number, this field indicates the IP address ofthe interface of the master. If the current router is the master,it is displayed as local.

If the VRID is VF number, this field indicates the IP addressof the interface of the AVF. If the current VF is the AVF, it isdisplayed as local.

# When VRRP works in load balancing mode, display detailed information about all VRRP groups on therouter.

display vrrp verbose


Run Mode : Load Balance



Interface Ethernet1/1

VRID : 1 Adver Timer : 1

Admin Status : Up State : Master

Config Pri : 120 Running Pri : 110

Preempt Mode : Yes Delay Time : 5


37/76

33

Auth Type : None

Virtual IP : 10.1.1.1

Member IP List : 10.1.1.2 (Local, Master)

10.1.1.3 (Backup)

VRRP Track Information:

Track Interface: Eth1/2 State : Down Pri Reduced : 10

Track Object : 1 State : Positive Pri Reduced : 50

Forwarder Information: 2 Forwarders 1 Active

Config Weight : 255

Running Weight : 255

Forwarder 01

State : Active

Virtual MAC : 000f-e2ff-0011 (Owner)

Owner ID : 0000-5e01-1101

Priority : 255

Active : local

Forwarder 02

State : Listening

Virtual MAC : 000f-e2ff-0012 (Learnt)

Owner ID : 0000-5e01-1103

Priority : 127

Active : 10.1.1.3

Forwarder Weight Track Information:

Track Object : 1 State : Positive Weight Reduced : 250

Table 13Output description (load balancing mode)Field Description

Run Mode



Run Method

Current VRRP running mode, including:

Real MACReal MAC mode, which means the virtual IPaddress of the VRRP group is mapped to the real MACaddress of the interface.

Virtual MACVirtual MAC mode, which means the virtualIP address of the VRRP group is mapped to the virtual MACaddress.




Adver Timer VRRP advertisement interval, in seconds.

Admin Status

Administrative state, including:

UP. DOWN.


38/76

34

Field Description

State

This field indicates the status of the router in the VRRP group,including:

Master. Backup. Initialize.

Config PriConfigured priority of the router, that is, the priority valuespecified by usingvrrp vrid priority command.

Running Pri

Running priority of the router, that is, the current priority of therouter. With VRRP tracking configured, if the state of themonitored interface or track entry changes, the priority of therouter changes.

Preempt Mode

Preemptive mode, including:

YesThe router in the VRRP group works in preemptivemode.

NoThe router in the VRRP group works in nonpreemptivemode.

Delay Time Preemption delay, in seconds.

Auth Type



Virtual IP Virtual IP address of the VRRP group

Member IP List

List of IP addresses of members in the VRRP group. Thisaddress list is only displayed when the VRRP group works inload balancing mode.

LocalIP address of the local device. MasterIP address of the master. BackupIP address of the backup .

VRRP Track Information Information of the tracked interface or track entry.

Track InterfaceThe interface to be tracked. It is only displayed when thevrrpvrid track interface command is executed.

Track ObjectThe object to be tracked. It is only displayed when thevrrpvrid track command is executed.

State

State of the tracked interface or track entry.

The state of a tracked interface includes:

Up.

Down. Removed.The state of a track entry includes:



39/76

35

Field Description

Pri Reduced

The priority value that is reduced when the monitored interfaceis down or removed, or when the status of the monitored trackentry turns to negative. It is only displayed when thevrrp vridtrack interface command or thevrrp vrid track command isexecuted.

Forwarder Information: 2 Forwarders 1Active VF InformationThe number of VFs of the router is 2, and thenumber of AVFs is 1.

Config Weight Configured weight of the VF, the value is 255.

Running WeightRunning weight of the VF, or in other words, the current weightof the VF. When VF tracking is configured, if the state of themonitored track entry changes, the weight of the VF changes.

Forwarder 01 Information about VF 01.

State

The state of a VF, including:

Active. Listening. Initialize.

Virtual MAC Virtual MAC address of the VF.

Owner ID Real MAC address of the interface of the VF owner.

Priority VF priority.

ActiveThe IP address of the interface of the AVF. If the current VF isthe AVF, it is displayed as local.

Forwarder Weight Track ConfigurationThe weight track configuration of the VF. It is only displayedwhen thevrrp vrid weighttrack command is executed.

Track ObjectWeight track entry. It is only displayed when thevrrp vridweighttrack command is executed.

State

A track entry has the following states:


Weight ReducedThe weight value that is reduced when the status of themonitored track entry turns to negative. It is only displayedwhen thevrrp vrid weighttrack command is executed.

display vrrp statisticsDescription

Use displayvrrp statistics to display statistics about VRRP groups.

If you specify both an interface and a VRRP group, only the statistics about the specified VRRP group onthe interface are displayed. If you only specify an interface, the statistics about all VRRP groups on theinterface are displayed. If you specify neither, the statistics about all VRRP groups on the router aredisplayed.


40/76

36

To clear the VRRP group statistics, use reset vrrp statistics command.

Related commands: reset vrrp statistics.

Syntax

display vrrp statistics [ interface interface-type interface-number [ vrid virtual-router-id ] ] [ | { begin |exclude | include } regular-expression ]

ViewAny view

Default level

1: Monitor level

Parameters

interface interface-type interface-number: Displays VRRP group statistics of the specified interface. Theinterface-typeinterface-numberargument specifies an interface by its type and number.

vrid virtual-router-id: Displays statistics of the specified VRRP group. The virtual-router-idargument specifiesa VRRP group by its group number, which ranges from 1 to 255.






Examples

# When VRRP works in standard protocol mode, display the statistics about all VRRP groups.

display vrrp statistics

Interface : Ethernet1/1

VRID : 1

CheckSum Errors : 0 Version Errors : 0

Invalid Type Pkts Rcvd : 0 Advertisement Interval Errors : 0

IP TTL Errors : 0 Auth Failures : 0

Invalid Auth Type : 0 Auth Type Mismatch : 0

Packet Length Errors : 0 Address List Errors : 0

Become Master : 1 Priority Zero Pkts Rcvd : 0

Adver Rcvd : 0 Priority Zero Pkts Sent : 0

Adver Sent : 807

Global statistics

CheckSum Errors : 0

Version Errors : 0

VRID Errors : 0

# When VRRP works in load balancing mode, display the statistics about all VRRP groups.

display vrrp statistics

Interface : Ethernet1/1

VRID : 1

CheckSum Errors : 0 Version Errors : 0


41/76

37

Invalid Type Pkts Rcvd : 0 Advertisement Interval Errors : 0

IP TTL Errors : 0 Auth Failures : 0

Invalid Auth Type : 0 Auth Type Mismatch : 0

Packet Length Errors : 0 Address List Errors : 0

Become Master : 2 Redirect Timer Expires : 0

Become AVF : 1 Time-out Timer Expires : 0

Adver Rcvd : 0 Request Rcvd : 0

Adver Sent : 1460 Request Sent : 1

Reply Rcvd : 0 Release Rcvd : 0

Reply Sent : 0 Release Sent : 0

Priority Zero Pkts Rcvd : 0 VF Priority Zero Pkts Rcvd : 0

Priority Zero Pkts Sent : 1 VF Priority Zero Pkts Sent : 0

Status Option Errors : 0

Global statistics

CheckSum Errors : 0

Version Errors : 0

VRID Errors : 0

Table 14Output description (Standard protocol mode)Field Description

Interface Interface to which the VRRP group belongs

VRID Serial number of the VRRP group

CheckSum Errors Number of packets with checksum errors

Version Errors Number of packets with version errors

Invalid Type Pkts Rcvd Number of packets with incorrect packet type

Advertisement Interval Errors Number of packets with advertisement interval errors

IP TTL Errors Number of packets with TTL errors

Auth Failures Number of packets with authentication failures

Invalid Auth TypeNumber of packets with authentication failures due to invalidauthentication types

Auth Type MismatchNumber of packets with authentication failures due tomismatching authentication types

Packet Length Errors Number of packets with VRRP packet length errors

Address List Errors Number of packets with virtual IP address list errors

Become Master Number of times that the router worked as the master

Priority Zero Pkts Rcvd Number of received advertisements with the priority of 0

Adver Rcvd Number of received advertisements

Priority Zero Pkts Sent Number of advertisements with the priority of 0 sent

Adver Sent Number of advertisements sent

Global statistics Global statistics about all VRRP groups

CheckSum Errors Total number of packets with checksum errors


42/76

38

Field Description

Version Errors Total number of packets with version errors

VRID Errors Total number of packets with VRID errors

Table 15Output description (Load balancing mode)Field Description

Interface Interface to which the VRRP group belongs

VRID Serial number of the VRRP group

CheckSum Errors Number of packets with checksum errors

Version Errors Number of packets with version errors

Invalid Type Pkts Rcvd Number of packets with incorrect packet type

Advertisement Interval Errors Number of packets with advertisement interval errors

IP TTL Errors Number of packets with TTL errors

Auth Failures Number of packets with authentication failures

Invalid Auth TypeNumber of packets with authentication failures due to invalidauthentication types

Auth Type MismatchNumber of packets with authentication failures due tomismatching authentication types

Packet Length Errors Number of packets with VRRP packet length errors

Address List Errors Number of packets with virtual IP address list errors

Become Master Number of times that the router worked as the master

Redirect Timer Expires Number of times that the redirect timer expires

Become AVF Number of times that the VF worked as the AVFTime-out Timer Expires Number of times that the timeout timer expires

Adver Rcvd Number of received advertisements

Request Rcvd Number of received requests

Adver Sent Number of advertisements sent

Request Sent Number of requests sent

Reply Rcvd Number of received replies

Release Rcvd Number of received releases

Reply Sent Number of replies sent

Release Sent Number of releases sent

Priority Zero Pkts Rcvd Number of received advertisements with the priority of 0

VF Priority Zero Pkts Rcvd Number of received advertisements with the VF priority of 0

Priority Zero Pkts Sent Number of sent advertisements with the priority of 0

VF Priority Zero Pkts Sent Number of sent advertisements with the VF priority of 0

Status Option Errors Number of times that the status option errors


43/76

39

Field Description

Global statistics Global statistics about all VRRP groups

CheckSum Errors Total number of packets with checksum errors

Version Errors Total number of packets with version errors

VRID Errors Total number of packets with VRID errors

reset vrrp statisticsDescription

Use reset vrrp statistics to clear VRRP group statistics.

If you specify both an interface and a VRRP group, the statistics about the specified VRRP group on thespecified interface are cleared. If you only specify the interface, the statistics about all VRRP groups on theinterface are cleared. If you specify neither, the statistics about all VRRP groups on the router are cleared.

Related commands: display vrrpstatistics.

Syntaxreset vrrp statistics [ interfaceinterface-type interface-number[vrid virtual-router-id ]]

View

User view

Default level

1: Monitor level

Parameters

interface interface-type interface-number: Clears VRRP group statistics of a specified interface. Theinterface-type interface-numberargumentspecifies an interface by its type and number.

vrid virtual-router-id: Clears VRRP statistics of the specified VRRP group. The virtual-router-id argumentspecifies a VRRP group by its group number, which ranges from 1 to 255.

Examples

# Clear the statistics about all the VRRP groups on the router.

reset vrrp statistics

vrrp methodDescription

Use vrrp method to specify the type of the MAC addresses mapped to the virtual IP addresses of theVRRP groups.

Use undo vrrp method to restore the default.

By default, the virtual MAC addresses are mapped to the virtual IP addresses of the VRRP groups.

Specify the type of the MAC addresses mapped to the virtual IP address before creating a VRRP group.Otherwise, you cannot change the type of the MAC address by using this command.


44/76

40

When VRRP works in load balancing mode, a virtual IP address is always mapped to a virtual MACaddress regardless of which type of the MAC addresses to be mapped to the virtual IP address isspecified.

Related commands: display vrrp.

Syntax

vrrp method { real-mac | virtual-mac }

undo vrrp method

View

System view

Default level

2: System level

Parameters

real-mac: Maps the real MAC address of the interface to the virtual IP address of the VRRP group.

virtual-mac: Maps the virtual MAC address to the virtual IP address of the VRRP group.

Examples

# Map the virtual IP address of a VRRP group to the real MAC address of the interface.

system-view

[Sysname] vrrp method real-mac

vrrp un-check ttlDescription

Usevrrp un-check ttl to disable TTL check on VRRP packets.

Use undo vrrp un-check ttl to enable TTL check on VRRP packets.

By default, TTL check on VRRP packets is enabled.

The master of a VRRP group periodically sends VRRP advertisements to indicate its existence. VRRPadvertisements are multicast onto the local network segment and are not forwarded by a router, andtherefore, the packet TTL value is not changed. When the master of a VRRP group advertises VRRPpackets, it sets the packet TTL to 255. After you configure to check the VRRP packet TTL, when thebackups of the VRRP group receive VRRP packets, they check the packet TTL and drop the VRRP packetswhose TTL is smaller than 255 to prevent attacks from other network segments.

Because devices of different vendors might implement VRRP in a different way, when the device isinteroperating with devices of other vendors, VRRP packet TTL check might result in dropping packets thatshould not be dropped. In this case, usevrrp un-check ttl to disable TTL check on VRRP packets.

Syntax

vrrp un-check ttl

undo vrrp un-check ttl

View

Interface view


45/76

41

Default level

2: System level

Parameters

None

Examples

# Disable TTL check on VRRP packets. system-view


[Sysname-Ethernet1/1] vrrp un-check ttl

vrrp vrid authentication-modeDescription

Use vrrp vrid authentication-mode to configure the authentication mode and authentication key for aVRRP group to be able to send and receive VRRP packets.

Use undovrrp vrid authentication-mode to restore the default.By default, authentication is disabled.

Before executing the command, create a VRRP group on an interface and configure the virtual IP addressof the VRRP group.

You can configure different authentication modes and authentication keys for VRRP groups on aninterface. However, the members of the same VRRP group must use the same authentication mode andauthentication key.


Syntax

vrrp vrid virtual-router-idauthentication-mode { md5 | simple } keyundo vrrp vridvirtual-router-idauthentication-mode

View

Interface view

Default level

2: System level

Parameters

virtual-router-id: VRRP group number, which ranges from 1 to 255.

md5: Authentication using the MD5 algorithm.

simple: Plain text authentication mode.

key: Authentication key, which is case-sensitive. The keys are used as follows:

When md5 authentication applies, the authentication key is in MD5 cipher text or in plain text andthe length of the key depends on its input format. If the key is input in plain text, its length is 1 to 8characters, such as 1234567. If the key is input in cipher text, its length must be 24 characters, suchas _(TT8F]Y\5SQ=^Q`MAF4


46/76

42

When simple authentication applies, the authentication key is in plain text with a length of 1 to 8characters.

Examples

# Set the authentication mode to simple and authentication key to Sysname for VRRP group 1 oninterface Ethernet 1/1 to send and receive VRRP packets.

system-view


[Sysname-Ethernet1/1] vrrp vrid 1 virtual-ip 10.1.1.1

[Sysname-Ethernet1/1] vrrp vrid 1 authentication-mode simple Sysname

vrrp vrid preempt-modeDescription

Use vrrpvrid preempt-mode to enable preemption on the router and configure its preemption delay inthe specified VRRP group.

Use undo vrrpvrid preempt-mode to disable preemption on the router in the specified VRRP group, thatis, specify the router work in nonpreemptive mode.

Use undo vrrp vrid preempt-mode timer delay to restore the default preemption delay, which is 0seconds.

The default mode is immediate preemption without a delay.

To avoid frequent member state changes in a VRRP group and allow the backups enough time to collectinformation, such as routing information, each backup waits for a period of time (the preemption delaytime) after it receives an advertisement with the priority lower than the local priority. It then sends VRRPadvertisements to start a new master election in the VRRP group and becomes the master.



Syntax

vrrp vrid virtual-router-idpreempt-mode [ timer delay delay-value]

undo vrrp vridvirtual-router-idpreempt-mode [ timer delay ]View

Interface view

Default level

2: System level

Parametersvirtual-router-id:Virtual router ID or VRRP group number, which ranges from 1 to 255.

timer delay delay-value: Sets preemption delay. The delay-valueargument ranges from 0 to 255 secondsand defaults to 0 seconds.

Examples

# Enable preemption on the router in VRRP group 1, and set the preemption delay to 5 seconds.

system-view


47/76

43



[Sysname-Ethernet1/1] vrrp vrid 1 preempt-mode timer delay 5

vrrp vrid priorityDescription

Usevrrpvrid priority to configure the priority of the router in the specified VRRP group.

Use undo vrrpvrid priority to restore the default.

By default, the priority of a router in a VRRP group is 100.


The role that a router plays in a VRRP group depends on its priority. A higher priority means that therouter is more likely to become the master. Priority 0 is reserved for special use and 255 is reserved forthe IP address owner.

If the router is the IP address owner, its priority is always 255. Therefore, it remains as the master so long

as it is functioning normally.Related commands: display vrrp.

Syntax

vrrp vrid virtual-router-idpriority priority-value

undo vrrp vridvirtual-router-idpriority

View

Interface view

Default level

2: System levelParameters

virtual-router-id: VRRP group number, which ranges from 1 to 255.

priority-value: Priority value of the router in the specified VRRP group, which ranges from 1 to 254. Ahigher number indicates a higher priority.

Examples

# Set the priority of the router in VRRP group 1 to 150.

system-view



[Sysname-Ethernet1/1] vrrp vrid 1 priority 150

vrrp vrid timer advertiseDescription

Usevrrpvrid timer advertise to configure the Adver_Timer of the specified VRRP group.

Use undo vrrpvrid timer advertise to restore the default.


48/76

44

By default, the Adver_Timer is 1 second.

The Adver_Timer controls the interval at which the master sends VRRP packets.


Routers in the same VRRP group must use the same Adver_Timer setting.

Related commands: display vrrp.Syntax

vrrp vrid virtual-router-idtimer advertise adver-interval

undo vrrp vridvirtual-router-id timer advertise

View

Interface view

Default level

2: System level

Parametersvirtual-router-id: VRRP group number, which ranges from 1 to 255.

adver-interval: Interval at which the master in the specified VRRP group sends VRRP advertisements. Itranges from 1 to 255 seconds.

Examples

# Set the master in VRRP group 1 to send VRRP advertisements at intervals of 5 seconds.

system-view



[Sysname-Ethernet1/1] vrrp vrid 1 timer advertise 5

vrrp vrid trackDescription

Usevrrpvrid track to specify the track entry to be monitored. In other words, if the status of the monitoredtrack entry changes to negative, the priority of the router decreases by a specified value or the routerimmediately switches to the master.

Use undo vrrpvrid track to remove the specified track entry.

By default, no track entry is specified to be monitored.

Before executing the command, create a VRRP group on an interface and configure the virtual IP address

of the VRRP group.

If you configure a track entry to be monitored on a router that is the IP address owner in a VRRP group,the configuration does not take effect. If the router is not the IP address owner in the VRRP group later, theconfiguration takes effect.

When the status of the monitored track entry turns from negative to positive or invalid, the correspondingrouter automatically restores its priority.

The track entry specified in this command can be nonexistent. You can use vrrp vrid track to specify atrack entry, and then create the track entry by using track command.


49/76

45

For more information about track entries, see High Availability Configuration Guide.


Syntax

vrrp vridvirtual-router-id tracktrack-entry-number [ reduced priority-reduced| switchover]

undo vrrp vridvirtual-router-idtrack [ track-entry-number ]

ViewInterface view

Default level

2: System level

Parameters

virtual-router-id:VRRP group number, which ranges from 1 to 255.

track track-entry-number:Specifies a track entry to be monitored by its number. The track-entry-numberargumentranges from 1 to 1024.

reduced priority-reduced: Specifi