12.07.2015 Views

BROCADE IP PRIMER

BROCADE IP PRIMER

BROCADE IP PRIMER

SHOW MORE
SHOW LESS
  • No tags were found...

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Chapter 14: Security, Redundancy and MoreVRRP vs. VRRP-ExtendedThere is another flavor of VRRP available. It is Virtual Router Redundancy Protocol-Extended(VRRP-E). This protocol adds several features to VRRP.• Ping. In VRRP, you cannot ping the virtual address. In VRRP-E, you can.• Owner/Backup. In VRRP, you configure one router to be the “owner” andall others to be a backup. In VRRP-E, all routers are backup, and an electionis held to decide who is the master (not “owner”). This allows greaterflexibility over who is master.• <strong>IP</strong> Address. In VRRP, the virtual address must be the same physicaladdress as the owner's interface. In VRRP-E, the address may be anyaddress in the same subnet.• Hello Packets. In VRRP, hello packets are sent to 224.0.0.18. In VRRP-E,hello packets are encapsulated in UDP port 8888 and sent to 224.0.0.2(“all routers” multicast address).• Track Priority. In VRRP, a failure causes the router to assume the value ofthe track-priority configured. In VRRP-E, a failure causes the router's priorityto be deducted by the track-priority. For example, if a router wereconfigured with a priority of 100 (default), and a track-priority of 10, a failurewould cause the router's priority to become 90 (100 - 10 = 90).Configuring VRRP-ExtendedLet's see how our previous example would look using VRRP-E:BR-RouterA#conf tBR-RouterA(config)#router vrrp-extendedBR-RouterA(config-vrrpe-router)#exitBR-RouterA(config)#int e 1BR-RouterA(config-if-e1000-1)#ip address 10.1.1.11/24BR-RouterA(config-if-e1000-1)#ip vrrp-extended vrid 1BR-RouterA(config-if-e1000-1-vrid-1)#backup priority 160track-priority 20BR-RouterA(config-if-e1000-1-vrid-1)#track-port e 4BR-RouterA(config-if-e1000-1-vrid-1)#ip-address 10.1.1.1BR-RouterA(config-if-e1000-1-vrid-1)#activateNotice that we gave it a different virtual address? We gave it “10.1.1.1.” Wedidn't specify a subnet mask. This is because we cannot assign a virtualaddress outside of the interface's own subnet. We've given it a priority of 160with a track-priority of 20. This means that a failure will cause its priority todrop to 140. The advantage of the deducting track priority is that we can trackseveral links. Each link will bring a deduction in the router's priority, but it may,or may not failover the virtual address. It all depends on who has the higherpriority.314 Brocade <strong>IP</strong> Primer

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!