Whether S series switches support ping to the virtual IP address of the VRRP group

20

S series switches (S1700 excluded) allow user devices to ping a virtual IP address to serve the following purposes:

- Monitors the operating status of the master in a VRRP group.

Monitors communication between a user device and a network connected by a default gateway using the virtual IP address.

Run the vrrp virtual-ip ping enable command to enable the ping to the virtual IP address.

Other related questions:
Why cannot the virtual IP address of a VRRP group be pinged
Check whether the vrrp virtual-ip ping disable or undo vrrp virtual-ip ping enable command is configured on an S series switch. If so, run the vrrp virtual-ip ping enable command to allow the master device to respond to ping packets sent to the virtual IP address.

Why does the ping to the virtual IP address of the VRRP group fail
Possible causes are as follows: -VRIDs conflict. -Pinging virtual IP addresses is disabled. Huawei firewalls enable you to ping virtual IP addresses by default. If ping virtual IP address is disabled, run the vrrp virtual-ip ping enable command.

Problem and solution when the firewall cannot ping the virtual IP address of the VRRP group
Possible causes are as follows: A VRID conflict occurs. The virtual IP address ping function is disabled. According to RFC3768, the ping command cannot be used to detect the virtual IP address connectivity. Huawei provides the virtual IP address ping function for the convenience of monitoring. This function is enabled by default. If it is disabled, you can run the vrrp virtual-ip ping enable command to enable it.

Whether the virtual IP address and virtual MAC address of the VRRP group need to be configured when IPSG is configured for S series switches
When IPSG is configured on the interface of an S series switch (S1700 excluded) connected to a VRRP device, the virtual IP address and virtual MAC address need to be added to the static user binding table to ensure IPSG check on packets.

Whether the firewall supports the VRRP group virtual IP address and interface address that are on different network segments
Can actual interface IP addresses reside on the same network segment as virtual IP addresses in hot standby? 1. You must assign IP addresses to a physical interface before you set the virtual IP address of the VRRP group on the interface. 2. When you configure VRRP groups, ensure that the virtual IP addresses is not the IP address of any physical interface. 3. Invalid address, such as broadcast address, multicast address, or loopback address, cannot be used as the VRRP virtual IP address. 4. If the virtual IP address and the IP address of the physical interface reside on different subnets, you need to specify the subnet mask of the virtual IP address. 5. The VRID of the VRRP group cannot be the same as that configured on any other device in the same VLAN. 6. The VRIDs and virtual IP addresses of VRRP groups configured for the same interfaces on the active and standby USGs shall be the same. Configuration on the USG6000 [USG6600-1]int vlani2 [USG6600-1-Vlanif2]ip add 172.16.1.1 24 [USG6600-1-Vlanif2]vrrp vrid 1 virtual-ip 10.1.1.1 24 active [USG6600-1-Vlanif2]dis thi interface Vlanif2 ip address 172.16.1.1 255.255.255.0 vrrp vrid 1 virtual-ip 10.1.1.1 255.255.255.0 active Configuration on the USG2000&5000 [USG5500]int vlanif10 [USG5500-Vlanif10]ip add 172.16.1.1 24 [USG5500-Vlanif10]vrrp vrid 1 virtual-ip 10.10.1.1 24 master [USG5500-Vlanif10]dis this interface Vlanif10 alias vlanif 10 ip address 172.16.1.1 255.255.255.0 vrrp vrid 1 virtual-ip 10.10.1.1 255.255.255.0 master #

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top