Whether the virtual IP address and virtual MAC address of the VRRP group need to be configured when IPSG is configured for S series switches

4

When IPSG is configured on the interface of an S series switch (S1700 excluded) connected to a VRRP device, the virtual IP address and virtual MAC address need to be added to the static user binding table to ensure IPSG check on packets.

Other related questions:
Configuring virtual IP addresses of VRRP groups on the USG6000
Configuring virtual IP addresses of VRRP groups on the USG6000 sys //Access the system view. [USG6600-1] int g1/0/9 //Access the Layer 3 interface. [USG6600-1-GigabitEthernet1/0/9]ip add 1.1.1.1 24 //Configure the interface IP address. [USG6600-1-GigabitEthernet1/0/9]vrrp vrid 1 virtual-ip 1.1.1.254 active (virtual IP address of the VRRP group) //Configure the virtual IP address of the VRRP group.

Whether S series switches support ping to the virtual IP address of the VRRP group
S series switches (S1700 excluded) allow user devices to ping a virtual IP address to serve the following purposes: - Monitors the operating status of the master in a VRRP group. Monitors communication between a user device and a network connected by a default gateway using the virtual IP address. Run the vrrp virtual-ip ping enable command to enable the ping to the virtual IP address.

Number of virtual IP addresses of VRRP groups that can be configured on the USG6000
Example for configuring VRRP load balancing (configuring multiple virtual IP addresses) Requirements: USG_A serves as the Master of VRRP group 1 and the Backup of VRRP group 2. USG_B serves as the Master of VRRP group 2 and the Backup of VRRP group 1. On the internal network, HostA uses VRRP group 1 as the gateway, and HostC uses VRRP group 2 as the gateway. This helps implement load balancing and mutual backup. Configuration roadmap 1. Create two VRRP groups at GigabitEthernet 0/0/2 of USG_A. USG_A serves as the Master of VRRP group 1 and the Backup of VRRP group 2. 2. Create two VRRP groups at GigabitEthernet 0/0/2 of USG_B. USG_B serves as the Backup of VRRP group 1 and the Master of VRRP group 2. Operation steps 1. Configure VRRP. # Configure GigabitEthernet0/0/2 on USG_A, create VRRP group 1, and set the priority of USG_A in VRRP group 1 to 105 (as the Master). Create VRRP group 2 and set the priority of USG_A in VRRP group 2 to the default value 100 (as the Backup). system-view [USG_A] vrrp mode [USG_A] interface GigabitEthernet 0/0/2 [USG_A-GigabitEthernet0/0/2] ip address 10.1.1.1 24 [USG_A-GigabitEthernet0/0/2] vrrp vrid 1 virtual-ip 10.1.1.111 [USG_A-GigabitEthernet0/0/2] vrrp vrid 1 priority 105 [USG_A-GigabitEthernet0/0/2] vrrp vrid 2 virtual-ip 10.1.1.112 # Configure GigabitEthernet0/0/2 on USG_B, create VRRP group 1, and set the priority of USG_B in VRRP group 1 to the default value `100 (as the Backup). Create VRRP group 2 and set the priority of USG_B in VRRP group 2 to 105 (as the Master). system-view [USG_B] vrrp mode [USG_B] interface GigabitEthernet 0/0/2 [USG_B-GigabitEthernet0/0/2] ip address 10.1.1.2 24 [USG_B-GigabitEthernet0/0/2] vrrp vrid 1 virtual-ip 10.1.1.111 [USG_B-GigabitEthernet0/0/2] vrrp vrid 2 virtual-ip 10.1.1.112 [USG_B-GigabitEthernet0/0/2] vrrp vrid 2 priority 105

Configuring OSPF to advertise virtual IP addresses of VRRP groups on the USG
In the OSPF zone, run the network command to advertise virtual addresses.

Whether the physical IP address of an upstream or downstream interface needs to be set after a virtual IP address of the VRRP group is set on this interface
Yes.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top