VRRP configuration on an AC

12

For details about how to configure VRRP on an AC, see

http://support.huawei.com/ehedex/pages/DOC1000088060DEE1226D/06/DOC1000088060DEE1226D/06/resources/dc/dc_cfg_vrrp_0041.html?ft=0&id=dc_cfg_vrrp_0041 of the AC in V200R006.

Other related questions:
VRRP implementation on ACs
Virtual Router Redundancy Protocol (VRRP) on ACs: VRRP integrates multiple routing devices into a virtual router and uses the next-hop address as the IP address of the virtual router. VRRP elects a new gateway to transmit data traffic if the next-hop gateway of hosts fails, ensuring reliable network communication. With the rapid development of WLANs and diversification of applications, various value-added services (VASs) such as Internet Protocol television (IPTV) and video conferencing are prevailing. Any interruptions to network services may cause significant loss to users, resulting in the increase of user demands for network reliability. Generally, all hosts on the same network segment have the same default route with the gateway address as the next-hop address. Hosts use the default route to send packets to the gateway and the gateway forwards the packets to other network segments. When the gateway fails, the hosts on the network segment using the same default route cannot communicate with external networks. More than one egress gateway can be configured to enhance system reliability. However, route selection between the gateways becomes an issue. VRRP solves the problem. VRRP virtualizes multiple routing devices into a virtual router without changing the networking. The next-hop address in the default route of hosts is used as the IP address of the virtual router for gateway backup. If the gateway is faulty, VRRP elects a new gateway to transmit service traffic to ensure reliable network communication. For implementation of VRRP, see AC6605&AC6005&ACU2 Product Documentation. In the document, choose Configuration > CLI-based Configuration > Reliability Configuration Guide > VRRP Configuration > Principles.

Example of configuring VRRP active/standby backup on an AR router
The roadmap of configuring VRRP active/standby backup on an AR router to implement gateway redundancy is as follows: 1. Configure IP addresses and routing protocols for different device interfaces to enable network-layer connection among different devices. 2. Configure a VRRP group on Router A and Router B, respectively. Configure a high priority and set preemption delay to 20s on Router A and configure Router A as a master device to bear and forward traffic. Configure a low priority and configure Router B as a backup device to implement gateway redundancy. Configure a VRRP group. # Create VRRP 1 on Router A, set its priority to 120, and set the preemption delay to 20s. [RouterA] interface gigabitethernet 2/0/0 [RouterA-GigabitEthernet2/0/0] vrrp vrid 1 virtual-ip 10.1.1.111 //Configure a virtual IP address. [RouterA-GigabitEthernet2/0/0] vrrp vrid 1 priority 120 //Set priority to 120. [RouterA-GigabitEthernet2/0/0] vrrp vrid 1 preempt-mode timer delay 20 //Set the preemption delay to 20s. [RouterA-GigabitEthernet2/0/0] quit # Create VRRP 1 on Router B, and set its priority to a default value 100. [RouterB] interface gigabitethernet 2/0/0 [RouterB-GigabitEthernet2/0/0] vrrp vrid 1 virtual-ip 10.1.1.111 [RouterB-GigabitEthernet2/0/0] quit For details about the configuration, see the URL: Example for Configuring a VRRP Group in Active/Standby Mode.

How do I configure a VRRP group in active/standby mode on an S series switch
To configure a VRRP group in active/standby mode on an S series switch (except the S1700), see section "Example for Configuring a VRRP Group in Active/Standby Mode" in "Typical Reliability Configuration" at S1720&S2700&S3700&S5700&S6700&S7700&S9700 Typical Configuration Examples. The VRRP configuration method for the S9300 is the same as that for other switch models.

Configuring IPSec on an AC
ACs support IPSec, while Fat APs do not support this function. On the Internet, most data is transmitted on IP networks in plaintext mode. This transmission mode has many potential risks. For example, bank accounts and passwords may be intercepted, user identities may be forged, and networks are attacked. IPSec can protect transmitted data to reduce information leak risks. IPSec is a set of open network security protocols defined by the Internet Engineering Task Force (IETF). It ensures integrity and security of data transmitted on the Internet through data source authentication, data encryption, data integrity, and anti-replay at the IP layer. For more information about IPSec configuration on an AC, see: For V200R005: IPSec Configuration in AC6605&AC6005&ACU2(AC&FITAP) Product Documentation. For V200R006: IPSec Configuration in AC6605&AC6005&ACU2(AC&FITAP) Product Documentation.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top