VRRP and several switches

Latest reply: Jan 16, 2020 11:21:24 123 5 3 0
I would like to share some information that I didn't pay attention at configuring the switches in the server room and that fall the network down.
We use two Huawei s5700 switches as a "core". They aggregate connections from many other switches with fiber optic (SFP modules). And they route the traffic between clients VLANs. They was design to duplicate each other on faults. To do that we use VRRP at the VLAN interfaces of s5700 switches.
They are connected with one UTP patch cord directly. This was the way to exchange VRRP information in the beginning.
After that we add new switches to the server rooms with 10G uplinks and connect them to the both s5700 switches. Good idea! But STP decide that too and shutdown direct link between the s5700 switches. After that everything goes bad.
Arrive time we just use STP cost to ensure that direct link will be up. But it can't be forever and now I found the problem and it's solution.
The problem is that VRRP use VLAN to send information to the neighbourhoods. And in our scenario server switches with 10G uplinks didn't know about all the VLANs of the clients and in this way some tagged traffic was dropped.
The solution in my case was in configuring all VLANs that we use to permit their traffic in the 10G switches.
  • x
  • convention:

Created Dec 5, 2019 17:58:08 Helpful(0) Helpful(0)

Great if good what is the RFC to stoudy more
  • x
  • convention:

Admin Created Dec 6, 2019 01:33:30 Helpful(0) Helpful(0)

thanks, we often overlook the details.
  • x
  • convention:

Created Jan 2, 2020 07:53:20 Helpful(0) Helpful(0)

Thanks for sharing.
It would be better if you could add the topology and the key configurations.
  • x
  • convention:

Created Jan 16, 2020 07:48:34 Helpful(0) Helpful(0)

Great idea. Maybe you can try to cluster both 5700 series together? so that you can erase the Layer 2 issue.
  • x
  • convention:

Created Jan 16, 2020 11:21:24 Helpful(0) Helpful(0)


Thank you for your attantion! Here is some network diagram:

Network diagram

The bold lines between the CE5855 and between CE6810 are 40G peer links. Other links between CE5855 and CE6810 are 10G M-LAG links. And solid links between CE6810 and S5700 are two 10G M-LAG links (one M-LAG for the top S5700 and second - for the bottom one). The dotted line between S5700 is gigabit link.

The S5700 switches are configured for failsafe networking - clients from the S1720 switches are connected both to the top S5700 and bottom S5700 switches. They are also equiped with 10G card and there is no space for additional cards in them (S5700). And all 10G links are used completelly.

At this moment VLANs are configured in CE6810 and VRRP is working fine. Now I can use fast links for transfer lots of data and they are also can be used for network management packets (VRRP).

  • x
  • convention:


You need to log in to reply to the post Login | Register

Notice Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Login and enjoy all the member benefits

Login and enjoy all the member benefits