Chapter 32 VSRP Commands activate Activates a VSRP VRID. NOTE: This command is equivalent to the enable command. ProCurveRS(config)# vlan 200 ProCurveRS(config-vlan-200)# tag ethernet 1/1 to 1/8 ProCurveRS(config-vlan-200)# vsrp vrid 1 ProCurveRS(config-vlan-200-vrid-1)# backup ProCurveRS(config-vlan-200-vrid-1)# activate Syntax: [no] activate Default value: Disabled advertise backup Enables a Backup to send Hello messages to the Master. By default, Backups do not send Hello messages to advertise themselves to the Master. You can enable these messages if desired. ProCurveRS(config-vlan-200-vrid-1)# advertise backup Syntax: [no] advertise backup When a Backup is enabled to send Hello messages, the Backup sends a Hello messages to the Master every 60 seconds by default. (This is the default Hello interval.) Default value: Disabled backup Configures the device as a VSRP Backup for a VSRP VRID. Optional parameters enable you to change the backup priority used for VSRP master election and the track priority, which can affect the device s VSRP priority. June 2005 32-1
Command Line Interface Reference for ProCurve 9300/9400 Series Routing Switches NOTE: The backup command is required. In VSRP, all devices on which a VRID are configured are Backups. The Master is then elected based on the VSRP priority of each device. There is no owner device as there is in VRRP. ProCurveRS(config)# vlan 200 ProCurveRS(config-vlan-200)# tag ethernet 1/1 to 1/8 ProCurveRS(config-vlan-200)# vsrp vrid 1 ProCurveRS(config-vlan-200-vrid-1)# backup ProCurveRS(config-vlan-200-vrid-1)# activate ProCurveRS(config-vlan-200-vrid-1)# backup priority 75 ProCurveRS(config-vlan-200-vrid-1)# backup track-priority 2 Syntax: [no] backup [priority <value>] [track-priority <value>] The priority <value> parameter specifies the VRRP priority for this interface and VRID. You can specify a value from 3 254. The default is 100. The track-priority <value> parameter specifies the track priority. When you configure a VRID to track the link state of other interfaces, if one of the tracked interface goes down, the software changes the VSRP priority of the VRID interface. The software reduces the VRID priority by the amount of the priority of the tracked interface that went down. For example, if the VSRP interface s priority is 100 and a tracked interface with track priority 60 goes down, the software changes the VSRP interface s priority to 40. If another tracked interface goes down, the software reduces the VRID s priority again, by the amount of the tracked interface s track priority. The default track priority for all track ports is 1. You can change the default track priority or override the default for an individual track port. Possible values: See above Default value: See above backup-hello-interval Changes the Backup Hello interval. ProCurveRS(config-vlan-200-vrid-1)# backup-hello-interval 180 Syntax: [no] backup-hello-interval <num> The <num> parameter specifies the message interval. Possible values: 60 3600 seconds Default value: 60 seconds dead-interval Changes the Dead interval. The Dead interval is the number of seconds a Backup waits for a Hello message from the Master before determining that the Master is dead. ProCurveRS(config-vlan-200-vrid-1)# dead-interval 30 Syntax: [no] dead-interval <num> The <num> parameter specifies the interval. Possible values: 1 84 seconds 32-2 June 2005
VSRP Commands Default value: 3 seconds (three times the default Hello interval) disable Disables a VSRP VRID. ProCurveRS(config-vlan-200-vrid-1)# disable Syntax: disable Default value: Disabled enable Enables a VSRP VRID. NOTE: This command is equivalent to the activate command. ProCurveRS(config)# vlan 200 ProCurveRS(config-vlan-200)# tag ethernet 1/1 to 1/8 ProCurveRS(config-vlan-200)# vsrp vrid 1 ProCurveRS(config-vlan-200-vrid-1)# backup ProCurveRS(config-vlan-200-vrid-1)# enable Syntax: enable Default value: Disabled end Moves activity to the privileged EXEC level from any level of the CLI except the user EXEC level. To move to the privileged EXEC level, enter the following from any level of the CLI. ProCurveRS(config-vlan-200-vrid-1)# end ProCurveRS# Syntax: end exit Moves activity up one level from the current level. In this case, activity will be moved to the port-based VLAN level if configuring a protocol VLAN. If configuring a port-based VLAN, activity would be moved to the global level. ProCurveRS(config-vlan-200-vrid-1)# exit ProCurveRS(config)# Syntax: exit hello-interval Changes the Backup Hello interval. June 2005 32-3
Command Line Interface Reference for ProCurve 9300/9400 Series Routing Switches ProCurveRS(config-vlan-200-vrid-1)# backup-hello-interval 180 Syntax: [no] backup-hello-interval <num> The <num> parameter specifies the message interval. Possible values: 60 3600 seconds Default value: 60 seconds hold-down-interval Changes the Hold-down interval. The hold-down interval prevents Layer 2 loops from occurring during failover, by delaying the new Master from forwarding traffic long enough to ensure that the failed Master is really unavailable. ProCurveRS(config-vlan-200-vrid-1)# hold-down-interval 4 Syntax: [no] hold-down-interval <num> The <num> parameter specifies the hold-down interval. Possible values: 1 84 seconds Default value: 2 seconds include-port Removes a port from a VSRP VRID. By default, all the ports in the VLAN on which you configure a VRID are interfaces for the VRID. You can remove a port from the VRID while allowing it to remain in the VLAN. Removing a port is useful in the following cases: There is no risk of a loop occurring, such as when the port is attached directly to an end host. You plan to use a port in an MRP ring. ProCurveRS(config-vlan-200-vrid-1)# no include-port ethernet 1/2 Syntax: [no] include-port ethernet The ethernet parameter specifies the port you are removing from the VRID. The port remains in the VLAN but its forwarding state is not controlled by VSRP. Possible values: See above Default value: All ports in the VRID s VLAN are included initial-ttl Changes the TTL for a VSRP VRID. A VSRP Hello packet s TTL specifies how many hops the packet can traverse before being dropped. A hop can be a Routing Switch. You can specify from 1 255. The default TTL is 2. When a VSRP device (Master or Backup) sends a VSRP HEllo packet, the device subtracts one from the TTL. Thus, if the TTL is 2, the device that originates the Hello packet sends it out with a TTL of 1. Each subsequent device that receives the packet also subtracts one from the packet s TTL. When the packet has a TTL of 1, the receiving device subtracts 1 and then drops the packet because the TTL is zero. NOTE: An MRP ring is considered to be a single hop, regardless of the number of nodes in the ring. ProCurveRS(config-vlan-200-vrid-1)# initial-ttl 5 32-4 June 2005
VSRP Commands Syntax: [no] initial-ttl <num> The <num> parameter specifies the TTL. Possible values: 1 255 Default value: 2 ip address Specifies an IP address to back up. NOTE: This command is equivalent to the ip-address command. When you specify an IP address, VSRP provides redundancy for the address. This is useful if you want to back up the gateway address used by hosts attached to the VSRP Backups. VSRP does not require you to specify an IP address. If you do not specify an address, VSRP provides Layer 2 redundancy. If you do specify an address, VSRP provides Layer 2 and Layer 3 redundancy. The Layer 3 redundancy support is the same as VRRPE support. For information, see the Configuring VRRP and VRRPE chapter in the Advanced Configuration and Management Guide for ProCurve 9300/9400 Series Routing Switches. NOTE: The VRID IP address must be in the same sub-net as a real IP address configured on the VSRP interface, but cannot be the same as a real IP address configured on the interface. NOTE: Failover applies to both Layer 2 and Layer 3. ProCurveRS(config-vlan-200-vrid-1)# ip address 10.10.10.1 Syntax: [no] ip address <ip-addr> Possible values: An IP address Default value: None ip-address Specifies an IP address to back up. NOTE: This command is equivalent to the ip address command (above). ProCurveRS(config-vlan-200-vrid-1)# ip-address 10.10.10.1 Syntax: [no] ip-address <ip-addr> Possible values: An IP address Default value: None no Disables other commands. To disable a command, place the word no before the command. non-preempt-mode Disables preemption on a Backup. By default, a Backup that has a higher priority than another Backup that has become the Master can preempt the Master, and take over the role of Master. If you want to prevent this behavior, disable preemption. June 2005 32-5
Command Line Interface Reference for ProCurve 9300/9400 Series Routing Switches Preemption applies only to Backups and takes effect only when the Master has failed and a Backup has assumed ownership of the VRID. The feature prevents a Backup with a higher priority from taking over as Master from another Backup that has a lower priority but has already become the Master of the VRID. Preemption is especially useful for preventing flapping in situations where there are multiple Backups and a Backup with a lower priority than another Backup has assumed ownership, because the Backup with the higher priority was unavailable when ownership changed. If you enable the non-preempt mode (thus disabling the preemption feature) on all the Backups, the Backup that becomes the Master following the disappearance of the Master continues to be the Master. The new Master is not preempted. ProCurveRS(config-vlan-200-vrid-1)# non-preempt-mode Syntax: [no] non-preempt-mode Default value: Pre-emption is enabled quit Returns you from any level of the CLI to the User EXEC mode. ProCurveRS(config-vlan-200-vrid-1)# quit ProCurveRS> Syntax: quit save-current-values Configures a Backup to save the VSRP timer values received from the Master instead of the timer values configured on the Backup. The Hello messages sent by a VRID s master contain the VRID values for the following VSRP timers: Hello interval Dead interval Backup Hello interval Hold-down interval By default, each Backup saves the configured timer values to its startup-config file when you save the device s configuration. You can configure a Backup to instead save the current timer values received from the Master when you save the configuration. Saving the current timer values instead of the configured ones helps ensure consistent timer usage for all the VRID s devices. NOTE: The Backups always use the value of the timer scale received from the Master, regardless of whether the timer values that are saved in the configuration are the values configured on the Backup or the values received from the Master. ProCurveRS(config-vlan-200-vrid-1)# save-current-values Syntax: [no] save-current-values 32-6 June 2005
VSRP Commands show Default value: Disabled; each Backup saves the configured timer values to its startup-config file when you save the device s configuration Displays a variety of configuration and statistical information about the device. See Show Commands on page 40-1. track-port Configures a VRID to track an interface. You can configure the VRID on one interface to track the link state of another interface on the device. This capability is useful for tracking the state of the exit interface for the path for which the VRID is providing redundancy. ProCurveRS(config-vlan-200-vrid-1)# track-port e 2/4 Syntax: [no] track-port ethernet <portnum> ve <num> [priority <num>] The priority <num> parameter changes the VSRP priority of the interface. If this interface goes down, the VRID s VSRP priority is reduced by the amount of the track port priority you specify here. NOTE: The priority <num> option changes the priority of the specified interface, overriding the default track port priority. To change the default track port priority, use the backup track-priority <num> command. See backup on page 32-1. Possible values: See above Default value: None configured vsrp-aware Configures VSRP-aware security on VSRP-aware devices. NOTE: This feature is available in software releases 07.6.04 and later. This feature enables you to specify the authentication parameters that a VSRP-aware device will use on a VSRP backup switch. The authentication parameters that you define will not age out. The following configuration defines pri-key as the authentication string for accepting incoming VSRP hello packets. In this example, the VSRP-aware device will accept all incoming packets that have this authorization string. ProCurveRS(config)# vlan 10 ProCurveRS(config-vlan-10)# vsrp-aware vrid 3 simple-text-auth pri-key Syntax: vsrp-aware vrid <vrid number> simple text auth <string> The following configuration specifies no authentication as the preferred VSRP-aware security method. In this case, the VSRP device will not accept incoming packets that have authentication strings. ProCurveRS(config)# vlan 10 ProCurveRS(config-vlan-10)# vsrp-aware vrid 2 no-auth Syntax: vsrp-aware vrid <vrid number> no-auth The following configuration specifies no authentication for VSRP hello packets received on ports 1/1, 1/2, 1/3, and 1/4 in VRID 4. For these ports, the VSRP device will not accept incoming packets that have authentication strings. ProCurveRS(config)# vlan 10 June 2005 32-7
Command Line Interface Reference for ProCurve 9300/9400 Series Routing Switches ProCurveRS(config-vlan-10)# vsrp-aware vrid 4 no-auth port-list ethe 1/1 to 1/4 Syntax: vsrp-aware vrid <vrid number> no-auth port-list <port range> Possible values: <vrid number> is a valid VRID (from 1 to 255). no-auth specifies no authentication as the preferred VSRP-aware security method. The VSRP device will not accept incoming packets that have authentication strings. simple-text-auth <string> specifies the authentication string for accepting VSRP hello packets, where <string> can be up to 8 characters. port-list <port range> specifies the range of ports to include in the configuration. Default values: N/A write memory Saves the running configuration into the startup-config file. ProCurveRS(config-vlan-200-vrid-1)# write memory Syntax: write memory write terminal Displays the running configuration of the HP device on the terminal screen. NOTE: This command is equivalent to the show running-config command. ProCurveRS(config-vlan-200-vrid-1)# write terminal Syntax: write terminal 32-8 June 2005