底辺エンジニアの備忘録

30過ぎて、記憶力低下が著しい為、メモ代わりにしていく予定。 自身のスキルが低いので、内容の正確さは保障できません・・・OTL

JUNOS_VRRP

JUNOSのVRRP
vSRXで検証

 

IF Trackingも合わせて追加

<R1 Config>

 admin@R1# show interfaces | display set
set interfaces ge-0/0/0 unit 0 family inet address 172.16.1.1/24 vrrp-group 1 virtual-address 172.16.1.10
set interfaces ge-0/0/0 unit 0 family inet address 172.16.1.1/24 vrrp-group 1 priority 150
set interfaces ge-0/0/0 unit 0 family inet address 172.16.1.1/24 vrrp-group 1 preempt hold-time 10
set interfaces ge-0/0/0 unit 0 family inet address 172.16.1.1/24 vrrp-group 1 accept-data
set interfaces ge-0/0/0 unit 0 family inet address 172.16.1.1/24 vrrp-group 1 authentication-type simple
set interfaces ge-0/0/0 unit 0 family inet address 172.16.1.1/24 vrrp-group 1 authentication-key "$9$.fQntu1ylMuOxd"
set interfaces ge-0/0/0 unit 0 family inet address 172.16.1.1/24 vrrp-group 1 track priority-hold-time 100
set interfaces ge-0/0/0 unit 0 family inet address 172.16.1.1/24 vrrp-group 1 track interface ge-0/0/1 priority-cost 60

 

<R2 Config>

admin@R2# show interfaces | display set
set interfaces ge-0/0/0 unit 0 family inet address 172.16.1.2/24 vrrp-group 1 virtual-address 172.16.1.10
set interfaces ge-0/0/0 unit 0 family inet address 172.16.1.2/24 vrrp-group 1 priority 100
set interfaces ge-0/0/0 unit 0 family inet address 172.16.1.2/24 vrrp-group 1 accept-data
set interfaces ge-0/0/0 unit 0 family inet address 172.16.1.2/24 vrrp-group 1 authentication-type simple
set interfaces ge-0/0/0 unit 0 family inet address 172.16.1.2/24 vrrp-group 1 authentication-key "$9$SgglvLdb2GDkbsfz" 

 

CiscoのHSRPとほとんど同じだけど、忘れそうなのが以下

・accept-date ・・・VRRPのVIPへのPing応答を許可。

・priority-hold-time ・・IF trackingを設定した場合のPriorityが実際に変わるまでの時間。

track priority-hold timeの確認
ge-0/0/1 をDisabled後にshow vrrp で確認

 

 [edit]
admin@R1# run show vrrp detail
Physical interface: ge-0/0/0, Unit: 0, Address: 172.16.1.1/24
  Index: 68, SNMP ifIndex: 521, VRRP-Traps: disabled, VRRP-Version: 2
  Interface state: up, Group: 1, State: master, VRRP Mode: Active
  Priority: 150, Advertisement interval: 1, Authentication type: simple
  Advertisement threshold: 3, Computed send rate: 0
  Preempt: yes, Preempt hold time: 10
  Accept-data mode: yes, VIP count: 1, VIP: 172.16.1.10
  Advertisement Timer: 0.391s, Master router: 172.16.1.1
  Virtual router uptime: 00:51:39, Master router uptime: 00:09:28
  Virtual Mac: 00:00:5e:00:01:01
  Preferred: yes
  Tracking: enabled
  Current priority: 150, Configured priority: 150
  Priority hold time: 100, Remaining: 41.827, Pending priority: 90
  Interface tracking: enabled, Interface count: 1
  Interface Int state Int speed Incurred priority cost
  ge-0/0/1.0 down 0 60
  Route tracking: disabled

 →Remainningの値が0になるまでかかる。

ただし、Ciscoのpreempt delayのような「切り替わりは即時だけど、切り戻りはXX秒経過後」というのをやりたいんだけど、「vrrp-group 1 preempt hold-time」では出来ないので要調査。