此产品的文档集力求使用非歧视性语言。在本文档集中,非歧视性语言是指不隐含针对年龄、残障、性别、种族身份、族群身份、性取向、社会经济地位和交叉性的歧视的语言。由于产品软件的用户界面中使用的硬编码语言、基于 RFP 文档使用的语言或引用的第三方产品使用的语言,文档中可能无法确保完全使用非歧视性语言。 深入了解思科如何使用包容性语言。
思科采用人工翻译与机器翻译相结合的方式将此文档翻译成不同语言,希望全球的用户都能通过各自的语言得到支持性的内容。 请注意:即使是最好的机器翻译,其准确度也不及专业翻译人员的水平。 Cisco Systems, Inc. 对于翻译的准确性不承担任何责任,并建议您总是参考英文原始文档(已提供链接)。
本文档介绍对Nexus 9000中IPv6的虚拟路由器冗余协议版本3 (VRRPv3)进行故障排除的步骤。
Cisco NXOS®建议您了解以下主题:
本文档仅限于Nexus 9000等特定硬件。
本文档中的信息都是基于特定实验室环境中的设备编写的。本文档中使用的所有设备最初均采用原始(默认)配置。如果您的网络处于活动状态,请确保您了解所有命令的潜在影响。
VRRP版本2仅支持IPv4地址系列,但VRRP版本3 (VRRP3)同时支持IPv4和IPv6地址系列。在NX-OS上,不能在同一设备上同时启用VRRP和VRRPv3。如果Nexus交换机上已启用功能VRRP,则启用功能VRRPv3将显示一条错误消息,说明已启用VRRPv2。因此,必须执行从VRRP到VRRPv3的迁移,这会对服务影响最小。
注意:无虚拟端口通道(VPC)环境。
1)检验两端的配置是否匹配。
交换机 1:
Switch1# show run interface vlan 209
interface Vlan209
no shutdown
no ip redirects
ipv6 address X:X:X:X::70a/125
vrrpv3 1 address-family ipv6
priority 200
address X::X:X:X:297 primary
Switch1#
交换机 2:
Switch2# show run interface vlan 209
interface Vlan209
no shutdown
no ip redirects
ipv6 address X:X:X:X::70c/125
no ipv6 redirects
vrrpv3 1 address-family ipv6
address X::X:X:X:297 primary
Switch2#
2)验证mac地址表是否已正确填充。
交换机 1:
Switch1# show mac address-table vlan 209
Legend:
* - primary entry, G - Gateway MAC, (R) - Routed MAC, O - Overlay MAC
age - seconds since last seen,+ - primary entry using vPC Peer-Link,
(T) - True, (F) - False, C - ControlPlane MAC, ~ - vsan
VLAN MAC Address Type age Secure NTFY Ports
---------+-----------------+--------+---------+------+----+------------------
G 209 0000.5e00.0201 static - F F sup-eth1(R)
G 209 689e.0baa.dea7 static - F F sup-eth1(R)
Switch1#
module-1# show hardware internal tah rmac
Instance : 0
====================================
Mac-Address Vlan Flag
------------------------------------
68:9e:0b:aa:de:a7 0 SYSTEM
00:00:5e:00:02:01 209 VRMAC
module-1#
交换机 2:
Switch2# show mac address-table vlan 209
Legend:
* - primary entry, G - Gateway MAC, (R) - Routed MAC, O - Overlay MAC
age - seconds since last seen,+ - primary entry using vPC Peer-Link,
(T) - True, (F) - False, C - ControlPlane MAC, ~ - vsan
VLAN MAC Address Type age Secure NTFY Ports
---------+-----------------+--------+---------+------+----+------------------
* 209 0000.5e00.0201 dynamic 0 F F Eth1/51
G 209 689e.0baa.de07 static - F F sup-eth1(R)
Switch2#
Switch2# show hardware mac address-table 1 address 0000.5e00.0201
FE | VLAN | MAC | Dynamic | Port |Location Index|
| | | | | |
---+------+---------------+---------+---------+--------------+
0 209 0000.5e00.0201 dynamic Eth1/51
Switch2#
module-1# show hardware internal tah rmac
Instance : 0
====================================
Mac-Address Vlan Flag
------------------------------------
68:9e:0b:aa:de:07 0 SYSTEM
module-1#
3)检验参与组的设备的状态。
交换机 1:
Switch1# show vrrpv3 vlan 209
Vlan209 - Group 1 - Address-Family IPv6
State is Primary
State duration 15 hours 43 mins 44 secs
Virtual IP address is X::X:X:X:297
Virtual MAC address is 0000.5e00.0201
Advertisement interval is 1000 msec
Preemption enabled
Priority is 200, (Configured 200)
Primary Router is X::X:X:X:dea7 (local), priority is 200
Primary Advertisement interval is 1000 msec (expires in 813 msec)
Primary Down interval is unknown
Switch1#
交换机 2:
Switch2# show vrrpv3 vlan 209
Vlan209 - Group 1 - Address-Family IPv6
State is BACKUP
State duration 3 mins 57.928 secs
Virtual IP address is X::X:X:X:297
Virtual MAC address is 0000.5e00.0201
Advertisement interval is 1000 msec
Preemption enabled
Priority is 100, (Configured 100)
Primary Router is X::X:X:X:dea7, priority is 200
Primary Advertisement interval is 1000 msec (learned)
Primary Down interval is 3609 msec (expires in 3422 msec)
Switch2#
不完整的场景。
1) show vrrpv3 brief命令选项显示与组相关的简要信息,如组编号、地址系列、优先级、抢占、状态、主地址和组地址(即虚拟组IP)。在本例中,如上所述,两台交换机是主交换机,但两者都不正确。
交换机 1:
Switch1# show vrrpv3 brief
Interface Grp A-F Pri Time Own Pre State Primary addr/Group addr
Vlan209 1 IPv6 200 0 N Y Primary X::X:X:X:dea7(local) X::X:X:X:297
Switch1#
交换机 2:
Switch2# show vrrpv3 brief
Interface Grp A-F Pri Time Own Pre State Primary addr/Group addr
Vlan209 1 IPv6 100 0 N Y Primary X::X:X:X:de07(local) X::X:X:X:297
Switch2#
2) show vrrpv3 detail命令显示其他信息,如发送和接收的有关VRRPv3的通告、虚拟MAC地址和其他与错误和转换状态相关的统计信息。例如,收到的VRRPv3通告不会增加。
交换机 1:
Switch1# show vrrpv3 detail vlan 209
Vlan209 - Group 1 - Address-Family IPv6
State is Primary
State duration 12 hours 47 mins 40 secs
Virtual IP address is X::X:X:X:297
Virtual MAC address is 0000.5e00.0201
Advertisement interval is 1000 msec
Preemption enabled
Priority is 200, (Configured 200)
Primary Router is X::X:X:X:dea7 (local), priority is 200
Primary Advertisement interval is 1000 msec (expires in 284 msec)
Primary Down interval is unknown
VRRPv3 Advertisements: sent 57138 (errors 2) - rcvd 177 <--------
VRRPv2 Advertisements: sent 0 (errors 0) - rcvd 0
Group Discarded Packets: 0
VRRPv2 incompatibility: 0
IP Address Owner conflicts: 0
Invalid address count: 0
IP address configuration mismatch : 0
Invalid Advert Interval: 0
Adverts received in Init state: 0
Invalid group other reason: 0
Group State transition:
Init to Primary: 0
Init to backup: 4 (Last change Thu Apr 11 01:01:46.418 UTC)
Backup to Primary: 4 (Last change Thu Apr 11 01:01:49.637 UTC)
Primary to backup: 0
Primary to init: 3 (Last change Thu Apr 11 00:57:37.107 UTC)
Backup to init: 0
Switch1#
Switch1# show vrrpv3 detail vlan 209
Vlan209 - Group 1 - Address-Family IPv6
State is Primary
State duration 12 hours 51 mins 29 secs
Virtual IP address is fX::X:X:X:297
Virtual MAC address is 0000.5e00.0201
Advertisement interval is 1000 msec
Preemption enabled
Priority is 200, (Configured 200)
Primary Router is X::X:X:X:dea7 (local), priority is 200
Primary Advertisement interval is 1000 msec (expires in 667 msec)
Primary Down interval is unknown
VRRPv3 Advertisements: sent 57393 (errors 2) - rcvd 177 <--------
VRRPv2 Advertisements: sent 0 (errors 0) - rcvd 0
Group Discarded Packets: 0
VRRPv2 incompatibility: 0
IP Address Owner conflicts: 0
Invalid address count: 0
IP address configuration mismatch : 0
Invalid Advert Interval: 0
Adverts received in Init state: 0
Invalid group other reason: 0
Group State transition:
Init to Primary: 0
Init to backup: 4 (Last change Thu Apr 11 01:01:46.418 UTC)
Backup to Primary: 4 (Last change Thu Apr 11 01:01:49.637 UTC)
Primary to backup: 0
Primary to init: 3 (Last change Thu Apr 11 00:57:37.107 UTC)
Backup to init: 0
Switch1#
交换机 2:
Switch2# show vrrpv3 detail vlan 209
Vlan209 - Group 1 - Address-Family IPv6
State is Primary
State duration 12 hours 51 mins 49 secs
Virtual IP address is X::X:X:X:297
Virtual MAC address is 0000.5e00.0201
Advertisement interval is 1000 msec
Preemption enabled
Priority is 100, (Configured 100)
Primary Router is X::X:X:X:de07 (local), priority is 100
Primary Advertisement interval is 1000 msec (expires in 412 msec)
Primary Down interval is unknown
VRRPv3 Advertisements: sent 51764 (errors 0) - rcvd 6032 <--------
VRRPv2 Advertisements: sent 0 (errors 0) - rcvd 0
Group Discarded Packets: 0
VRRPv2 incompatibility: 0
IP Address Owner conflicts: 0
Invalid address count: 0
IP address configuration mismatch : 0
Invalid Advert Interval: 0
Adverts received in Init state: 0
Invalid group other reason: 0
Group State transition:
Init to Primary: 0
Init to backup: 1 (Last change Wed Apr 10 23:21:09.604 UTC)
Backup to Primary: 4 (Last change Thu Apr 11 00:57:40.229 UTC)
Primary to backup: 3 (Last change Thu Apr 11 00:54:11.758 UTC)
Primary to init: 0
Backup to init: 0
Switch2#
Switch2# show vrrpv3 detail vlan 209
Vlan209 - Group 1 - Address-Family IPv6
State is Primary
State duration 12 hours 55 mins 38 secs
Virtual IP address is fX::X:X:X:297
Virtual MAC address is 0000.5e00.0201
Advertisement interval is 1000 msec
Preemption enabled
Priority is 100, (Configured 100)
Primary Router is X::X:X:X:de07 (local), priority is 100
Primary Advertisement interval is 1000 msec (expires in 479 msec)
Primary Down interval is unknown
VRRPv3 Advertisements: sent 52019 (errors 0) - rcvd 6032 <--------
VRRPv2 Advertisements: sent 0 (errors 0) - rcvd 0
Group Discarded Packets: 0
VRRPv2 incompatibility: 0
IP Address Owner conflicts: 0
Invalid address count: 0
IP address configuration mismatch : 0
Invalid Advert Interval: 0
Adverts received in Init state: 0
Invalid group other reason: 0
Group State transition:
Init to Primary: 0
Init to backup: 1 (Last change Wed Apr 10 23:21:09.604 UTC)
Backup to Primary: 4 (Last change Thu Apr 11 00:57:40.229 UTC)
Primary to backup: 3 (Last change Thu Apr 11 00:54:11.758 UTC)
Primary to init: 0
Backup to init: 0
Switch2#
3) show vrrpv3 internal event-history debugs命令显示有关VRRPv3参与者所经历的不同阶段的信息。
交换机 1:
Switch1# show vrrpv3 internal event-history debugs
2024 Apr 11 01:01:49.642985: E_DEBUG vrrpv3 [23795]: VRRS Vlan209 [vrrpVlan209v61 tag]: Current MAC State Change: MAC=0000.5e00.0201, OldState='Active Wait', NewState='Active'
2024 Apr 11 01:01:49.642974: E_DEBUG vrrpv3 [23795]: VRRS Vlan209 [vrrpVlan209v61 tag]: Current MAC State Event: MAC=0000.5e00.0201, Event=Ack Active, CurrentState=Active Wait
2024 Apr 11 01:01:49.642963: E_DEBUG vrrpv3 [23795]: VRRS Vlan209 [vrrpVlan209v61 tag]: Pathway MAC Event: PathwayID=983043
2024 Apr 11 01:01:49.642952: E_DEBUG vrrpv3 [23795]: VRRS Vlan209 [vrrpVlan209v61 tag]: Notifying Pathway MAC Of Async Event: Event='Ack Active', ErrStr='SUCCESS'
2024 Apr 11 01:01:49.642941: E_DEBUG vrrpv3 [23795]: VRRS Vlan209 [vrrpVlan209v61 tag]: L2fm Alloc Response For MAC: MAC=0000.5e00.0201, Status=0x0, ErrStr='SUCCESS'
2024 Apr 11 01:01:49.642898: E_DEBUG vrrpv3 [23795]: VRRP-MTS: L2fm Alloc Response: RRToken=0x2f9a22, NumMessages=1, OverallStatus=0x0
2024 Apr 11 01:01:49.637478: E_DEBUG vrrpv3 [23795]: VRRS Vlan209: [vrrpVlan209v61 tag] Installing ICMPv6 Entry For: VIP=X::X:X:X:297, Flag=0x3
2024 Apr 11 01:01:49.637453: E_DEBUG vrrpv3 [23795]: VRRS Vlan209: [vrrpVlan209v61 tag] Activating VIP6, That Was In State: VIP=X::X:X:X:297, State='Inactive'
2024 Apr 11 01:01:49.637367: E_DEBUG vrrpv3 [23795]: VRRS Vlan209 [vrrpVlan209v61 tag]: Current MAC State Change: MAC=0000.5e00.0201, OldState='Standby', NewState='Active Wait'
2024 Apr 11 01:01:49.637306: E_DEBUG vrrpv3 [23795]: VRRS Vlan209 [vrrpVlan209v61 tag]: Current MAC State Event: MAC=0000.5e00.0201, Event=Request Active, CurrentState=Standby
2024 Apr 11 01:01:49.637295: E_DEBUG vrrpv3 [23795]: VRRS Vlan209 [vrrpVlan209v61 tag]: Pathway MAC Event: PathwayID=983043
2024 Apr 11 01:01:47.421619: E_DEBUG vrrpv3 [23795]: VRRP-MTS: Handling IPv6 Change 7: Ifindex=0x90100d1, OldIP=0::/0, NewIP=X:X:X:X::70a/125
2024 Apr 11 01:01:46.421957: E_DEBUG vrrpv3 [23795]: VRRS Vlan209 [vrrpVlan209v61 tag]: Current MAC State Change: MAC=0000.5e00.0201, OldState='', NewState='Standby'
2024 Apr 11 01:01:46.421950: E_DEBUG vrrpv3 [23795]: VRRS Vlan209 [vrrpVlan209v61 tag]: Current MAC State Event: MAC=0000.5e00.0201, Event=Ack Standby, CurrentState=
2024 Apr 11 01:01:46.421944: E_DEBUG vrrpv3 [23795]: VRRS Vlan209 [vrrpVlan209v61 tag]: Pathway MAC Event: PathwayID=983043
2024 Apr 11 01:01:46.421938: E_DEBUG vrrpv3 [23795]: VRRS Vlan209 [vrrpVlan209v61 tag]: Notifying Pathway MAC Of Async Event: Event='Ack Standby', ErrStr='SUCCESS'
2024 Apr 11 01:01:46.421932: E_DEBUG vrrpv3 [23795]: VRRS Vlan209 [vrrpVlan209v61 tag]: L2fm Alloc Response For MAC: MAC=0000.5e00.0201, Status=0x0, ErrStr='SUCCESS'
2024 Apr 11 01:01:46.421911: E_DEBUG vrrpv3 [23795]: VRRP-MTS: L2fm Alloc Response: RRToken=0x2f99cd, NumMessages=1, OverallStatus=0x0
2024 Apr 11 01:01:46.419597: E_DEBUG vrrpv3 [23795]: VRRS Vlan209: [vrrpVlan209v61 tag] Installing ICMPv6 Entry For: VIP=X::X:X:X:297, Flag=0x3
2024 Apr 11 01:01:46.419574: E_DEBUG vrrpv3 [23795]: VRRS Vlan209: [vrrpVlan209v61 tag] Deactivating VIP6, That Was In State: VIP=X::X:X:X:297, State='Shutdown'
2024 Apr 11 01:01:46.419515: E_DEBUG vrrpv3 [23795]: VRRS Vlan209 [vrrpVlan209v61 tag]: Current MAC State Change: MAC=0000.5e00.0201, OldState='Reserved', NewState=''
2024 Apr 11 01:01:46.419463: E_DEBUG vrrpv3 [23795]: VRRS Vlan209 [vrrpVlan209v61 tag]: Current MAC State Event: MAC=0000.5e00.0201, Event=Request Standby, CurrentState=Reserved
2024 Apr 11 01:01:46.419454: E_DEBUG vrrpv3 [23795]: VRRS Vlan209 [vrrpVlan209v61 tag]: Pathway MAC Event: PathwayID=983043
Switch1#
交换机 2:
Switch2# show vrrpv3 internal event-history debugs
2024 Apr 11 00:57:40.234767: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] Current MAC 0000.5e00.0201 state change: Active Wait -> Active
2024 Apr 11 00:57:40.234752: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] Current MAC 0000.5e00.0201 State event Ack Active, Current state Active Wait
2024 Apr 11 00:57:40.234744: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] pw id val is(983043)
2024 Apr 11 00:57:40.234736: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] Notifying pathway mac of async event: Ack Active, status SUCCESS
2024 Apr 11 00:57:40.234728: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] fx_macdb_handle_l2fm_alloc :: Alloc response for MAC 0000.5e00.0201 status = 0 error(SUCCESS)
2024 Apr 11 00:57:40.234694: E_DEBUG VRRP-MTS: L2FM alloc resp: rrtoken 0x3ba768, msgs 1, overall status 0
2024 Apr 11 00:57:40.229355: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] installing icmpv6 entry for vip X::X:X:X:297 flag 0x3
2024 Apr 11 00:57:40.229329: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] activating vip6 X::X:X:X:297, that was in 'Inactive' state
2024 Apr 11 00:57:40.229251: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] Current MAC 0000.5e00.0201 state change: Standby -> Active Wait
2024 Apr 11 00:57:40.229195: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] Current MAC 0000.5e00.0201 State event Request Active, Current state Standby
2024 Apr 11 00:57:40.229184: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] pw id val is(983043)
2024 Apr 11 00:57:36.813093: E_DEBUG VRRP-MTS: Received IM_PHY_LINK_STATE_CHANGE(down) for 0x1a006400
2024 Apr 11 00:54:11.763596: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] Current MAC 0000.5e00.0201 state change: -> Standby
2024 Apr 11 00:54:11.763587: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] Current MAC 0000.5e00.0201 State event Ack Standby, Current state
2024 Apr 11 00:54:11.763580: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] pw id val is(983043)
2024 Apr 11 00:54:11.763572: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] Notifying pathway mac of async event: Ack Standby, status SUCCESS
2024 Apr 11 00:54:11.763564: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] fx_macdb_handle_l2fm_alloc :: Alloc response for MAC 0000.5e00.0201 status = 0 error(SUCCESS)
2024 Apr 11 00:54:11.763533: E_DEBUG VRRP-MTS: L2FM alloc resp: rrtoken 0x3b791e, msgs 1, overall status 0
2024 Apr 11 00:54:11.758782: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] installing icmpv6 entry for vip X::X:X:X:297 flag 0x3
2024 Apr 11 00:54:11.758757: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] de-activating vip6 X::X:X:X:297, that was in 'Active' state
2024 Apr 11 00:54:11.758685: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] Current MAC 0000.5e00.0201 state change: Active ->
2024 Apr 11 00:54:11.758637: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] Current MAC 0000.5e00.0201 State event Request Standby, Current state Active
2024 Apr 11 00:54:11.758626: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] pw id val is(983043)
2024 Apr 11 00:54:06.643584: E_DEBUG VRRP-MTS: L2_PROTO_CHANGE: intf 0x1a006400 entering L2
2024 Apr 11 00:54:06.616851: E_DEBUG VRRP-MTS: Received IM_PHY_LINK_STATE_CHANGE(up) for 0x1a006400
2024 Apr 11 00:52:11.216190: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] Current MAC 0000.5e00.0201 state change: Active Wait -> Active
2024 Apr 11 00:52:11.216182: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] Current MAC 0000.5e00.0201 State event Ack Active, Current state Active Wait
2024 Apr 11 00:52:11.216174: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] pw id val is(983043)
2024 Apr 11 00:52:11.216167: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] Notifying pathway mac of async event: Ack Active, status SUCCESS
2024 Apr 11 00:52:11.216159: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] fx_macdb_handle_l2fm_alloc :: Alloc response for MAC 0000.5e00.0201 status = 0 error(SUCCESS)
2024 Apr 11 00:52:11.216125: E_DEBUG VRRP-MTS: L2FM alloc resp: rrtoken 0x3b3bc5, msgs 1, overall status 0
2024 Apr 11 00:52:11.210932: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] installing icmpv6 entry for vip X::X:X:X:297 flag 0x3
2024 Apr 11 00:52:11.210906: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] activating vip6 X::X:X:X:297, that was in 'Inactive' state
2024 Apr 11 00:52:11.210828: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] Current MAC 0000.5e00.0201 state change: Standby -> Active Wait
2024 Apr 11 00:52:11.210773: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] Current MAC 0000.5e00.0201 State event Request Active, Current state Standby
2024 Apr 11 00:52:11.210762: E_DEBUG VRRS Vlan209 [vrrpVlan209v61 tag] pw id val is(983043)
2024 Apr 11 00:52:08.025681: E_DEBUG VRRP-MTS: Received IM_PHY_LINK_STATE_CHANGE(down) for 0x1a006400
Switch2#
4) Ethanalyzer显示VRRP通告。VRRP通告仅由主交换机完成。VRRPv3的组播地址为ff02::12。
交换机 1:
Switch1# ethanalyzer local interface inband display-filter "vrrp.adver_int" limit-captured-frames 0
Capturing on inband
2024-04-11 14:07:50.050745 X::X:X:X:dea7 -> ff02::12 VRRP Announcement (v3)
2024-04-11 14:07:50.967333 X::X:X:X:dea7 -> ff02::12 VRRP Announcement (v3)
2024-04-11 14:07:51.861690 X::X:X:X:dea7 -> ff02::12 VRRP Announcement (v3)
2024-04-11 14:07:52.809845 X::X:X:X:dea7 -> ff02::12 VRRP Announcement (v3)
2024-04-11 14:07:53.700778 X::X:X:X:dea7 -> ff02::12 VRRP Announcement (v3)
2024-04-11 14:07:54.693008 X::X:X:X:dea7 -> ff02::12 VRRP Announcement (v3)
6 packets captured
Switch1#
交换机 2:
Switch2# ethanalyzer local interface inband display-filter "vrrp.adver_int" limit-captured-frames 0
Capturing on inband
2024-04-11 14:07:49.946663 X::X:X:X:de07 -> ff02::12 VRRP Announcement (v3)
2024-04-11 14:07:50.829985 X::X:X:X:de07 -> ff02::12 VRRP Announcement (v3)
2024-04-11 14:07:51.728800 X::X:X:X:de07 -> ff02::12 VRRP Announcement (v3)
2024-04-11 14:07:52.720034 X::X:X:X:de07 -> ff02::12 VRRP Announcement (v3)
2024-04-11 14:07:53.571038 X::X:X:X:de07 -> ff02::12 VRRP Announcement (v3)
2024-04-11 14:07:54.386109 X::X:X:X:de07 -> ff02::12 VRRP Announcement (v3)
6 packets captured
Switch2#
根据上面的输出,两台交换机都发送各自的通告(dea7和de07)。这表示参与同一VRRPv3组的两台交换机之间没有连接。
深入查看VRRPv3生成的数据包,可以找到有关MAC地址、优先级、版本和IP的详细信息。
交换机 1:
Ethernet II, Src: ICANNIAN_00:02:01 (00:00:5e:00:02:01), Dst: IPv6mcast_12 (33:33:00:00:00:12)
Frame 206: 82 bytes on wire (656 bits), 82 bytes captured (656 bits)
Ethernet II, Src: ICANNIAN_00:02:01 (00:00:5e:00:02:01), Dst: IPv6mcast_12 (33:33:00:00:00:12)
Internet Protocol Version 6, Src: X::X:X:X:dea7, Dst: ff02::12
Virtual Router Redundancy Protocol
Version 3, Packet type 1 (Advertisement)
Virtual Rtr ID: 1
Priority: 200 (Default priority for a backup VRRP router)
Addr Count: 1
0000 .... = Reserved: 0
.... 0000 0110 0100 = Adver Int: 100
Checksum: 0xb912 [correct]
[Checksum Status: Good]
IPv6 Address: X::X:X:X:297
交换机 2:
Frame 82: 78 bytes on wire (624 bits), 78 bytes captured (624 bits)
Ethernet II, Src: ICANNIAN_00:02:01 (00:00:5e:00:02:01), Dst: IPv6mcast_12 (33:33:00:00:00:12)
Frame 82: 78 bytes on wire (624 bits), 78 bytes captured (624 bits)
Ethernet II, Src: ICANNIAN_00:02:01 (00:00:5e:00:02:01), Dst: IPv6mcast_12 (33:33:00:00:00:12)
Internet Protocol Version 6, Src: X::X:X:X:de07, Dst: ff02::12
Virtual Router Redundancy Protocol
Version 3, Packet type 1 (Advertisement)
Virtual Rtr ID: 1
Priority: 100 (Default priority for a backup VRRP router)
Addr Count: 1
0000 .... = Reserved: 0
.... 0000 0110 0100 = Adver Int: 100
Checksum: 0xb912 [correct]
[Checksum Status: Good]
IPv6 Address: X::X:X:X:297
5)一旦连接问题得到解决(在本例中即使SVI处于运行状态,第2层接口也处于关闭状态),交换机现在必须显示正确的状态(分别为主交换机和备用),并且只有主交换机才会发送通告。
交换机 1:
Switch1# show vrrpv3
Vlan209 - Group 1 - Address-Family IPv6
State is Primary
State duration 13 hours 42 mins 46 secs
Virtual IP address is X::X:X:X:297
Virtual MAC address is 0000.5e00.0201
Advertisement interval is 1000 msec
Preemption enabled
Priority is 200, (Configured 200)
Primary Router is X::X:X:X:dea7 (local), priority is 200
Primary Advertisement interval is 1000 msec (expires in 118 msec)
Primary Down interval is unknown
Switch1#
Switch1#
Switch1# ethanalyzer local interface inband display-filter "vrrp" limit-captured-frames 0
Capturing on inband
2024-04-11 14:48:48.125754 X::X:X:X:dea7 -> ff02::12 VRRP Announcement (v3)
2024-04-11 14:48:48.125794 X::X:X:X:dea7 -> ff02::12 VRRP Announcement (v3)
2024-04-11 14:48:49.002998 X::X:X:X:dea7 -> ff02::12 VRRP Announcement (v3)
2024-04-11 14:48:49.003035 X::X:X:X:dea7 -> ff02::12 VRRP Announcement (v3)
2024-04-11 14:48:49.983749 X::X:X:X:dea7 -> ff02::12 VRRP Announcement (v3)
2024-04-11 14:48:49.983782 X::X:X:X:dea7 -> ff02::12 VRRP Announcement (v3)
6 packets captured
Switch1#
当指向VRRPv3的组播地址时,主交换机中会触发显示正确MAC地址的ELAM:
Switch1(TAH-elam-insel6)# set outer ipv6 src_ip fe80::6a9e:bff:feaa:dea7 dst_ip ff02::12
Switch1(TAH-elam-insel6)# start
Switch1(TAH-elam-insel6)# report
HOMEWOOD ELAM REPORT SUMMARY
slot - 1, asic - 0, slice - 0
============================
Incoming Interface: sup-eth
Src Idx : 0x0, Src BD : 209
Outgoing Interface Info: met_ptr 0
Packet Type: IPv6
Dst MAC address: 33:33:00:00:00:12
Src MAC address: 00:00:5E:00:02:01
Dst IPv6 address: FF02:0000:0000:0000:0000:0000:0000:0012
Src IPv6 address: FE80:0000:0000:0000:6A9E:0BFF:FEAA:DEA7
Ver = 6, Pkt len = 40, Payload_length = 4
L4 Protocol : 112
Drop Info:
----------
LUA:
LUB:
LUC:
LUD:
Final Drops:
vntag:
vntag_valid : 0
vntag_vir : 0
vntag_svif : 0
Switch1(TAH-elam-insel6)#
交换机 2:
Switch2# show vrrpv3
Vlan209 - Group 1 - Address-Family IPv6
State is BACKUP
State duration 1.538 secs
Virtual IP address is X::X:X:X:297
Virtual MAC address is 0000.5e00.0201
Advertisement interval is 1000 msec
Preemption enabled
Priority is 100, (Configured 100)
Primary Router is X::X:X:X:dea7, priority is 200
Primary Advertisement interval is 1000 msec (learned)
Primary Down interval is 3609 msec (expires in 2886 msec)
Switch2#
Switch2# ethanalyzer local interface inband display-filter "vrrp" limit-captured-frames 0
Capturing on inband
2024-04-11 14:48:48.082516 X::X:X:X:dea7 -> ff02::12 VRRP Announcement (v3)
2024-04-11 14:48:48.959735 X::X:X:X:dea7 -> ff02::12 VRRP Announcement (v3)
2024-04-11 14:48:49.940504 X::X:X:X:dea7 -> ff02::12 VRRP Announcement (v3)
3 packets captured
Switch2#
当运行ELAM时,可以在备份设备上看到通告。通告来自主交换机(X::X:X:X:dea7),它正在正确的传入接口(以太网1/51)中接收
Switch2# show hardware internal tah interface e1/51
#########################################
IfIndex: 0x1a006400
DstIndex: 5944
IfType: 26
Asic: 0
Asic: 0
AsicPort: 60
SrcId: 120
Slice: 0
PortOnSlice: 60
Table entries for interface Ethernet1/51
Switch2(TAH-elam)# trigger init asic 0 slice 0 in-select 6 out-select 0 use-src-id 120
Switch2(TAH-elam-insel6)# set outer ipv6 src_ip X::X:X:X:dea7
Switch2(TAH-elam-insel6)# start
Switch2(TAH-elam-insel6)# report
HOMEWOOD ELAM REPORT SUMMARY
slot - 1, asic - 0, slice - 0
============================
Incoming Interface: Eth1/51
Src Idx : 0xc9, Src BD : 209
Outgoing Interface Info: met_ptr 0
Packet Type: IPv6
Dst MAC address: 33:33:00:00:00:12
Src MAC address: 00:00:5E:00:02:01
.1q Tag0 VLAN: 209, cos = 0x6
Sup hit: 1, Sup Idx: 3344
Dst IPv6 address: FF02:0000:0000:0000:0000:0000:0000:0012
Src IPv6 address: X:X:X:X:X:X:X:DEA7
Ver = 6, Pkt len = 24, Payload_length = 4
L4 Protocol : 112
Drop Info:
----------
LUA:
LUB:
LUC:
LUD:
Final Drops:
vntag:
vntag_valid : 0
vntag_vir : 0
vntag_svif : 0
Switch2(TAH-elam-insel6)#
版本 | 发布日期 | 备注 |
---|---|---|
1.0 |
15-Apr-2024 |
初始版本 |