/
Example for Configuring MLAG with Active-Active-VRRP(1)

Example for Configuring MLAG with Active-Active-VRRP(1)

Owned by Tracy Yang (Unlicensed)
Dec 05, 2019

Networking Requirements

In this example, there are two groups of MLAG and VRRP as shown in Figure 1. One group contains Switch A, Switch B and HostA, another group contains Switch C, Switch D and HostB. This two groups of switches communicate with each other though IP Network.

The two groups of MLAG switches connect through a LACP(Link Aggregation Control Protocol) to HostA and HostB.

It implements the communication between HostA to HostB.

Figure 1 MLAG Topology With VRRP


Procedure

Configuring MLAG on SwitchA

Step1         Configure an aggregation interface with LACP mode.

    admin@XorPlus# set interface aggregate-ethernet ae1 aggregated-ether-options lacp enable true

Step2         Add member interfaces to a LAG.

   admin@XorPlus# set interface gigabit-ethernet te-1/1/49 ether-options 802.3ad ae1

   admin@XorPlus# set interface gigabit-ethernet te-1/1/51 ether-options 802.3ad ae3

   admin@XorPlus# set interface gigabit-ethernet te-1/1/53 ether-options 802.3ad ae3   

Step3        Configure VLAN.

   admin@XorPlus# set vlans vlan-id 100 l3-interface vlan-100

   admin@XorPlus# set vlans vlan-id 300 l3-interface vlan-300

   admin@XorPlus# set vlans vlan-id 400 l3-interface vlan-400

   admin@XorPlus# set vlan-interface interface vlan-300 vif vlan-300 address 192.168.30.1 prefix-length 24

   admin@XorPlus# set vlan-interface interface vlan-100 vif vlan-100 address 172.168.30.2 prefix-length 24

   admin@XorPlus# set vlan-interface interface vlan-400 vif vlan-400 address 192.168.40.1 prefix-length 24

   admin@XorPlus# set interface aggregate-ethernet ae1 family ethernet-switching port-mode trunk

   admin@XorPlus# set interface aggregate-ethernet ae1 family ethernet-switching vlan members 100

   admin@XorPlus# set interface aggregate-ethernet ae3 family ethernet-switching native-vlan-id 300

   admin@XorPlus# set interface aggregate-ethernet ae3 family ethernet-switching port-mode trunk

   admin@XorPlus# set interface aggregate-ethernet ae3 family ethernet-switching vlan members 100

   admin@XorPlus# set interface gigabit-ethernet te-1/1/50 family ethernet-switching native-vlan-id 400

Step4        Configure MLAG domain ID.

   admin@XorPlus# set interface aggregate-ethernet ae1 aggregated-ether-options mlag domain-id 2

Step5        Configure the peer IP address and the peer-link for the MLAG peer.

   admin@XorPlus# set interface aggregate-ethernet ae1 aggregated-ether-options mlag peer 192.168.30.2 peer-link ae3

Step6       Configure system ID for LACP negotiation.

                  admin@XorPlus# set interface aggregate-ethernet ae1 aggregated-ether-options mlag system id 00:B0:BC:00:00:00

                  System ID configured on the MLAG peer devices should be consistent.

Step7         Configure a static ARP entry for peer-link interface.

   admin@XorPlus# set interface aggregate-ethernet ae3 static-ethernet-switching mac-address 00:18:23:30:E7:90 vlan 300

   admin@XorPlus# set protocols arp interface vlan-300 address 192.168.30.2 mac-address 00:18:23:30:E7:90

NOTE:

PICA8 recommends configuring a static ARP for peer-link interface to prevent ARP entry of the peer-link interface from being modified by ARP attack packets.

Step8        Configure static route to HostB.

   admin@XorPlus# set protocols static route 172.168.60.0/24 next-hop 192.168.40.2

Configuring VRRP on SwitchA

Step1        Configure virtual ip for VRRP.

   admin@XorPlus# set protocols vrrp interface vlan-100 vif vlan-100 vrid 2 ip 172.168.30.1

Step2        Enable Active-Active-VRRP function.

   admin@XorPlus# set protocols vrrp interface vlan-100 vif vlan-100 vrid 2 load-balance disable false

Configuring MLAG on SwitchB

Step1         Configure an aggregation interface with LACP mode.

    admin@XorPlus# set interface aggregate-ethernet ae1 aggregated-ether-options lacp enable true

Step2         Add member interfaces to a LAG.

   admin@XorPlus# set interface gigabit-ethernet te-1/1/49 ether-options 802.3ad ae1

   admin@XorPlus# set interface gigabit-ethernet te-1/1/51 ether-options 802.3ad ae3

   admin@XorPlus# set interface gigabit-ethernet te-1/1/53 ether-options 802.3ad ae3   

Step3        Configure VLAN.

   admin@XorPlus# set vlans vlan-id 100 l3-interface vlan-100

   admin@XorPlus# set vlans vlan-id 300 l3-interface vlan-300

   admin@XorPlus# set vlans vlan-id 500 l3-interface vlan-500

   admin@XorPlus# set vlan-interface interface vlan-300 vif vlan-300 address 192.168.30.2 prefix-length 24

   admin@XorPlus# set vlan-interface interface vlan-100 vif vlan-100 address 172.168.30.3 prefix-length 24

   admin@XorPlus# set vlan-interface interface vlan-500 vif vlan-500 address 192.168.50.1 prefix-length 24

   admin@XorPlus# set interface aggregate-ethernet ae1 family ethernet-switching port-mode trunk

   admin@XorPlus# set interface aggregate-ethernet ae1 family ethernet-switching vlan members 100

   admin@XorPlus# set interface aggregate-ethernet ae3 family ethernet-switching native-vlan-id 300

   admin@XorPlus# set interface aggregate-ethernet ae3 family ethernet-switching port-mode trunk

   admin@XorPlus# set interface aggregate-ethernet ae3 family ethernet-switching vlan members 100

   admin@XorPlus# set interface gigabit-ethernet te-1/1/50 family ethernet-switching native-vlan-id 500

Step4        Configure MLAG domain ID.

   admin@XorPlus# set interface aggregate-ethernet ae1 aggregated-ether-options mlag domain-id 2

Step5        Configure the peer IP address and the peer-link for the MLAG peer.

   admin@XorPlus# set interface aggregate-ethernet ae1 aggregated-ether-options mlag peer 192.168.30.1 peer-link ae3

Step6       Configure system ID for LACP negotiation.

                  admin@XorPlus# set interface aggregate-ethernet ae1 aggregated-ether-options mlag system id 00:B0:BC:00:00:00

Step7         Configure a static ARP entry for peer-link interface.

   admin@XorPlus# set interface aggregate-ethernet ae3 static-ethernet-switching mac-address CC:37:AB:B6:9C:33 vlan 300

   admin@XorPlus# set protocols arp interface vlan-300 address 192.168.30.1 mac-address CC:37:AB:B6:9C:33

NOTE:

PICA8 recommends configuring a static ARP for peer-link interface to prevent ARP entry of the peer-link interface from being modified by ARP attack packets.

Step8        Configure static route to HostB.

   admin@XorPlus# set protocols static route 172.168.60.0/24 next-hop 192.168.50.2

Configuring VRRP on SwitchB

Step1        Configure virtual ip for VRRP.

   admin@XorPlus# set protocols vrrp interface vlan-100 vif vlan-100 vrid 2 ip 172.168.30.1

Step2        Enable Active-Active-VRRP function.

   admin@XorPlus# set protocols vrrp interface vlan-100 vif vlan-100 vrid 2 load-balance disable false

Configuring MLAG on SwitchC

Step1         Configure an aggregation interface with LACP mode.

    admin@XorPlus# set interface aggregate-ethernet ae2 aggregated-ether-options lacp enable true

Step2         Add member interfaces to a LAG.

   admin@XorPlus# set interface gigabit-ethernet te-1/1/49 ether-options 802.3ad ae2

   admin@XorPlus# set interface gigabit-ethernet te-1/1/51 ether-options 802.3ad ae4

   admin@XorPlus# set interface gigabit-ethernet te-1/1/52 ether-options 802.3ad ae4   

Step3        Configure VLAN.

   admin@XorPlus# set vlans vlan-id 200 l3-interface vlan-200

   admin@XorPlus# set vlans vlan-id 700 l3-interface vlan-700

   admin@XorPlus# set vlans vlan-id 800 l3-interface vlan-800

   admin@XorPlus# set vlan-interface interface vlan-200 vif vlan-200 address 172.168.60.2 prefix-length 24

   admin@XorPlus# set vlan-interface interface vlan-700 vif vlan-700 address 192.168.70.1 prefix-length 24

   admin@XorPlus# set vlan-interface interface vlan-800 vif vlan-800 address 192.168.41.1 prefix-length 24

   admin@XorPlus# set interface aggregate-ethernet ae2 family ethernet-switching port-mode trunk

   admin@XorPlus# set interface aggregate-ethernet ae2 family ethernet-switching vlan members 200

   admin@XorPlus# set interface aggregate-ethernet ae4 family ethernet-switching native-vlan-id 700

   admin@XorPlus# set interface aggregate-ethernet ae4 family ethernet-switching port-mode trunk

   admin@XorPlus# set interface aggregate-ethernet ae4 family ethernet-switching vlan members 200

   admin@XorPlus# set interface gigabit-ethernet te-1/1/50 family ethernet-switching native-vlan-id 800

Step4        Configure MLAG domain ID.

   admin@XorPlus# set interface aggregate-ethernet ae2 aggregated-ether-options mlag domain-id 3

Step5        Configure the peer IP address and the peer-link for the MLAG peer.

   admin@XorPlus# set interface aggregate-ethernet ae2 aggregated-ether-options mlag peer 192.168.70.2 peer-link ae4

Step6       Configure system ID for LACP negotiation.

                  admin@XorPlus# set interface aggregate-ethernet ae1 aggregated-ether-options mlag system id 00:B0:BC:00:00:01

Step7         Configure a static ARP entry for peer-link interface.

   admin@XorPlus# set interface aggregate-ethernet ae4 static-ethernet-switching mac-address A0:34:44:32:9C:23 vlan 700

   admin@XorPlus# set protocols arp interface vlan-700 address 192.168.70.2 mac-address A0:34:44:32:9C:23

NOTE:

PICA8 recommends configuring a static ARP for peer-link interface to prevent ARP entry of the peer-link interface from being modified by ARP attack packets.

Step8        Configure static route to HostA.

   admin@XorPlus# set protocols static route 172.168.30.0/24 next-hop 192.168.41.2

Configuring VRRP on SwitchC

Step1        Configure virtual ip for VRRP.

   admin@XorPlus# set protocols vrrp interface vlan-200 vif vlan-200 vrid 3 ip 172.168.60.1

Step2        Enable Active-Active-VRRP function.

   admin@XorPlus# set protocols vrrp interface vlan-200 vif vlan-200 vrid 3 load-balance disable false

Configuring MLAG on SwitchD

Step1         Configure an aggregation interface with LACP mode.

    admin@XorPlus# set interface aggregate-ethernet ae2 aggregated-ether-options lacp enable true

Step2         Add member interfaces to a LAG.

   admin@XorPlus# set interface gigabit-ethernet te-1/1/49 ether-options 802.3ad ae2

   admin@XorPlus# set interface gigabit-ethernet te-1/1/51 ether-options 802.3ad ae4

   admin@XorPlus# set interface gigabit-ethernet te-1/1/52 ether-options 802.3ad ae4   

Step3        Configure VLAN.

   admin@XorPlus# set vlans vlan-id 200 l3-interface vlan-200

   admin@XorPlus# set vlans vlan-id 700 l3-interface vlan-700

   admin@XorPlus# set vlans vlan-id 800 l3-interface vlan-900

   admin@XorPlus# set vlan-interface interface vlan-200 vif vlan-200 address 172.168.60.3 prefix-length 24

   admin@XorPlus# set vlan-interface interface vlan-700 vif vlan-700 address 192.168.70.2 prefix-length 24

   admin@XorPlus# set vlan-interface interface vlan-900 vif vlan-900 address 192.168.51.1 prefix-length 24

   admin@XorPlus# set interface aggregate-ethernet ae2 family ethernet-switching port-mode trunk

   admin@XorPlus# set interface aggregate-ethernet ae2 family ethernet-switching vlan members 200

   admin@XorPlus# set interface aggregate-ethernet ae4 family ethernet-switching native-vlan-id 700

   admin@XorPlus# set interface aggregate-ethernet ae4 family ethernet-switching port-mode trunk

   admin@XorPlus# set interface aggregate-ethernet ae4 family ethernet-switching vlan members 200

   admin@XorPlus# set interface gigabit-ethernet te-1/1/50 family ethernet-switching native-vlan-id 900

Step4        Configure MLAG domain ID.

   admin@XorPlus# set interface aggregate-ethernet ae2 aggregated-ether-options mlag domain-id 3

Step5        Configure the peer IP address and the peer-link for the MLAG peer.

   admin@XorPlus# set interface aggregate-ethernet ae2 aggregated-ether-options mlag peer 192.168.70.1 peer-link ae4

Step6       Configure system ID for LACP negotiation.

                  admin@XorPlus# set interface aggregate-ethernet ae1 aggregated-ether-options mlag system id 00:B0:BC:00:00:01

Step7         Configure a static ARP entry for peer-link interface.

   admin@XorPlus# set interface aggregate-ethernet ae4 static-ethernet-switching mac-address 11:31:00:C1:8C:11 vlan 700

   admin@XorPlus# set protocols arp interface vlan-700 address 192.168.70.1 mac-address 11:31:00:C1:8C:11

NOTE:

PICA8 recommends configuring a static ARP for peer-link interface to prevent ARP entry of the peer-link interface from being modified by ARP attack packets.

Step8        Configure static route to HostA.

   admin@XorPlus# set protocols static route 172.168.30.0/24 next-hop 192.168.51.2

Configuring VRRP on SwitchD

Step1        Configure virtual ip for VRRP.

   admin@XorPlus# set protocols vrrp interface vlan-200 vif vlan-200 vrid 3 ip 172.168.60.1

Step2        Enable Active-Active-VRRP function.

   admin@XorPlus# set protocols vrrp interface vlan-200 vif vlan-200 vrid 3 load-balance disable false

Copyright © 2025 Pica8 Inc. All Rights Reserved.