Example for Configuring MLAG with Active-Active-VRRP
- Tracy Yang
Networking Requirements
Figure 1. User Configuration Topology of MLAG with VRRP
When an MLAG is configured to provide L3 routing functions to downstream clients, the MLAG peers should provide the same gateway address to the downstream clients. VRRP groups combine the MLAG peer devices into a virtual router and use the IP address of the VRRP virtual router to communicate with the access devices as the default gateway address. When one device in the VRRP group fails, VRRP mechanism can elect a new gateway to transmit service traffic thus ensuring the reliable operation of the layer-3 network.
Basic Deployment
- In Figure 1, a two-layer MLAG is deployed in the topology, where Switch1 and Switch2 form an MLAG peer at aggregation layer, Switch3 and Switch4 form an MLAG peer at access layer. Switch1and Switch2 are in MLAG domain 1; Switch3 and Switch4 are in MLAG domain 2. It is mandatory that different pairs of MLAG peer devices should use different domain IDs.
- In the two-layer MLAG topology, MLAG member ports on the MLAG peer in the same domain MUST belong to the same MLAG, that is, the member ports should be configured with the same link ID. Use link ID 1 on Switch1 and Switch2 to bind all the MLAG member ports, link ID 2 is used on Switch3 and Switch4.
- Active-Active VRRP is deployed on Switch1 and Switch2 as Gateway for Host devices of VLAN 20.
- Access Switch5 dual-accesses to the network through Switch3 and Switch4 by LAG interface.
Networking Address Planning
The networking IP address planning is shown in the following table.
Switch | Physical Interface | Aggregate Interface | VLAN Interface and IP Address |
Switch1 | Te-1/1/2 | ae3 | VLAN interface 4092: 192.168.45.2 |
Te-1/1/3 | |||
Te-1/1/4 | ae1 | VLAN interface 20: 11.251.201.1 VRRP virtual IP: 11.251.201.3 | |
Te-1/1/6 | |||
Switch2 | Te-1/1/2 | ae3 | VLAN interface 4092: 192.168.45.1 |
Te-1/1/3 | |||
Te-1/1/4 | ae1 | VLAN interface 20: 11.251.201.2 VRRP virtual IP: 11.251.201.3 | |
Te-1/1/6 | |||
Switch3 | Te-1/1/2 | ae4 | VLAN interface 4093: 192.168.46.2 |
Te-1/1/6 | |||
Te-1/1/1 | ae1 | - | |
Te-1/1/3 | |||
Te-1/1/5 | ae6 | - | |
Switch4 | Te-1/1/2 | ae4 | VLAN interface 4093: 192.168.46.1 |
Te-1/1/6 | |||
Te-1/1/4 | ae1 | - | |
Te-1/1/7 | |||
Te-1/1/5 | ae6 | - | |
Switch5 | Ge-1/1/1 | ae6 | - |
Ge-1/1/2 |
Procedure
Switch1
Step1Â Â Â Â Â Â Â Â Configure the aggregation interface with LACP mode.
admin@Switch1# set interface aggregate-ethernet ae1 aggregated-ether-options lacp enable true
Step2Â Â Â Â Â Â Â Â Configure the VLANs.
admin@Switch1# set vlans vlan-id 10-19 admin@Switch1# set vlans vlan-id 20 l3-interface 20 admin@Switch1# set vlans vlan-id 4088 l3-interface 4088 admin@Switch1# set interface aggregate-ethernet ae1 family ethernet-switching native-vlan-id 10 admin@Switch1# set interface aggregate-ethernet ae1 family ethernet-switching port-mode trunk admin@Switch1# set interface aggregate-ethernet ae1 family ethernet-switching vlan members 10-19 admin@Switch1# set interface aggregate-ethernet ae1 family ethernet-switching vlan members 20 admin@Switch1# set interface aggregate-ethernet ae3 family ethernet-switching native-vlan-id 4088 admin@Switch1# set interface aggregate-ethernet ae3 family ethernet-switching port-mode trunk admin@Switch1# set interface aggregate-ethernet ae3 family ethernet-switching vlan members 10-19 admin@Switch1# set interface aggregate-ethernet ae3 family ethernet-switching vlan members 20
Step3Â Â Â Â Â Â Â Â Configure the L3 interface IP address.
admin@Switch1# set l3-interface vlan-interface 4088 address 192.168.45.2 prefix-length 24 admin@Switch1# set l3-interface vlan-interface 20 address 11.251.201.1 prefix-length 24
Step4Â Â Â Â Â Â Â Â Add interfaces to the LAG port.
admin@Switch1# set interface gigabit-ethernet te-1/1/2 ether-options 802.3ad ae3 admin@Switch1# set interface gigabit-ethernet te-1/1/3 ether-options 802.3ad ae3 admin@Switch1# set interface gigabit-ethernet te-1/1/4 ether-options 802.3ad ae1 admin@Switch1# set interface gigabit-ethernet te-1/1/6 ether-options 802.3ad ae1
Step5Â Â Â Â Â Â Â Â Configure MLAG domain ID.
admin@Switch1# set protocols mlag domain 1
Step6Â Â Â Â Â Â Specify Switch1 as Node 0 of MLAG domain 1.
admin@Switch1# set protocols mlag domain 1 node 0
Step7        Configure link ID on the MLAG member port.
admin@Switch1# set protocols mlag domain 1 interface ae1 link 1
NOTE: The paired MLAG member ports must be bound to the same MLAG link ID.
Step8Â Â Â Â Â Â Configure the peer IP address and the peer-link for the MLAG peer.
admin@Switch1# set protocols mlag domain 1 peer-ip 192.168.45.1 peer-link ae3
Step9Â Â Â Â Â Â Â Â Configure MLAG peer VLAN.
admin@Switch1# set protocols mlag domain 1 peer-ip 192.168.45.1 peer-vlan 4088
Step10Â Â Â Â Enable Active-Active-VRRP function.
 admin@Switch1# set protocols vrrp interface 20 vrid 20 ip 11.251.201.3  admin@Switch1# set protocols vrrp interface 20 vrid 20 load-balance disable false
Step11Â Â Â Â Â Commit the configuration.
 admin@Switch1# commit
Switch2
Step1Â Â Â Â Â Â Â Â Configure the aggregation interface with LACP mode.
admin@Switch2# set interface aggregate-ethernet ae1 aggregated-ether-options lacp enable true
Step2Â Â Â Â Â Â Â Â Configure the VLANs.
admin@Switch2# set vlans vlan-id 10-19 admin@Switch2# set vlans vlan-id 20 l3-interface 20 admin@Switch2# set vlans vlan-id 4088 l3-interface 4088 admin@Switch2# set interface aggregate-ethernet ae1 family ethernet-switching native-vlan-id 10 admin@Switch2# set interface aggregate-ethernet ae1 family ethernet-switching port-mode trunk admin@Switch2# set interface aggregate-ethernet ae1 family ethernet-switching vlan members 10-19 admin@Switch2# set interface aggregate-ethernet ae1 family ethernet-switching vlan members 20 admin@Switch2# set interface aggregate-ethernet ae3 family ethernet-switching native-vlan-id 4088 admin@Switch2# set interface aggregate-ethernet ae3 family ethernet-switching port-mode trunk admin@Switch2# set interface aggregate-ethernet ae3 family ethernet-switching vlan members 10-19 admin@Switch2# set interface aggregate-ethernet ae3 family ethernet-switching vlan members 20
Step3Â Â Â Â Â Â Â Â Configure the L3 interface IP address.
admin@Switch2# set l3-interface vlan-interface 4088 address 192.168.45.2 prefix-length 24 admin@Switch2# set l3-interface vlan-interface 20 address 11.251.201.1 prefix-length 24
Step4Â Â Â Â Â Â Â Â Add interfaces to the LAG port.
admin@Switch2# set interface gigabit-ethernet te-1/1/2 ether-options 802.3ad ae3 admin@Switch2# set interface gigabit-ethernet te-1/1/3 ether-options 802.3ad ae3 admin@Switch2# set interface gigabit-ethernet te-1/1/4 ether-options 802.3ad ae1 admin@Switch2# set interface gigabit-ethernet te-1/1/6 ether-options 802.3ad ae1
Step5Â Â Â Â Â Â Â Â Configure MLAG domain ID.
admin@Switch2# set protocols mlag domain 1
Step6Â Â Â Â Â Â Specify Switch2 as Node 1 of MLAG domain 1.
admin@Switch2# set protocols mlag domain 1 node 1
Step7        Configure link ID on the MLAG member port.
admin@Switch2# set protocols mlag domain 1 interface ae1 link 1
NOTE: The paired MLAG member ports must be bound to the same MLAG link ID.
Step8Â Â Â Â Â Â Configure the peer IP address and the peer-link for the MLAG peer.
admin@Switch2# set protocols mlag domain 1 peer-ip 192.168.45.2 peer-link ae3
Step9Â Â Â Â Â Â Â Â Configure MLAG peer VLAN.
admin@Switch2# set protocols mlag domain 1 peer-ip 192.168.45.2 peer-vlan 4088
Step10Â Â Â Â Enable Active-Active-VRRP function.
 admin@Switch2# set protocols vrrp interface 20 vrid 20 ip 11.251.201.3  admin@Switch2# set protocols vrrp interface 20 vrid 20 load-balance disable false
Step11Â Â Â Â Â Commit the configuration.
 admin@Switch2# commit
Switch3
Step1Â Â Â Â Â Â Â Â Configure the aggregation interfaces with LACP mode.
admin@Switch3# set interface aggregate-ethernet ae1 aggregated-ether-options lacp enable true admin@Switch3# set interface aggregate-ethernet ae6 aggregated-ether-options lacp enable true
Step2Â Â Â Â Â Â Â Â Configure the VLANs.
admin@Switch3# set vlans vlan-id 10-20 admin@Switch3# set vlans vlan-id 4088 l3-interface 4088 admin@Switch3# set interface aggregate-ethernet ae1 family ethernet-switching native-vlan-id 10 admin@Switch3# set interface aggregate-ethernet ae1 family ethernet-switching port-mode trunk admin@Switch3# set interface aggregate-ethernet ae1 family ethernet-switching vlan members 10-20 admin@Switch3# set interface aggregate-ethernet ae4 family ethernet-switching native-vlan-id 4088 admin@Switch3# set interface aggregate-ethernet ae4 family ethernet-switching port-mode trunk admin@Switch3# set interface aggregate-ethernet ae4 family ethernet-switching vlan members 10-20 admin@Switch3# set interface aggregate-ethernet ae6 family ethernet-switching native-vlan-id 10 admin@Switch3# set interface aggregate-ethernet ae6 family ethernet-switching port-mode trunk admin@Switch3# set interface aggregate-ethernet ae6 family ethernet-switching vlan members 10-20
Step3Â Â Â Â Â Â Â Â Configure the L3 interface IP address.
admin@Switch3# set l3-interface vlan-interface 4088 address 192.168.46.2 prefix-length 24
Step4Â Â Â Â Â Â Â Â Configure MLAG domain ID.
admin@Switch3# set protocols mlag domain 2
Step5Â Â Â Â Â Â Â Â Specify Switch3 as Node 0 of MLAG domain 2.
admin@Switch3# set protocols mlag domain 2 node 0
Step6        Configure link ID on the MLAG member port.
admin@Switch3# set protocols mlag domain 2 interface ae1 link 2
NOTE: The paired MLAG member ports must be bound to the same MLAG link ID.
Step7Â Â Â Â Â Â Â Â Add member interfaces to the LAG ports.
 admin@Switch3# set interface gigabit-ethernet te-1/1/2 ether-options 802.3ad ae4  admin@Switch3# set interface gigabit-ethernet te-1/1/6 ether-options 802.3ad ae4  admin@Switch3# set interface gigabit-ethernet te-1/1/1 ether-options 802.3ad ae1  admin@Switch3# set interface gigabit-ethernet te-1/1/3 ether-options 802.3ad ae1 admin@Switch3# set interface gigabit-ethernet te-1/1/5 ether-options 802.3ad ae6
Step8Â Â Â Â Â Â Â Â Configure the peer IP address and the peer-link for the MLAG peer.
admin@Switch3# set protocols mlag domain 2 peer-ip 192.168.46.1 peer-link ae4
Step9Â Â Â Â Â Â Â Â Configure MLAG peer VLAN.
admin@Switch3# set protocols mlag domain 2 peer-ip 192.168.46.1 peer-vlan 4088
Step10Â Â Â Commit the configuration.
admin@Switch3# commit
Switch4
Step1Â Â Â Â Â Â Â Â Configure the aggregation interfaces with LACP mode.
admin@Switch4# set interface aggregate-ethernet ae1 aggregated-ether-options lacp enable true admin@Switch4# set interface aggregate-ethernet ae6 aggregated-ether-options lacp enable true
Step2Â Â Â Â Â Â Â Â Configure the VLANs.
admin@Switch4# set vlans vlan-id 10-20 admin@Switch4# set vlans vlan-id 4088 l3-interface 4088 admin@Switch4# set interface aggregate-ethernet ae1 family ethernet-switching native-vlan-id 10 admin@Switch4# set interface aggregate-ethernet ae1 family ethernet-switching port-mode trunk admin@Switch4# set interface aggregate-ethernet ae1 family ethernet-switching vlan members 10-20 admin@Switch4# set interface aggregate-ethernet ae4 family ethernet-switching native-vlan-id 4088 admin@Switch4# set interface aggregate-ethernet ae4 family ethernet-switching port-mode trunk admin@Switch4# set interface aggregate-ethernet ae4 family ethernet-switching vlan members 10-20 admin@Switch4# set interface aggregate-ethernet ae6 family ethernet-switching native-vlan-id 10 admin@Switch4# set interface aggregate-ethernet ae6 family ethernet-switching port-mode trunk admin@Switch4# set interface aggregate-ethernet ae6 family ethernet-switching vlan members 10-20
Step3Â Â Â Â Â Â Â Â Configure the L3 interface IP address.
admin@Switch4# set l3-interface vlan-interface 4088 address 192.168.46.1 prefix-length 24
Step4Â Â Â Â Â Â Â Â Configure MLAG domain ID.
admin@Switch4# set protocols mlag domain 2
Step5Â Â Â Â Â Â Â Â Specify Switch4 as Node 1 of MLAG domain 2.
admin@Switch4# set protocols mlag domain 2 node 1
Step6    Configure link ID on the MLAG member port.
admin@Switch4# set protocols mlag domain 2 interface ae1 link 2
NOTE: The paired MLAG member ports must be bound to the same MLAG link ID.
Step7Â Â Â Â Â Â Â Â Add member interfaces to the LAG ports.
 admin@Switch4# set interface gigabit-ethernet te-1/1/2 ether-options 802.3ad ae4  admin@Switch4# set interface gigabit-ethernet te-1/1/6 ether-options 802.3ad ae4  admin@Switch4# set interface gigabit-ethernet te-1/1/1 ether-options 802.3ad ae1  admin@Switch4# set interface gigabit-ethernet te-1/1/3 ether-options 802.3ad ae1 admin@Switch4# set interface gigabit-ethernet te-1/1/5 ether-options 802.3ad ae6
Step8Â Â Â Â Â Â Configure the peer IP address and the peer-link for the MLAG peer.
admin@Switch4# set protocols mlag domain 2 peer-ip 192.168.46.2 peer-link ae4
Step9Â Â Â Â Â Configure MLAG peer VLAN.
admin@Switch4# set protocols mlag domain 2 peer-ip 192.168.46.2 peer-vlan 4088
Step10Â Â Â Â Â Commit the configuration.
admin@Switch4# commit
Switch5
Step1Â Â Â Â Â Â Â Â Enable the aggregation interface with LACP mode.
admin@Switch5# set interface aggregate-ethernet ae6 aggregated-ether-options lacp enable true
Step2Â Â Â Â Â Â Â Â Add the interfaces to the LAG ports.Â
admin@Switch5# set interface gigabit-ethernet ge-1/1/1 ether-options 802.3ad ae6 admin@Switch5# set interface gigabit-ethernet ge-1/1/2 ether-options 802.3ad ae6
Step3Â Â Â Â Â Â Â Â Configure the VLANs.
admin@Switch5# set vlans vlan-id 10-20 admin@Switch5# set interface aggregate-ethernet ae6 family ethernet-switching native-vlan-id 10 admin@Switch5# set interface aggregate-ethernet ae6 family ethernet-switching port-mode trunk admin@Switch5# set interface aggregate-ethernet ae6 family ethernet-switching vlan members 10-20
Verify the Configuration
- Â You can use the run show mlag domain command to display the global MLAG domain information.
admin@Switch1# run show mlag domain summary Domain ID: 1 Domain MAC: 48:6E:73:FF:00:01 Node ID: 0 ----------------------------------------------------------------------- Peer Link Peer IP Peer Vlan Neighbor Status Config Matched MAC Synced # of Links --------- --------------- --------- --------------- -------------- ---------- ---------- ae3 10.10.10.2 4088 ESTABLISHED Yes Yes 1
- Â You can use the run show mlag link command to display MLAG link information.
admin@Switch1# run show mlag link summary # of Links: 1 Link Local LAG Link Status Local Status Peer Status Config Matched Flood ---- --------- ----------- ------------ ----------- -------------- ----- 1 ae1 IDLE UP UNKNOWN No No
- Â You can use the run show mlag consistency-parameter command to display the result of MLAG configuration consistency check, including the global and per MLAG configuration.
admin@Switch1# run show mlag consistency-parameter link 1
Port Configurations:
-----------------------------------------------------------------
Property Local Value Peer Value Result
----------------------- --------------- --------------- ------
MTU 1514 1514 PASS
Mac Learning Yes Yes PASS
Lag Mode LACP LACP PASS
Native Vlan 1 1 PASS
Port Vlan Mode Trunk Trunk PASS
Spanning-Tree Configurations:
-----------------------------------------------------------------
Property Local Value Peer Value Result
----------------------- --------------- --------------- ------
Mode PASS
admin@Switch1# run show mlag consistency-parameter summary
Overall : PASS
--------------
Global : PASS
Link 1 : PASS
MLAG Configurations:
-----------------------------------------------------------------
Property Local Value Peer Value Result
----------------------- --------------- --------------- ------
Domain ID 1 1 PASS
Node ID 0 1 PASS
Peer VLAN 4088 4088 PASS
Link Count 1 1 PASS
Link IDs 2 2 PASS
Spanning-Tree Configurations:
-----------------------------------------------------------------
Property Local Value Peer Value Result
----------------------- --------------- --------------- ------
Enable No No PASS
DHCP Snooping Configurations:
-----------------------------------------------------------------
Property Local Value Peer Value Result
----------------------- --------------- --------------- ------
Enable No No PASS
IGMP Snooping Configurations:
-----------------------------------------------------------------
Property Local Value Peer Value Result
----------------------- --------------- --------------- ------
Enable No No PASS
- You can use run show vrrp command to view the configuration information of VRRP group. The result of show command on Switch1 is as follows.
admin@Switch1# run show vrrp Interface: 20 VRID: 20 Version: 2 Load-balance: enable State: Master Master IP: 11.251.201.1 Virtual MAC: 00:00:5e:00:01:01 Preempt: enable Adver Interval: 4 Priority: 100 Virtual IP: 11.251.201.3 Auth-type: none Auth-key:
Copyright © 2024 Pica8 Inc. All Rights Reserved.