VRRP Load Balancing Configuration(Juniper vMX)

1. VRRP Load Balancing Configuration 구성도

1) VRRP Load Balancing Configuration 구성도

 

2) 테스트 장비

• Emulator : EVE-NG
• OS : Juniper vMX 18.2R1.9

 

 

2. VRRP Load Balancing Configuration

1) VLAN Configuration

< R1 : VLAN 설정 >
set bridge-domains VLAN10 vlan-id 10
set bridge-domains VLAN20 vlan-id 20
set interfaces ge-0/0/1 unit 0 family bridge interface-mode trunk
set interfaces ge-0/0/1 unit 0 family bridge vlan-id-list 10
set interfaces ge-0/0/1 unit 0 family bridge vlan-id-list 20

< R2 : VLAN 설정 >
set bridge-domains VLAN10 vlan-id 10
set bridge-domains VLAN20 vlan-id 20
set interfaces ge-0/0/1 unit 0 family bridge interface-mode trunk
set interfaces ge-0/0/1 unit 0 family bridge vlan-id-list 10
set interfaces ge-0/0/1 unit 0 family bridge vlan-id-list 20

< R3 : VLAN 설정 >
set bridge-domains VLAN10 vlan-id 10
set bridge-domains VLAN20 vlan-id 20  
set interfaces ge-0/0/0 unit 0 family bridge interface-mode trunk
set interfaces ge-0/0/0 unit 0 family bridge vlan-id-list 10
set interfaces ge-0/0/0 unit 0 family bridge vlan-id-list 20
set interfaces ge-0/0/1 unit 0 family bridge interface-mode trunk
set interfaces ge-0/0/1 unit 0 family bridge vlan-id-list 10
set interfaces ge-0/0/1 unit 0 family bridge vlan-id-list 20
set interfaces ge-0/0/2 unit 0 family bridge interface-mode access
set interfaces ge-0/0/2 unit 0 family bridge vlan-id 10
set interfaces ge-0/0/3 unit 0 family bridge interface-mode access
set interfaces ge-0/0/3 unit 0 family bridge vlan-id 20

 

2) VRRP Load Balancing Configuration

< R1 : VRRP VR-ID 10 설정 >
set interfaces irb unit 10 family inet address 10.0.0.2/24 vrrp-group 10 virtual-address 10.0.0.1
set interfaces irb unit 10 family inet address 10.0.0.2/24 vrrp-group 10 priority 120
set interfaces irb unit 10 family inet address 10.0.0.2/24 vrrp-group 10 accept-data
set bridge-domains VLAN10 routing-interface irb.10

< R1 : VRRP VR-ID 20 설정 >
set interfaces irb unit 20 family inet address 20.0.0.2/24 vrrp-group 20 virtual-address 20.0.0.1
set interfaces irb unit 20 family inet address 20.0.0.2/24 vrrp-group 20 accept-data
set bridge-domains VLAN20 routing-interface irb.20

< R2 : VRRP VR-ID 10 설정 >
set interfaces irb unit 10 family inet address 10.0.0.3/24 vrrp-group 10 virtual-address 10.0.0.1
set interfaces irb unit 10 family inet address 10.0.0.3/24 vrrp-group 10 accept-data
set bridge-domains VLAN10 routing-interface irb.10

< R2 : VRRP VR-ID 20 설정 >
set interfaces irb unit 20 family inet address 20.0.0.3/24 vrrp-group 20 virtual-address 20.0.0.1
set interfaces irb unit 20 family inet address 20.0.0.3/24 vrrp-group 20 priority 120
set interfaces irb unit 20 family inet address 20.0.0.3/24 vrrp-group 20 accept-data
set bridge-domains VLAN20 routing-interface irb.20

• Juniper Default Priority : 100
• Juniper Default Preempt : Enable

 

3) VRRP State 확인

root@R1> show vrrp 
Interface     State       Group   VR state VR Mode   Timer    Type   Address
irb.10        up             10   master   Active      A  0.394 lcl    10.0.0.2       
                                                                vip    10.0.0.1       
irb.20        up             20   backup   Active      D  3.228 lcl    20.0.0.2       
                                                                vip    20.0.0.1       
                                                                mas    20.0.0.3

root@R2> show vrrp 
Interface     State       Group   VR state VR Mode   Timer    Type   Address
irb.10        up             10   backup   Active      D  3.336 lcl    10.0.0.3       
                                                                vip    10.0.0.1       
                                                                mas    10.0.0.2       
irb.20        up             20   master   Active      A  0.298 lcl    20.0.0.3       
                                                                vip    20.0.0.1

• 'show vrrp' 명령을 이용하여 VRRP State, V-IP, R-IP 등 간략한 정보 확인 가능

 

root@R1> show vrrp detail 
Physical interface: irb, Unit: 10, Address: 10.0.0.2/24
  Index: 328, SNMP ifIndex: 537, VRRP-Traps: disabled, VRRP-Version: 2
  Interface state: up, Group: 10, State: master, VRRP Mode: Active
  Priority: 120, Advertisement interval: 1, Authentication type: none
  Advertisement threshold: 3, Computed send rate: 0
  Preempt: yes, Accept-data mode: yes, VIP count: 1, VIP: 10.0.0.1           
  Advertisement Timer: 0.158s, Master router: 10.0.0.2
  Virtual router uptime: 03:54:17, Master router uptime: 03:53:33
  Virtual Mac: 00:00:5e:00:01:0a
  Preferred: yes 
  Tracking: disabled 

Physical interface: irb, Unit: 20, Address: 20.0.0.2/24
  Index: 320, SNMP ifIndex: 538, VRRP-Traps: disabled, VRRP-Version: 2
  Interface state: up, Group: 20, State: backup, VRRP Mode: Active
  Priority: 100, Advertisement interval: 1, Authentication type: none
  Advertisement threshold: 3, Computed send rate: 0
  Preempt: yes, Accept-data mode: yes, VIP count: 1, VIP: 20.0.0.1           
  Dead timer: 3.391s, Master priority: 120, Master router: 20.0.0.3 
  Virtual router uptime: 00:00:30
  Preferred: yes 
  Tracking: disabled

• 'show vrrp detail' 명령을 이용하여 Detail한 VRRP State 확인 가능

 

• 외부로 데이터를 전송할 때 PC1은 R1으로, PC2는 R2로 전송
• 외부→20.0.0.0/24로 전송할 때, Best-Path를 R1으로 계산하여 SW1 ge-0/0/1에서 ICMP Reply Capture 불가