Hcie security Day10: six experiments to understand VRRP and reliability

 

 

 

Catalog

Reliability technology

MTBF

MTTR

VRRP

Vrrp Message structure

Vrrp working principle

vrrp working process

Vrrp Application mode

Primary backup

Load burden

Vrrp Insufficient

Weak state perception

The switching time between active and standby is slow

Experiment 1 ： To configure VRRP Example of active and standby backup

Requirements and topology

Operation steps

Validation and Analysis

Experiment two ： To configure VRRP Example of multi gateway load sharing

Requirements and topology

Operation steps

Validation and Analysis

Experiment three ： To configure VRRP And BFD Example of fast switching through linkage

Requirements and topology

Operation steps

Validation and Analysis

Experiment four ： To configure VRRP Example of monitoring uplink interface in linkage with interface status

Requirements and topology

Operation steps

Validation and Analysis

Experiment five ： To configure VRRP And BFD Example of linkage monitoring uplink

Requirements and topology

Operation steps

Validation and Analysis

Experiment six ： To configure VRRP An example of monitoring the uplink in conjunction with the route

Requirements and topology

Operation steps

Validation and Analysis

---

Reliability technology

In the real network , Network failure and service interruption caused by various non-technical factors cannot be avoided . therefore , Improve system fault tolerance 、 Improve fault recovery speed 、 Reduce the impact of failure on the business , It is an effective way to improve system reliability . Reliability is mainly through BFD Fault detection technology and VRRP Wait for the protection switching technology to realize .

Fault detection technology focuses on network fault detection and diagnosis , There are mainly BFD,BFD It is bidirectional forwarding detection ,Bidirectional Forwarding Detection, It's a universal 、 standardized 、 Media independent 、 Protocol independent fast fault detection mechanism , For rapid detection 、 Monitor the links in the network or IP The forwarding and connection status of the route .

Protection switching technology focuses on network fault recovery , Mainly through the hardware 、 link 、 Redundant backup of routing information and business information and fast switching in case of failure , So as to ensure the continuity of network business . In the router , Mainly interface backup 、GR、NSR、 Interface monitoring group and VRRP.

Reliability measurement is also called reliability measurement , There are mainly ：

MTBF

Mean time between failures MTBF:Mean Time Between Failures. It refers to the average time of trouble free operation of a system , Usually in hours .MTBF The bigger it is , Higher reliability .

MTTR

Mean time to repair MTTR:Mean Time to Repair. It refers to the time required for a system to recover from failure .

MTTR= Fault detection time + Hardware replacement time + System initialization time + Link recovery time + Route coverage time + Forwarding recovery time .MTTR The smaller it is , Higher reliability .

Improve MTBF Or lower MTTR Can improve the reliability of the network . We mainly consider reducing MTTR From the angle of .

Different network devices achieve reliability in different ways . The firewall mainly needs to master the dual computer hot standby Technology , This technology needs cooperation VRRP To achieve , So today we mainly focus on routers VRRP Function for an understanding .

---

VRRP

Virtual routing redundancy protocol virtual router redundancy protocol. Multiple routers are virtualized into a router system , The devices connected to this system are virtual ip As the default gateway , The router in the routing system can forward data at the same time for load sharing , Or just Part of the Forward data for backup , The equipment connected to the routing system is not sensitive to the state of the router in the system . That is, when the gateway equipment fails , There is no need to change the networking , The system elects a new gateway device to undertake the data traffic , Ensure the reliable communication of the network .

The backbone network needs to use vrrp Do you ？

Unwanted , Through routing protocols , Automatic routing .

Vrrp Protocol packets are used to transfer master The priority and status of the device are advertised to all backup equipment .

Vrrp Protocol message multicast sending , The destination address is 224.0.0.18.ttl=255, The agreement number is 112.

Vrrpv2 Only applicable to ipv4 The Internet ,vrrpv3 Apply to ipv4 and ipv6 The Internet .

Vrrp Message structure

With vrrpv2 For example .

Version：2

Type：1, Express advertisement

Vrid： Virtual router id , from 1 To 255

Priority： exactly 100, The bigger the better ,0 Means stop participating in the backup group , Give up on your own initiative master status , Don't wait until the timer times out ,255 Reserved for ip Address owner

Count ip addrs： Virtual in backup group ipv4 Number of addresses

Auth type：0 Not certified ,1 Plaintext Authentication ,2md5 authentication

Adver int： Notification message sending interval , Default 1s

Checksum：16 Bit checksums , testing vrrp Message integrity

Ipaddr1： first vrrp Virtual in backup group ipv4 Address

Ipaddrn： The first n individual vrrp Virtual in backup group ipv4 Address

Auth data： Plaintext authentication and md5 Authentication uses

vrrp Authentication does not improve security , Just for compatibility with earlier versions ,vrrpv3 Just cancel this field , in addition vrrpv3 It also has the advantage of raising the announcement interval to the order of centisecond .

Vrrp The specific certification principle is ： The equipment receiving the notification message matches the authentication mode and authentication word in the message with the authentication mode and authentication word configured at the local end , Judge whether the received notification message is legal .

Vrrp working principle

State machine

Master_Down_Interval=(3* Advertisement_Interval) + Skew_time. among ,Skew_Time=(256–Priority)/256

vrrp working process

1. vrrp The devices in the backup group are selected according to the priority master,master Send free arp, Announce the virtual of the virtual gateway mac To the next equipment , Guide the uplink message to forward from itself .
2. master Periodic multicast vrrp notice , Maintain its master status
3. master Something goes wrong , The priority of sending is 0 Of vrrp notice ,backup Re elect a new one after receiving it master
4. new master Will also send free arp, Announce the virtual of the virtual gateway mac（ This mac It's based on reality mac The mapping of ） To the next equipment , Guide the uplink message to forward from itself .
5. primary master recovery , If virtual ip The owner , Direct transmission vrrp The priority of the announcement itself is 255, And switch to master, If not virtual ip The owner , Cut first backup, Recovery priority .
6. If preemption mode is configured , And its priority is higher than that in the received notification message , Just grab , Otherwise, do not seize .

There are two cases of dual master

1、 Link conditions cause backup Not received before the timer timed out master notice , Lead to backup Cut off the main body , In this case backup received master Disappear after the announcement .

2、 The same priority leads to backup Simultaneously cut the main , This situation compares interfaces ip Disappear after size , The big ones become master. 

For the first case , It's caused vrrp Frequent switching of backup group members , The solution is to configure the preemption delay , Reduce backup Sensitivity .

Vrrp Application mode

Primary backup

Configure a set of vrrp Backup group .

Load burden

vrrp Multiple devices are added at the same time vrrp Backup group , And assume different roles in each backup group , Each backup group contains a master Equipment and a number of backup equipment . Virtual per backup group ip Address different , Make the default gateway of some devices respectively , So as to relieve the pressure that only one router bears the only default gateway at the same time under the condition of active and standby backup .

Vrrp Insufficient

Weak state perception

Vrrp Backup group detection master The downlink interface of the device sends a notification message to judge master Working state of , Therefore, it can only sense the state changes of the network where its downlink interface is located to complete the master-slave switch , Unable to sense the status of the uplink interface or non direct link , Potential traffic disruption .

Solution

Solve the problem of uplink interface state perception through linkage interface state monitoring .

Through linkage BFD/NAQ/ Route monitoring solves the problem of state awareness of indirect links .

The switching time between active and standby is slow

If master The device does not give up on its own initiative master status , For example, there is a fault （ This is also the case with most existing networks ）,backup At least one timer timeout is required to complete the upgrade , Even add a delay time , in the meantime , The upstream traffic is still failing master forward , Cause packet loss .

Solution

linkage bfd Fast switching . stay vrrp Of master and backup Deployment between bfd conversation , Fast detection vrrp Connectivity status between backup groups , And timely notify in case of failure vrrp The backup group is switched between active and standby , Reduce response time to milliseconds , Reduce traffic loss .

Experiment 1 ： To configure VRRP Example of active and standby backup

Requirements and topology

Client adopt Switch Both belong to Router1 and Router2. Users want to achieve ：

Under normal circumstances , The main engine uses Router1 Access for default gateway Internet, When Router1 When it breaks down ,Router2 Take over continues to work as a gateway , Realize redundant backup of gateway .

Router1 After the fault is recovered , Can become a gateway again .

Operation steps

Configure interface ip

To configure ospf route

R1 ospf 1 router-id 1.1.1.1  area 0.0.0.0   network 10.1.1.1 0.0.0.0   network 13.1.1.1 0.0.0.0 R2 ospf 1 router-id 2.2.2.2  area 0.0.0.0   network 10.1.1.1 0.0.0.0   network 23.1.1.2 0.0.0.0 R3 ospf 1 router-id 3.3.3.3  area 0.0.0.0   network 192.168.1.254 0.0.0.0   network 13.1.1.3 0.0.0.0 network 23.1.1.3 0.0.0.0 R4 ip route-static 0.0.0.0 0.0.0.0 192.168.1.254

To configure vrrp Backup group ( Preemption is on by default ,R1vrrp The interface address becomes master)

R1 interface GigabitEthernet0/0/0  vrrp vrid 1 virtual-ip 10.1.1.111 vrrp vrid 1 preempt-mode timer delay 20 R2 interface GigabitEthernet0/0/0  vrrp vrid 1 virtual-ip 10.1.1.111

Validation and Analysis

Check vrrp state

dis vrrp   GigabitEthernet0/0/0 | Virtual Router 1     State : Backup     Virtual IP : 10.1.1.111     Master IP : 0.0.0.0     PriorityRun : 100     PriorityConfig : 100     MasterPriority : 0     Preempt : YES   Delay Time : 0 s     TimerRun : 1 s     TimerConfig : 1 s     Auth type : NONE     Virtual MAC : 0000-5e00-0101     Check TTL : YES     Config type : normal-vrrp     Backup-forward : disabled     Create time : 2022-02-12 18:45:20 UTC-08:00     Last change time : 2022-02-12 19:04:14 UTC-08:00

Catch one vrrp Look at the contents of the package

 

 

Use client Long ping R4,shutdownR1 Of vrrp Interface , Guide the active / standby switchover , see ping Whether to interrupt .

 

Why is the interruption so long ？ Packet capture analysis is R2 cut master After that, I didn't send it for free ARP

One is free ARP Long like this . The source address is virtual ip, Source mac Is a virtual ip Of mac, Purpose mac It's all. f.

 

Experiment two ： To configure VRRP Example of multi gateway load sharing

Requirements and topology

Client1 and client2 adopt Switch Both belong to Router1 and Router2. Users want client1 With Router1 Access for default gateway Internet,Router2 As a backup gateway ;client2 With Router2 Access for default gateway Internet,Router1 As a backup gateway , To achieve load balancing of traffic .

 

Operation steps

Configure interface ip

To configure ospf route

R1 ospf 1 router-id 1.1.1.1  area 0.0.0.0   network 10.1.1.1 0.0.0.0   network 13.1.1.1 0.0.0.0 R2 ospf 1 router-id 2.2.2.2  area 0.0.0.0   network 10.1.1.1 0.0.0.0   network 23.1.1.2 0.0.0.0 R3 ospf 1 router-id 3.3.3.3  area 0.0.0.0   network 192.168.1.254 0.0.0.0   network 13.1.1.3 0.0.0.0 network 23.1.1.3 0.0.0.0 R4 ip route-static 0.0.0.0 0.0.0.0 192.168.1.254

To configure vrrp Backup group ( Preemption is on by default ,R1vrrp The interface address becomes master)

R1 interface GigabitEthernet0/0/0  vrrp vrid 1 virtual-ip 10.1.1.111  vrrp vrid 1 priority 120  vrrp vrid 2 virtual-ip 10.1.1.112 vrrp vrid 1 preempt-mode timer delay 20 R2 interface GigabitEthernet0/0/0  vrrp vrid 1 virtual-ip 10.1.1.111  vrrp vrid 2 virtual-ip 10.1.1.112 vrrp vrid 2 preempt-mode timer delay 20  vrrp vrid 2 priority 120

Validation and Analysis

Check r1 Of vrrp state

<r1>dis vrrp brief Total:2     Master:1     Backup:1     Non-active:0      VRID  State        Interface                Type     Virtual IP     --------------------------------------------------------------- 1     Master       GE0/0/0                  Normal   10.1.1.111     2     Backup       GE0/0/0                  Normal   10.1.1.112

Check r2 Of vrrp state

[r2]dis vrrp bri Total:2     Master:1     Backup:1     Non-active:0      VRID  State        Interface                Type     Virtual IP     --------------------------------------------------------------- 1     Backup       GE0/0/0                  Normal   10.1.1.111     2     Master       GE0/0/0                  Normal   10.1.1.112

Experiment three ： To configure VRRP And BFD Example of fast switching through linkage

Requirements and topology

The host in the LAN passes through Switch Dual ownership to deployment VRRP Backup group RouterA and RouterB, among RouterA by Master. Users want to be RouterA or RouterA To Switch When the inter link fails , The switching time between the active and standby gateways is less than 1 second , To reduce the impact of failure on business transmission .

 

Operation steps

Configure interface ip

To configure ospf route

R1 ospf 1 router-id 1.1.1.1  area 0.0.0.0   network 10.1.1.1 0.0.0.0   network 13.1.1.1 0.0.0.0 R2 ospf 1 router-id 2.2.2.2  area 0.0.0.0   network 10.1.1.1 0.0.0.0   network 23.1.1.2 0.0.0.0 R3 ospf 1 router-id 3.3.3.3  area 0.0.0.0   network 192.168.1.254 0.0.0.0   network 13.1.1.3 0.0.0.0 network 23.1.1.3 0.0.0.0 R4 ip route-static 0.0.0.0 0.0.0.0 192.168.1.254

To configure vrrp Backup group

R1 interface GigabitEthernet0/0/0  vrrp vrid 1 virtual-ip 10.1.1.3  vrrp vrid 1 priority 120  vrrp vrid 1 preempt-mode timer delay 20 R2 interface GigabitEthernet0/0/0  vrrp vrid 1 virtual-ip 10.1.1.3 // Be careful ： Don't give backup Configure preemption delay ！

To configure BFD

//R1 Bfd// Global on bfd function bfd 1 bind peer-ip 10.1.1.2 interface GigabitEthernet0/0/0 source-ip 10.1.1.1// there 1 It's just a local logo ,bfd session With local Value is subject to discriminator local 1 discriminator remote 2  min-tx-interval 50  min-rx-interval 50  commit// Pay attention to submit //R2 bfd bfd 1 bind peer-ip 10.1.1.1 interface GigabitEthernet0/0/0 source-ip 10.1.1.2 discriminator local 2 discriminator remote 1  min-tx-interval 50  min-rx-interval 50  commit

Check bfd Conversation situation ,up Indicates that the configuration is correct

[r2]dis bfd session all Local Remote     PeerIpAddr      State     Type        InterfaceName            2     1          10.1.1.1        Up        S_IP_IF   GigabitEthernet0/0/0

to R2（backup） Of vrrp binding bfd

interface GigabitEthernet0/0/0 vrrp vrid 1 track bfd-session 2 increased 40// Notice the 2 Namely bfd session in local id, With the opposite remote id Corresponding

Validation and Analysis

Under normal circumstances ,r1 As the default gateway ,r1 After the downlink interface of fails ,r2 Of bfd Quickly detect , guide r2 Of vrrp Priority increases 40, To be able to seize master Value , Then quickly from backup Cut to master.

<r2>dis vrrp   GigabitEthernet0/0/0 | Virtual Router 1     State : Master     Virtual IP : 10.1.1.3     Master IP : 10.1.1.2     PriorityRun : 140     PriorityConfig : 100     MasterPriority : 140     Preempt : YES   Delay Time : 20 s     TimerRun : 1 s     TimerConfig : 1 s     Auth type : NONE     Virtual MAC : 0000-5e00-0101     Check TTL : YES     Config type : normal-vrrp     Backup-forward : disabled     Track BFD : 2  Priority increased : 40     BFD-session state : DOWN     Create time : 2022-02-12 19:30:29 UTC-08:00     Last change time : 2022-02-12 21:54:45 UTC-08:00

and r1 At this time, due to the interface shutdown,vrrp The state machine is init The state of .

If r1 Interface recovery , Due to the configured delay 20s, therefore 20s Only after backup Convert to master.R2 received r1 And then switch the priority back to the original value , Become backup.

Experiment four ： To configure VRRP Example of monitoring uplink interface in linkage with interface status

Requirements and topology

The LAN host passes Switch Dual ownership to deployment VRRP Backup group RouterA and RouterB, among RouterA by Master. Users want to be RouterA Uplink interface GE1/0/0 state Down when ,VRRP The backup group can timely perceive and switch between active and standby , from RouterB Take over as a gateway to continue to undertake business forwarding , To reduce the interface state Down Impact on business transmission .

Operation steps

Configure interface ip

To configure ospf route

R1 ospf 1 router-id 1.1.1.1  area 0.0.0.0   network 10.1.1.1 0.0.0.0   network 13.1.1.1 0.0.0.0 R2 ospf 1 router-id 2.2.2.2  area 0.0.0.0   network 10.1.1.1 0.0.0.0   network 23.1.1.2 0.0.0.0 R3 ospf 1 router-id 3.3.3.3  area 0.0.0.0   network 192.168.1.254 0.0.0.0   network 13.1.1.3 0.0.0.0 network 23.1.1.3 0.0.0.0 R4 ip route-static 0.0.0.0 0.0.0.0 192.168.1.254

To configure vrrp Backup group

R1 interface GigabitEthernet0/0/0  vrrp vrid 1 virtual-ip 10.1.1.3  vrrp vrid 1 priority 120  vrrp vrid 1 preempt-mode timer delay 20 R2 interface GigabitEthernet0/0/0  vrrp vrid 1 virtual-ip 10.1.1.3 // Be careful ： Don't give backup Configure preemption delay ！

to R1（master） To configure vrrp Linkage with interface status

When monitoring the interface status down when , Priority reduction 40

interface GigabitEthernet0/0/0 vrrp vrid 1 track interface gigabitethernet 0/0/1 reduced 40

Validation and Analysis

Shutdown R1 Uplink interface , Observe R1vrrp State transition .

dis vrrp   GigabitEthernet0/0/0 | Virtual Router 1     State : Master     Virtual IP : 10.1.1.3     Master IP : 10.1.1.1     PriorityRun : 120     PriorityConfig : 120     MasterPriority : 120     Preempt : YES   Delay Time : 20 s     TimerRun : 1 s     TimerConfig : 1 s     Auth type : NONE     Virtual MAC : 0000-5e00-0101     Check TTL : YES     Config type : normal-vrrp     Backup-forward : disabled     Track IF : GigabitEthernet0/0/1   Priority reduced : 40     IF state : UP     Create time : 2022-02-12 19:30:36 UTC-08:00     Last change time : 2022-02-12 22:08:21 UTC-08:00

Switching is still very fast .

Experiment five ： To configure VRRP And BFD Example of linkage monitoring uplink

Requirements and topology

The host in the LAN passes through Switch Dual ownership to deployment VRRP Backup group RouterA and RouterB, among RouterA by Master. Under normal circumstances ,RouterA Undertake gateway work , User side traffic is controlled by Switch → RouterA → RouterC → RouterE Forward . Users want to be RouterC To RouterE In case of link failure between ,VRRP The backup group can be in 1 Sense the fault within seconds , And quickly switch between active and standby , Enable RouterB Undertake business forwarding , To reduce the impact of link failure on service forwarding .

Operation steps

Configure interface ip

To configure ospf route

R1 ospf 1 router-id 1.1.1.1  area 0.0.0.0   network 10.1.1.1 0.0.0.0   network 13.1.1.1 0.0.0.0 R2 ospf 1 router-id 2.2.2.2  area 0.0.0.0   network 10.1.1.1 0.0.0.0   network 24.1.1.2 0.0.0.0 R3 ospf 1 router-id 3.3.3.3  area 0.0.0.0   network 13.1.1.3 0.0.0.0 network 35.1.1.3 0.0.0.0 R4 ospf 1 router-id 4.4.4.4  area 0.0.0.0   network 24.1.1.4 0.0.0.0 network 45.1.1.4 0.0.0.0 R5 ospf 1 router-id 5.5.5.5  area 0.0.0.0   network 35.1.1.5 0.0.0.0 network 45.1.1.5 0.0.0.0 network 5.5.5.5 0.0.0.0

To configure vrrp Backup group

R1 interface GigabitEthernet0/0/0  vrrp vrid 1 virtual-ip 10.1.1.3  vrrp vrid 1 priority 120  vrrp vrid 1 preempt-mode timer delay 20 R2 interface GigabitEthernet0/0/0  vrrp vrid 1 virtual-ip 10.1.1.3 // Be careful ： Don't give backup Configure preemption delay ！

To configure BFD

//R1 Bfd// Global on bfd function bfd 1to5 bind peer-ip 35.1.1.5 interface GigabitEthernet0/0/1 discriminator local 3 discriminator remote 4  min-tx-interval 50  min-rx-interval 50  commit// Pay attention to submit //R5 bfd bfd 5to1 bind peer-ip 13.1.1.1 interface GigabitEthernet0/0/0 discriminator local 4 discriminator remote 3  min-tx-interval 50  min-rx-interval 50  commit

Check bfd Conversation situation ,up Indicates that the configuration is correct

[r1]dis bfd session all Local Remote     PeerIpAddr      State     Type        InterfaceName            3     4          35.1.1.5        Up        S_IP_IF   GigabitEthernet0/0/1

to R1（master） Of vrrp binding bfd

interface GigabitEthernet0/0/0 vrrp vrid 1 track bfd-session 3 re 50

Validation and Analysis

[r1]dis vrrp   GigabitEthernet0/0/0 | Virtual Router 1     State : Backup     Virtual IP : 10.1.1.3     Master IP : 10.1.1.2     PriorityRun : 70     PriorityConfig : 120     MasterPriority : 100     Preempt : YES   Delay Time : 20 s     TimerRun : 1 s     TimerConfig : 1 s     Auth type : NONE     Virtual MAC : 0000-5e00-0101     Check TTL : YES     Config type : normal-vrrp     Backup-forward : disabled     Track IF : GigabitEthernet0/0/1   Priority reduced : 40     IF state : UP     Track BFD : 3  Priority reduced : 50     BFD-session state : DOWN     Create time : 2022-02-12 19:30:36 UTC-08:00     Last change time : 2022-02-12 22:29:49 UTC-08:00

Experiment six ： To configure VRRP An example of monitoring the uplink in conjunction with the route

Requirements and topology

The host in the LAN passes through Switch Dual ownership to deployment VRRP Backup group RouterA and RouterB, among RouterA by Master. Under normal circumstances ,RouterA Undertake gateway work , User side traffic is controlled by Switch → RouterA → RouterC → RouterE Forward . Users want to be RouterC To RouterE When the route between is revoked or the status becomes inactive ,VRRP The backup group can sense and switch between active and standby . Enable RouterB Undertake business forwarding , To reduce the impact of link failure on service forwarding .

 

Operation steps

Configure interface ip

To configure ospf route

R1 ospf 1 router-id 1.1.1.1  area 0.0.0.0   network 10.1.1.1 0.0.0.0   network 13.1.1.1 0.0.0.0 R2 ospf 1 router-id 2.2.2.2  area 0.0.0.0   network 10.1.1.1 0.0.0.0   network 24.1.1.2 0.0.0.0 R3 ospf 1 router-id 3.3.3.3  area 0.0.0.0   network 13.1.1.3 0.0.0.0 network 35.1.1.3 0.0.0.0 R4 ospf 1 router-id 4.4.4.4  area 0.0.0.0   network 24.1.1.4 0.0.0.0 network 45.1.1.4 0.0.0.0 R5 ospf 1 router-id 5.5.5.5  area 0.0.0.0   network 35.1.1.5 0.0.0.0 network 45.1.1.5 0.0.0.0 network 5.5.5.5 0.0.0.0

To configure vrrp Backup group

R1 interface GigabitEthernet0/0/0  vrrp vrid 1 virtual-ip 10.1.1.3  vrrp vrid 1 priority 120  vrrp vrid 1 preempt-mode timer delay 20 R2 interface GigabitEthernet0/0/0  vrrp vrid 1 virtual-ip 10.1.1.3 // Be careful ： Don't give backup Configure preemption delay ！

to R1 To configure vrrp Linkage function with routing , When the linked route is revoked , Priority reduction 50

interface GigabitEthernet0/0/0 vrrp vrid 1 track ip route 35.1.1.0 24 re 50

Validation and Analysis

[r1-GigabitEthernet0/0/0]dis vrrp   GigabitEthernet0/0/0 | Virtual Router 1     State : Master     Virtual IP : 10.1.1.3     Master IP : 10.1.1.1     PriorityRun : 120     PriorityConfig : 120     MasterPriority : 120     Preempt : YES   Delay Time : 20 s     TimerRun : 1 s     TimerConfig : 1 s     Auth type : NONE     Virtual MAC : 0000-5e00-0101     Check TTL : YES     Config type : normal-vrrp     Backup-forward : disabled     Track IF : GigabitEthernet0/0/1   Priority reduced : 40     IF state : UP     Track IP route : 35.1.1.0/24  Priority reduced : 50     IP route state : Reachable     Create time : 2022-02-12 19:30:36 UTC-08:00 Last change time : 2022-02-12 22:49:04 UTC-08:00 dis ip rou | include 35.1.1.0 Route Flags: R - relay, D - download to fib Routing Tables: Public          Destinations : 15       Routes : 15       Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface 35.1.1.0/24  OSPF    10   2           D   13.1.1.3        GigabitEthernet0/0/1

Shutdown r5 Of g0/0/0 After the interface , Release lsu Undo routing .

 

[r1]dis ip rou | include 35.1.1.0 Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------ Routing Tables: Public          Destinations : 13       Routes : 13       Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface [r1]dis vrrp   GigabitEthernet0/0/0 | Virtual Router 1     State : Backup     Virtual IP : 10.1.1.3     Master IP : 10.1.1.2     PriorityRun : 70     PriorityConfig : 120     MasterPriority : 100     Preempt : YES   Delay Time : 20 s     TimerRun : 1 s     TimerConfig : 1 s     Auth type : NONE     Virtual MAC : 0000-5e00-0101     Check TTL : YES     Config type : normal-vrrp     Backup-forward : disabled     Track IF : GigabitEthernet0/0/1   Priority reduced : 40     IF state : UP     Track IP route : 35.1.1.0/24  Priority reduced : 50     IP route state : Unreachable     Create time : 2022-02-12 19:30:36 UTC-08:00     Last change time : 2022-02-12 22:51:09 UTC-08:00

So that's about vrrp Experiment and understanding .

The above experimental topology and complete configuration have been packaged , Pay attention to and reply to VRRP get .