Showing posts with label FHRP. Show all posts
Showing posts with label FHRP. Show all posts

Monday, 27 February 2012

Gateway Load Balancing Protocol (GLBP)

GLBP is a Cisco proprietary protocol. This protocol selects a single Active Virtual Gateway (AVG). The job of the AVG is to assign virtual MAC addresses to each of the other GLBP routers and to assign each network host to one of the GLBP routers.

The following load balancing options are supported

None
Similar to HSRP


Weighted
This is the ability GLBP to place a weight on each device when calculating the amount of load sharing that will occur through MAC assignment. Each GLBP router in the group will advertise its weighting and assignment; the AVG will act based on that value.

There is no information that describes how this is achieved. 

See this for an example of how weights are assigned.

Host dependent
The MAC address of a host is used to determine which VF MAC address the host is directed towards. This ensures that a host will be guaranteed to use the same virtual MAC address as long as the number of VFs in the GLBP group is constant.
 
Round robin
With Round Robin each VF MAC address is used sequentially in ARP replies for the virtual IP address. Round Robin load balancing is suitable for any number of end hosts.


  • Group numbers are restricted to the range from 0 to 1023.
  • Uses mac address 0007.b400.0xxx. There seems to be no direct method of determining the mac address for each group. This must be a cisco proprietary equation?
  • Each virtual forwarder in a group can be assigned the next mac address in sequence. As a result you can only have 1024 groups & 4 macs per group = 4096 mac's. Hence the last three octets are reserved of the mac address.
  • The multicast address 224.0.0.102 is used to send hello messages
  • Send traffic on UDP/3222
  • Priority (not a metric so higher number wins)  is 0-255 with the default of value of 100.
  • Authentication: No, clear text, MD5

Virtual Router Redundancy Protocol (VRRP) Version 1, 2 & 3

Version 1 - Can't find any details. If you do, send me a link/comment


Version 2 - http://tools.ietf.org/html/rfc2338 (I call it v2a)
  • Virtual Router ID numbers are restricted to the range from 0 to 255.
  • Uses mac address 0000.5E00.01xx, where xx is the virtual router id in hexadecimal.
  • The multicast address 224.0.0.18 is used to send hello messages
  • Priority (not a metric so higher number wins)  is 0-255 with the default of value of 100.
  • Authentication: No, clear text, HMAC




Version 2 - http://tools.ietf.org/html/rfc3768 (I call it v2b)
  • All parameters are the same as V2a but authentication has been removed.
  • Authentication: No

Version 3 - http://tools.ietf.org/html/rfc5798
  • IPv4
    • Uses mac address 0000.5E00.01xx, where xx is the virtual router id in hexadecimal.
    • The multicast address 224.0.0.18 is used to send hello messages.

  • Adds support for IPv6
    • Uses mac address 0000.5E00.02xx, where xx is the virtual router id in hexadecimal.
    • The multicast address FF02::12 is used to send hello messages.
  • Group numbers are restricted to the range from 0 to 255
  • Priority (not a metric so higher number wins) is 0-255 with the default of value of 100.
  • Authentication: None

    Hot Standby Routing Protocol (HSRP) Version 1, 2 & IPv6

    HSRP is a Cisco Proprietary protocol and defaults to version 1.



    HSRP version 2 will not interoperate with HSRP version 1. An interface cannot operate both version 1 and version 2 because both versions are mutually exclusive. However, the different versions can be run on different physical interfaces of the same router. 

    When the HSRP version is changed (v1->v2 or v2->v1), each group will reinitialize because it now has a new virtual MAC address. You cannot change v2->v1 if you have configured groups above the group number range allowed for version 1 (0 to 255). 

    Set the version using standby version {1 | 2} at the interface level.

    Version 1
    • Group numbers are restricted to the range from 0 to 255.
    • Uses mac address 0000.0c07.acxx, where xx is the group number in hexadecimal.
    • Sends traffic on port UDP/1985
    • The multicast address 224.0.0.2 is used to send HSRP hello messages. This address can conflict with Cisco Group Management Protocol (CGMP) leave processing.
    • Priority (not a metric so highest number wins) is 0-255 with the default of value of 100

    Version 2
    • Expands the group number range from 0 to 4095.
    • Uses a new mac address range 0000.0C9F.Fxxx, where xx is the group number in hexadecimal.
    • Sends traffic on port UDP/2029
    • Uses the new IP multicast address 224.0.0.102 to send hello packets.
    • Uses a different packet format than version 1. The packet format uses a type-length-value (TLV) format. Version 2 packets received by an version 1 router will have the type field mapped to the version field by version 1 and subsequently ignored. 
    • Priority (not a metric so highest number wins) is 0-255 with the default of value of 100.
    • Allow MD5 Authentication

    HSRP IPv6 (with so many changes it should really be a new version!)
    • Uses HSRP v2 packets and this must be enabled before adding ipv6 specific parameters.
    • Uses same group range as HSRP v2
    • Uses a new mac address range 0005.73A0.0xxx where xx is the group number in hexadecimal. A direct result of this is: virtual IPv6 link-local address is, by default, derived from the HSRP virtual MAC address.
    • Uses same HSRP v2 UDP port
    • Uses the new IP multicast address FF02::66 to send hello packets.
    • Uses same HSRP v2 priority.


     In the case of an equal priority, the router with the highest IP address for the respective group is elected as active. Furthermore, if there are more than two routers in the group, the second highest IP address determines the standby router and the other router/routers are in the listen state. State of local router can be one of the following:
    • Active—Indicates the current Hot Standby router.
    • Standby—Indicates the router next in line to be the Hot Standby router.
    • Speak—Router is sending packets to claim the active or standby role.
    • Listen—Router is neither in the active nor standby state, but if no messages are received from the active or standby router, it will start to speak.
    • Learn—Router is neither in the active nor standby state, nor does it have enough information to attempt to claim the active or standby roles.
    • Init or Disabled—Router is not yet ready or able to participate in HSRP, possibly because the associated interface is not up. HSRP groups configured on other routers on the network that are learned via snooping are displayed as being in the Init state. Locally configured groups with an interface that is down or groups without a specified interface IP address appear in the Init state. For these cases, the Active addr and Standby addr fields will show "unknown." The state is listed as disabled in the fields when the standby ip command has not been specified.
    • HSRP IPv6