vpn frr

Function

Using the vpn frr command, you can enable VPN FRR.

Using the undo vpn frr command, you can disable VPN FRR.

By default, VPN FRR is disabled.

Format

vpn frr route-policy route-policy-name

undo vpn frr

Parameters

Parameter	Description	Value
route-policy route-policy-name	Specifies the name of the route-policy.	The name is a string of 1 to 40 case-sensitive characters, with spaces not supported. When double quotation marks are used around the string, spaces are allowed in the string.

Views

VPN instance view, VPN instance IPv4 address family view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

VPN FRR is applied on a VPN where a CE is dual-homed to two PEs. VPN FRR uses a secondary tunnel to back up the primary tunnel and detects the connectivity of the primary tunnel in combination with rapid detection technologies such as BFD. When a fault occurs on the primary tunnel, a PE configured with VPN FRR can switch VPN traffic to the secondary tunnel before the VPN routes are converged. This improves reliability of data forwarding on the public network.

VPN FRR has two modes: VPN static FRR and VPN auto FRR. The vpn frr command configures manual VPN FRR and the auto-frr command configures VPN Auto FRR.

Compared with VPN Auto FRR, manual VPN FRR specifies backup next hop more precisely. If manual VPN FRR and VPN Auto FRR are configured simultaneously, manual VPN FRR takes preference over VPN Auto FRR. If manual VPN FRR fails, VPN Auto FRR takes effect.

Prerequisites

Manual VPN FRR function takes effect after the backup next hop is manually specified. It is recommended that you run the route-policy command to specify the backup next hop for VPN routes before configuring Manual VPN FRR function.

Follow-up Procedure

After configuring Manual VPN FRR function, run the display ip routing-table vpn-instance vpn-instance-name ip-address verbose command to check whether the route has a secondary tunnel and a backup label.

Precautions

The undo vpn frr command cancels the VPN FRR function of only the specified VPN instance. In the system view, run the undo vpn frr all command to simultaneously cancel the VPN FRR function of IPv4 and IPv6 address families in all VPN instances.

Example

# Specify the IP address of the backup next hop in the route-policy named vpn_frr_rp, and enable VPN FRR in the VPN instance view.

<HUAWEI> system-view
[HUAWEI] route-policy vpn_frr_rp permit node 10
[HUAWEI-route-policy] apply backup-nexthop 10.2.2.9
[HUAWEI-route-policy] quit
[HUAWEI] ip vpn-instance vpn1
[HUAWEI-vpn-instance-vpn1] ipv4-family
[HUAWEI-vpn-instance-vpn1-af-ipv4] route-distinguisher 100:1
[HUAWEI-vpn-instance-vpn1-af-ipv4] vpn frr route-policy vpn_frr_rp
[HUAWEI-vpn-instance-vpn1-af-ipv4] quit