Establishing a Dual-Device Backup Platform

This section describes how to establish a dual-device backup platform to back up user information between devices. This allows fast service switching if a network node or link fails, enhancing service reliability.

Prerequisites

Before binding an SSL policy to a TCP connection, configure an SSL policy and load a digital certificate.

Context

Dual-device backup provides a unified platform for backing up user information between devices in a VRRP group through a remote backup service (RBS) channel. This facilitates flexible control and management of user services and improves service continuity. Establishing a dual-device backup platform includes configuring basic Virtual Router Redundancy Protocol (VRRP) group functions, a remote backup service (RBS), and a remote backup profile (RBP).

Perform the following steps on both the master and backup devices:

Procedure

Configure basic VRRP group functions.
1. Run system-view
  The system view is displayed.
2. Run interface { interface-name | interface-type interface-number }
  The interface view is displayed.
3. Run vrrp vrid virtual-router-id virtual-ip virtual-address
  A VRRP group is created on the interface, and a virtual IP address is assigned to the VRRP group.
4. Run vrrp vrid virtual-router-id preempt-mode timer delay delay-time
  A preemption delay is set for devices in the VRRP group.
  
  In ARP dual-device hot backup scenarios, to ensure that the master device can completely back up ARP entries to the backup device, set a preemption delay greater than or equal to 600s for the devices in the VRRP group.
5. Run admin-vrrp vrid virtual-router-id [ ignore-if-down ]
  The VRRP group is configured as an mVRRP group.
6. Run vrrp vrid virtual-router-id priority priority-value
  A priority is configured for a device in the VRRP group.
7. Run commit
  The configuration is committed.
Configure an RBP.
1. Run system-view
  The system view is displayed.
2. Run remote-backup-profile profile-name
  An RBP is created, and the RBP view is displayed.
3. Run peer-backup hot
  A backup mode is configured for user information backup.
  
  The NetEngine 8000 F supports only dual-device hot backup for ARP services.
4. Run vrrp-id vrrpId interface interface-type interface-number [ odd-mac | even-mac ]
  The RBP is bound to a specified VRRP group.
  
  The vrid parameter specifies the ID of a VRRP group. The ID must be the same as the VRRP group's ID configured using the vrrp vrid virtual-router-id [ virtual-ipvirtual-address ] command in the interface view.
5. Run backup-id backup-id remote-backup-service service-name
  A backup ID is configured for the RBP, and the RBP is associated with a specified RBS.
  
  The backup-id parameter specifies a backup ID for an RBP. You can use a backup ID and an RBS to determine an RBP. The backup IDs configured for the same RBP must be the same on the master and backup devices and can no longer be configured for other RBPs.
6. Run commit
  The configuration is committed.
Configure an RBS.
1. Run system-view
  The system view is displayed.
2. Run remote-backup-service service-name
  An RBS is created, and the RBS view is displayed.
3. (Optional) Run bind ssl-policy ssl-policy-name
  An SSL policy is bound to a TCP connection.
  
  You are advised to bind an SSL policy to enhance RBS security. If no SSL policy is bound, data leakage and tampering may occur.
4. Run peer peer-ip-address source source-ip-address port port-id
  TCP connection parameters are set for the RBS.
  
  The source-ip-address and peer-ip-address parameters specify the IP addresses of the master and backup devices respectively. The IP addresses must have been configured on their own interfaces, sub-interfaces, or logical interfaces (such as loopback interfaces) and can ping each other.
  
  The port-id parameter specifies a TCP port number. The TCP port numbers configured on the master and backup devices must be the same.
5. Run batch-backup service-type { arp | all| bras | l2tp | multicast | igmp-snooping | dhcp-server | nd } now
  The device is enabled to immediately back up user services on the RBS.
  
  The multicast, l2tp, and bras parameters are supported only by the admin VS.
6. Run commit
  The configuration is committed.