23. VRRP-backup (both VLANs) VRRP-master (both VLANs) Q01737679 problem Packet fro PC1 to PC2 (dest MAC = VRRP MAC) Based on MLT distribution Packet could be sent to backup As 5x00 is not owner of the VRRP MAC Packet is switched to VRRP Master Packet should be routed to PC2 due to CR Q01737679 (5x00 hardware limitation) packet is dropped when coming from IST to SMLT (when SMLT is in state “SMLT”) Layer 2 Switch PC-2 PC-3 Layer 2 Switch PC-1
24. -master VRRP-master (both VLANs) Solution for Q01737679 Packet fro PC1 to PC2 (dest MAC = VRRP MAC) Based on MLT distribution Packet could be sent to backup 5x00 now owner of the VRRP MAC Packet is routed to PC2 VRRP-backup (both VLANs) Layer 2 Switch PC-2 PC-3 Layer 2 Switch PC-1
26. VRRP-backup-master VRRP-master VRRP hello VRRP hello not forwarded due to CR Q01990799 VRRP MAC aged – not re learned as no VRRP hellos arriving Packet fro PC1 to VRRP MAC flooded as no FDB entry exists !!! Flooding of all packets on L2 switch Layer 2 Switch PC-2 PC-3
27. VRRP-backup-master VRRP-master VRRP hello VRRP hello all 10 sec from backup master CR Q01990790 VRRP MAC learned all 10 sec Packet fro PC1 to VRRP MAC CR Q01990790 resolves the flooding issue Layer 2 Switch PC-2 PC-3
30. Packet to the Server PC sends Packet to default Gateway which is VRRP MAC address 00:00:5e:00:01.xx Packet is sent either the blue or the red path depending on the MLT distribution If blue path is used - Packet is routed by the D1 as it is VRRP master and the packet is destined to VRRP MAC address If red path is used - Packet is routed by the D2 as it is VRRP backup-master and the packet is destined to VRRP MAC address Packet is forwarded to destination PC-1 5x00 D2 . 5x00 D1 . Layer 2 Switch Layer 2 Switch 8300 8300 NetApp
31. Packet from the Server ( DAW behavior ) Server sends Packet to MAC address where it received the packet from not the default gateway VRRP address e.g. MAC address of D1 Packet is sent either the blue or the red path depending on the MLT distribution If blue path is used - Packet is routed by the D1 as the destination MAC is its own MAC If red path is used - Packet has D1 MAC therefore must be sent to D1 across IST Packet is switched not routed (VRRP cannot be used) Packet is forwarded to destination If red path is used - Packet cannot be forwarded to SMLT coming from the IST. Therefore packet is lost PC-1 5x00 D2 . 5x00 D1 . Layer 2 Switch Layer 2 Switch 8300 8300 NetApp
32. Packet from the Server re-transmission - 1 Server sends Packet to MAC address where it received the packet from not the default gateway VRRP address e.g. MAC address of D1 Packet is sent either the blue or the red path depending on the MLT distribution If red path is used - Packet has D1 MAC therefore must be sent to D1 across IST Packet is switched not routed (VRRP cannot be used) If red path is used - Packet cannot be forwarded to SMLT coming from the IST. Therefore packet is lost PC-1 5x00 D2 . 5x00 D1 . Layer 2 Switch Layer 2 Switch 8300 8300 NetApp
33. Packet from the Server re-transmission - 2 Server sends Packet to VRRP MAC address Packet is sent either the blue or the red path depending on the MLT distribution If red path is used - Packet has VRRP MAC therefore D2 will use the backup-master function to route the packet Packet is forwarded to destination PC-1 5x00 D2 . 5x00 D1 . Layer 2 Switch Layer 2 Switch 8300 8300 NetApp
34.
35.
36.
37.
38.
39.
40.
41.
Editor's Notes
Disable fastpath : With fastpath enabled, the filer will respond to the same MAC address and tries to send the packet back thru the same interface as it came in. This allows for loadbalancing on multiple trunk interfaces on the same subnet. Disabling this means that ONTAP has to look up its routing table to figure out where to stick the packet in and *might* introduce a delay. In other scenarios, if you have the filers connected to switches running HSRP, then it might conflict with the fastpath setting.