Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add nanxiaoyao/network-huawei-skills --skill vrrpgit clone --depth 1 https://github.com/nanxiaoyao/network-huawei-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/nanxiaoyao/network-huawei-skills/vrrp)<a href="https://agentmods.dev/skills/nanxiaoyao/network-huawei-skills/vrrp"><img src="https://agentmods.dev/badge/skills/nanxiaoyao/network-huawei-skills/vrrp/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/nanxiaoyao/network-huawei-skills/vrrp"><img src="https://agentmods.dev/badge/skills/nanxiaoyao/network-huawei-skills/vrrp.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00133 | $0.03072 |
| Opus 5 | $0.00067 | $0.01536 |
| Sonnet 5 | $0.00027 | $0.00614 |
| Haiku 4.5 | $0.00013 | $0.00307 |
Grade A, and why
vrrp scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 284 lines — stays where its author put it; the contents beside it link to each section on GitHub.
华为交换机 VRRP 配置技能 (vrrp)
适用平台 S 系列 V200R011C10+ ｜ CE 系列 V200R022C00+ 文档来源 华为产品文档 dc_cfg_vrrp_*
VRRP 给终端提供虚拟网关 主备路由器对外表现为一台 终端无感知切换 是局域网三层高可用基础
触发场景
- 配置主备网关 高可用
- 终端网关切换不丝滑 丢包多
- VRRP 优先级 / 抢占调整
- VRRP 主备频繁切换
- VRRP + BFD 实现毫秒级切换
- VRRP + NQA 联动上联探测
- 负载分担（两组互为主备）
- 配置管理 VRRP（堆叠/集群管理用）
VRRP 版本对比
| 版本 | RFC | 支持协议 | 备注 |
|---|---|---|---|
| VRRPv2 | RFC 3768 | 仅 IPv4 | 默认 应用最广 |
| VRRPv3 | RFC 5798 | IPv4 + IPv6 | 双栈支持 改进了认证 |
如混合环境 推荐用 VRRPv3
基本概念
| 术语 | 解释 |
|---|---|
| VRID | 备份组号 1-255 同一备份组成员 VRID 一致 |
| 虚拟 IP | 虚 IP 终端网关 |
| 虚拟 MAC | 自动生成 0000-5e00-01XX（XX=VRID） |
| Master | 主 转发流量 |
| Backup | 备 监听 Master 心跳 |
| 优先级 | 0-255 默认 100 大优 0 表示放弃 |
| 抢占 | 高优先级设备恢复时自动接管 |
配置三步走
1 基础 VRRP（主路由器）
system-view
interface Vlanif 10
ip address 192.168.10.2 24
vrrp vrid 1 virtual-ip 192.168.10.1 # 虚 IP
vrrp vrid 1 priority 120 # 优先级 高
vrrp vrid 1 preempt-mode timer delay 30 # 抢占延时
quit
2 配置备份路由器
system-view
interface Vlanif 10
ip address 192.168.10.3 24
vrrp vrid 1 virtual-ip 192.168.10.1 # 同一虚 IP
vrrp vrid 1 priority 100 # 优先级 低
quit
终端 PC 网关：192.168.10.1（虚 IP）
3 验证
display vrrp
display vrrp brief
display vrrp interface Vlanif 10
正常：主 State=Master 备 State=Backup
高级 联动 BFD（毫秒级切换）
# 1 配 BFD 会话
bfd
quit
bfd to_peer bind peer-ip 192.168.10.3 source-ip 192.168.10.2
discriminator local 1
discriminator remote 2
commit
quit
# 2 VRRP 跟踪 BFD
interface Vlanif 10
vrrp vrid 1 track bfd-session 1 reduced 30
BFD down → 优先级减 30 → 主备切换（毫秒级）
联动 NQA（上联探测）
# 1 NQA 探测上联路由器
nqa test-instance admin to_uplink
test-type icmp
destination-address ipv4 10.1.1.1
frequency 5
start now
quit
# 2 VRRP 跟踪 NQA
interface Vlanif 10
vrrp vrid 1 track nqa admin to_uplink reduced 40
上联失败 → 优先级减 40 → 让出主权
联动接口（跟踪上联接口）
interface Vlanif 10
vrrp vrid 1 track interface GigabitEthernet 0/0/24 reduced 30
上联接口 down → 优先级减 30 → 切换
负载分担（两组互为主备）
让两台路由器都干活 提升资源利用
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 284 lines · 133 tokens per session scan A af5fafa88316
vrrp is a skill published in the GitHub repository nanxiaoyao/network-huawei-skills (2 stars, last pushed 1mo ago), licensed MIT. It adds 133 tokens to every session and 3,072 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
gke-ai-troubleshooting-tpu-dynamic-slices-monitoring
Monitors, troubleshoots, and manages GKE TPU Dynamic Slices custom resources. Use when checking TPU slice lifecycle states, troubleshooting slice provisioning failures, validating single-slice or multi-slice (JobSet) workload manifests, or safely patching stuck finalizers and disabling the slice controller. Don't use…
gke-ai-troubleshooting-tpu-vbar-oom
Diagnoses and prevents vbarcontrolagent segfaults, out-of-memory (OOM) errors, and TPU device initialization failures on TPU v6e nodes in GKE caused by race conditions during TPU device resets or high-frequency metrics polling. Use when troubleshooting vbarcontrolagent crashes, memory cgroup OOMs in serial console…
competition-firmware-layout
Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for firmware images, partition tables, boot chains, update packages, extracted filesystems, embedded configs, and device-facing trust boundaries. Use when the user asks to unpack firmware, map partition layout, inspect bootloader or init…
systematic-debugging
A step-by-step method for finding the underlying cause of technical problems before changing code. It covers reading errors, reproducing failures, checking recent changes, and tracing data across system components.
doca-flow
Build and debug DOCA Flow applications on supported NVIDIA NICs/DPUs: define match/action pipes, initialize ports and representors, choose forwarding targets, validate pipes before hardware programming, read counters, match the Flow version to the installed DOCA release, and diagnose Flow API errors. Trigger on DOCA…
diagnose-driver-install
Diagnose NVIDIA driver installation failures on DeepOps-managed nodes — nvidia-smi errors, "No devices were found", DKMS build failures, or GPU pods crash-looping. Use before reinstalling anything.