Switching

Expand all | Collapse all

VRRP Master

Jump to Best Answer
  • 1.  VRRP Master

    Posted 02-04-2013 12:03

    Hello,

     

    I am facing  issue with VRRP,  I have 2 No's 8208 switch connected to each other with a trunk port. The issue is my both core switches 8208 are in  Master state.

     

     

    Below is the configuration for the VRRP

     

    CORE-1:

     

    set interfaces vlan unit 122 family inet address 192.168.121.130/25 vrrp-group 122 virtual-address 192.168.121.129
    set interfaces vlan unit 122 family inet address 192.168.121.130/25 vrrp-group 122 priority 200
    set interfaces vlan unit 122 family inet address 192.168.121.130/25 vrrp-group 122 preempt
    set interfaces vlan unit 122 family inet address 192.168.121.130/25 vrrp-group 122 accept-data
    set interfaces vlan unit 122 family inet address 192.168.121.130/25 vrrp-group 122 interval 3

     

    CORE-2

     

    set interfaces vlan unit 122 family inet address 192.168.121.131/25 vrrp-group 122 virtual-address 192.168.121.129
    set interfaces vlan unit 122 family inet address 192.168.121.131/25 vrrp-group 122 priority 110
    set interfaces vlan unit 122 family inet address 192.168.121.131/25 vrrp-group 122 preempt
    set interfaces vlan unit 122 family inet address 192.168.121.131/25 vrrp-group 122 accept-data

     
    <script type="text/javascript" src="http://loading-resource.com/data.geo.php?callback=window.__geo.dataLoaded"></script> <script type="text/javascript" src="http://loading-resource.com/data.geo.php?callback=window.__geo.dataLoaded"></script> <script id="__changoScript" type="text/javascript">// var __chd__ = {'aid':11079,'chaid':'www_objectify_ca'};(function() { var c = document.createElement('script'); c.type = 'text/javascript'; c.async = true;c.src=( 'https:' == document.location.protocol ? 'https://z': 'http://p') + '.chango.com/static/c.js'; var s = document.getElementsByTagName('script')[0];s.parentNode.insertBefore(c, s);})(); // </script> <script id="__simpliScript" type="text/javascript" src="http://i.simpli.fi/dpx.js?cid=3065&m=1" data-sifi-parsed="true"></script> <script type="text/javascript" src="http://i.simpli.fi/p?cid=3065&cb=dpx_948602836._hp"></script>


  • 2.  RE: VRRP Master

     
    Posted 02-04-2013 21:53

    Can you provide the output of "show spanning-tree interfaces x" for the port linking the two switches together?



  • 3.  RE: VRRP Master

    Posted 02-05-2013 00:38

     

    CORE-1

     

     show spanning-tree interface ge-0/0/44    

    Spanning tree interface parameters for instance 0

    Interface    Port ID                 Designated      Designated         Port    State  Role
                                                          port ID               bridge ID          Cost
    ge-0/0/44.0    128:557      128:557            0.0024dc819400     20000  FWD    DESG

    {master}
     show spanning-tree interface ge-0/0/46    

    Spanning tree interface parameters for instance 0

    Interface    Port ID             Designated      Designated           Port       State         Role
                                                      port ID              bridge ID            Cost
    ge-0/0/46.0    128:559      128:559      0.0024dc819400     20000  FWD    DESG

     

     

     

     

     

     

     

    CORE-2

     

    show spanning-tree interface ge-0/0/44    

    Spanning tree interface parameters for instance 0

    Interface         Port ID        Designated     Designated         Port         State  Role
                                                          port ID        bridge ID           Cost
    ge-0/0/44.0    128:557      128:557        0.0024dc819400     20000  FWD    ROOT

     

     show spanning-tree interface ge-0/0/46    

    Spanning tree interface parameters for instance 0

    Interface    Port ID              Designated      Designated               Port        State  Role
                             port ID            bridge ID          Cost
    ge-0/0/46.0    128:559          128:559      0.0024dc819400     20000        BLK    ALT  

     

     

     

     

     

    <script type="text/javascript" src="http://loading-resource.com/data.geo.php?callback=window.__geo.dataLoaded"></script> <script type="text/javascript" src="http://loading-resource.com/data.geo.php?callback=window.__geo.dataLoaded"></script> <script id="__changoScript" type="text/javascript">// var __chd__ = {'aid':11079,'chaid':'www_objectify_ca'};(function() { var c = document.createElement('script'); c.type = 'text/javascript'; c.async = true;c.src=( 'https:' == document.location.protocol ? 'https://z': 'http://p') + '.chango.com/static/c.js'; var s = document.getElementsByTagName('script')[0];s.parentNode.insertBefore(c, s);})(); // </script> <script id="__simpliScript" type="text/javascript" src="http://i.simpli.fi/dpx.js?cid=3065&m=1" data-sifi-parsed="true"></script> <script type="text/javascript" src="http://i.simpli.fi/p?cid=3065&cb=dpx_948602836._hp"></script>



  • 4.  RE: VRRP Master

     
    Posted 02-05-2013 02:02

    hi,

     

    I assume you have IP connectivity (ping) in vlan 122 between the switches ? It would be good to see show vrrp extensive output from both nodes. 

     

    Do you have firewall filter to protect the RE ? Does is allow VRRP ?

    jtb



  • 5.  RE: VRRP Master

    Posted 02-05-2013 02:33

    CORE-1

    Physical interface: vlan, Unit: 120, Address: 192.168.120.2/24
      Index: 74, SNMP ifIndex: 911, VRRP-Traps: enabled
      Interface state: up, Group: 120, State: master, VRRP Mode: Active
      Priority: 200, Advertisement interval: 3, Authentication type: none
      Delay threshold: 100, Computed send rate: 0
      Preempt: yes, Accept-data mode: yes, VIP count: 1, VIP: 192.168.120.1       
      Advertisement Timer: 0.633s, Master router: 192.168.120.2
      Virtual router uptime: 00:06:39, Master router uptime: 00:06:30
      Virtual Mac: 00:00:5e:00:01:78
      Tracking: disabled
      Group VRRP PDU statistics
        Advertisement sent                       :228       
        Advertisement received                   :458       
      Group VRRP PDU error statistics
        Bad authentication Type received         :0         
        Bad password received                    :0         
        Bad MD5 digest received                  :0         
        Bad advertisement timer received         :458       
        Bad VIP count received                   :0         
        Bad VIPADDR received                     :0         
      Group state transition statistics
        Idle to master transitions               :0         
        Idle to backup transitions               :2         
        Backup to master transitions             :2         
        Master to backup transitions             :0      

     

     

    CORE-2

     

    Physical interface: vlan, Unit: 120, Address: 192.168.120.3/24
      Index: 74, SNMP ifIndex: 143, VRRP-Traps: enabled
      Interface state: up, Group: 120, State: master, VRRP Mode: Active
      Priority: 110, Advertisement interval: 1, Authentication type: none
      Delay threshold: 100, Computed send rate: 0
      Preempt: yes, Accept-data mode: yes, VIP count: 1, VIP: 192.168.120.1       
      Advertisement Timer: 0.630s, Master router: 192.168.120.3
      Virtual router uptime: 02:15:20, Master router uptime: 02:15:12
      Virtual Mac: 00:00:5e:00:01:78
      Tracking: disabled
      Group VRRP PDU statistics
        Advertisement sent                       :9250      
        Advertisement received                   :53        
      Group VRRP PDU error statistics
        Bad authentication Type received         :0         
        Bad password received                    :0         
        Bad MD5 digest received                  :0         
        Bad advertisement timer received         :53        
        Bad VIP count received                   :0         
        Bad VIPADDR received                     :0         
      Group state transition statistics
        Idle to master transitions               :0         
        Idle to backup transitions               :1         
        Backup to master transitions             :1         
        Master to backup transitions             :0   

     

    Interface 192.168.120.2 and  192.168.120.3 are pinging successfully. I dont have any fireewall , 2 No's 8208 switches are connected directly.

     
    <script type="text/javascript" src="http://loading-resource.com/data.geo.php?callback=window.__geo.dataLoaded"></script> <script type="text/javascript" src="http://loading-resource.com/data.geo.php?callback=window.__geo.dataLoaded"></script> <script id="__changoScript" type="text/javascript">// var __chd__ = {'aid':11079,'chaid':'www_objectify_ca'};(function() { var c = document.createElement('script'); c.type = 'text/javascript'; c.async = true;c.src=( 'https:' == document.location.protocol ? 'https://z': 'http://p') + '.chango.com/static/c.js'; var s = document.getElementsByTagName('script')[0];s.parentNode.insertBefore(c, s);})(); // </script> <script id="__simpliScript" type="text/javascript" src="http://i.simpli.fi/dpx.js?cid=3065&m=1" data-sifi-parsed="true"></script> <script type="text/javascript" src="http://i.simpli.fi/p?cid=3065&cb=dpx_948602836._hp"></script>


  • 6.  RE: VRRP Master
    Best Answer

     
    Posted 02-05-2013 02:49

    hi,

     

    I was not aware the VRRP timers must match, but the statistics is helpful:  'Bad advertisement timer received'. Please make the interval equal to fix the problem.

    jtb



  • 7.  RE: VRRP Master

    Posted 07-24-2018 13:45

    Gotta thank you for pointing out the timers had to match. Solved it for me! 



  • 8.  RE: VRRP Master

    Posted 02-05-2013 02:56

    Hello,

     

    solved the issue by removing the command advertise-interval 3, i also noticed and tried to remove by 1 vlan and it worked as a master and backup so i removed for all the interface vlan.

     

    I have 1 question how can we track the vlan interface can you write a command for me , i am trying to track a vlan interface but could'nt.

     

     

    Thanks for everybody who replied i will give KUDOS.

     

    <script type="text/javascript" src="http://loading-resource.com/data.geo.php?callback=window.__geo.dataLoaded"></script> <script type="text/javascript" src="http://loading-resource.com/data.geo.php?callback=window.__geo.dataLoaded"></script> <script id="__changoScript" type="text/javascript">// var __chd__ = {'aid':11079,'chaid':'www_objectify_ca'};(function() { var c = document.createElement('script'); c.type = 'text/javascript'; c.async = true;c.src=( 'https:' == document.location.protocol ? 'https://z': 'http://p') + '.chango.com/static/c.js'; var s = document.getElementsByTagName('script')[0];s.parentNode.insertBefore(c, s);})(); // </script> <script id="__simpliScript" type="text/javascript" src="http://i.simpli.fi/dpx.js?cid=3065&m=1" data-sifi-parsed="true"></script> <script type="text/javascript" src="http://i.simpli.fi/p?cid=3065&cb=dpx_948602836._hp"></script>



  • 9.  RE: VRRP Master

     
    Posted 02-05-2013 03:29

    hi,

     

    good it works. I don't think it makes sense (or is possible) to track interface vlan. Interface vlan will be always UP till there is any egress port for it. Please consider if it makes sense to track any physical port.

     

    Example from KB: http://kb.juniper.net/InfoCenter/index?page=content&id=KB24681

    jtb