Routing

Expand all | Collapse all

Juniper vrrp issue. Both router remain master master- Urgent -

  • 1.  Juniper vrrp issue. Both router remain master master- Urgent -

    Posted 01-28-2014 21:46

    I am having an issue with 2 Juniper routers where all of the vrrp groups between them are in a master state despite the fact I have given one router higher priority than the other.

    This started to happen after rebooting both routers as part of maintenance test.   Can someone help me determine why this is happening? or how I can fix it?

     

    R1

    set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 virtual-address 10.4.3.206

    set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 priority 250

    set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 advertise-interval 1

    set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 preempt

    set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 accept-data

    set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 authentication-type simple

    set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 authentication-key "ClM8XbwmXT"

    set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 track priority-hold-time 1

     

     

    R2

     

    set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 virtual-address 10.4.3.206

    set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 priority 200

    set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 advertise-interval 1

    set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 preempt

    set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 accept-data

    set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 authentication-type simple

    set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 authentication-key " ClM8XbwmXT"

    set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 track priority-hold-time 1

     

     

     

    Vrrp for R1 status

     

    xe-1/1/1.1016 up             10   master   Active      A  0.138 lcl    10.4.3.205 

                                                                     vip    10.4.3.206 

    Vrrp for R2 status

    ge-1/1/1.1988 up             10   master   Active      A  0.900 lcl    10.4.3.204 

                                                                                               vip    10.4.3.206 

     

    R1

    Model: mx240

    JUNOS Base OS boot [11.4R9.4]

     

    R2

    Model: mx240

    JUNOS Base OS boot [11.4R9.4]

     

    Any help on this issue it would be greatly appreciated 



  • 2.  RE: Juniper vrrp issue. Both router remain master master- Urgent -

    Posted 01-28-2014 21:56
    Hello,

    The outputs that you pasted are from different interface-units.
    However, for the two units that you've shown above (ge-1/1/1.1010 on R1 and ge-1/1/1.1700 on R2), the VRRP IP is not in the same subnet as the interface IP address.

    This same VRRP (.206) seems to be on unit 1016 and unit 1988.

    My suggestion would be to change the VRRP IP on units 1010 and 1700 and see if that helps.

    Thanks,
    ankit


  • 3.  RE: Juniper vrrp issue. Both router remain master master- Urgent -

    Posted 01-29-2014 06:43

    Thanks Ankit. Below is the correct configuration it was a copy an paste error. The problem still exist. Any help would be greatly appreciated.

    Thanks in advance.

     

    I am sorry for the typos be low is the correct configuration.

    R1

    set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 virtual-address 10.4.3.106

    set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 priority 250

    set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 advertise-interval 1

    set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 preempt

    set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 accept-data

    set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 authentication-type simple

    set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 authentication-key "ClM8XbwmXT"

    set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 track priority-hold-time 1

     

     

    R2

     

    set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 virtual-address 10.4.3.106

    set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 priority 200

    set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 advertise-interval 1

    set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 preempt

    set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 accept-data

    set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 authentication-type simple

    set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 authentication-key " ClM8XbwmXT"

    set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 track priority-hold-time 1

     

     

     

    Vrrp for R1 status

     

    ge-1/1/1.1010 up             10   master   Active      A  0.138 lcl    10.4.3.205 

                                                                     vip    10.4.3.206 

    Vrrp for R2 status

    ge-1/1/1.1700 up             10   master   Active      A  0.900 lcl    10.4.3.204 

                                                                                               vip    10.4.3.206 

     



  • 4.  RE: Juniper vrrp issue. Both router remain master master- Urgent -

    Posted 01-29-2014 08:28

    There still seems to be some issue with the outputs here.  Check this out:

     

    R1

    set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 virtual-address 10.4.3.106

    set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 priority 250

     

    Vrrp for R1 status

     

    ge-1/1/1.1010 up             10   master   Active      A  0.138 lcl    10.4.3.205 

                                                                     vip    10.4.3.206 

     

    The IP addresses (both local and VRRP) for R1 show up in the 10.4.3.192/28 subnet whereas the configuration that you posted show the IP addresses in the 10.4.3.96/28 range.  Could you please post the complete configuration.  Probably your active and candidate configurations are different (commit is required).

     

    Basically, if your VRRP IP is in a different subnet than the interface-IP, then you need to make sure that the VRRP-IP's subnet is not being used anywhere else.

     

    Could you post these outputs from the operational mode:

     

    show configuration | no-more

    show vrrp status

     

    Thanks,

    ankit