VRRP master-master state replication

Control packets are not being exchanged between master and backup because of faulty status. This article describes how to replicate a master/master state in VRRP.

Control packets are not exchanging between master and backup because the current state is master/master, probably due to a mistaken firewall filter or packet loss among service providers, or WEDGE condition in PFE.

Here is how to replicate the master/master problem state. This KB articles uses a firewall filter instead of WEDGE condition for the example.

Topology

R1-------------------------------- R2
master                           Backup
110                                105

Normal state

[email protected]:R1# run show vrrp 
Interface State Group VR state VR Mode Timer Type Address
ge-0/0/0.0 up 101 master Active A 0.768 lcl 192.168.10.2 
vip 192.168.10.1 

[email protected]:R2# run show vrrp 
Interface State Group VR state VR Mode Timer Type Address
ge-0/0/2.0 up 101 backup Active D 2.918 lcl 192.168.10.3 
vip 192.168.10.1 
mas 192.168.10.2

Configuration

[email protected]:R1# run show configuration firewall 
family inet {
     filter VRRP {
         term 1 {
             from {
                 destination-address {
                     224.0.0.18/32;
                 }
             }
             then {
                 log;
                 reject;
             }
        }
        term 2 {
            then accept;
        }
    }
}

[email protected]:R1# run show configuration interfaces 
ge-0/0/0 {
     unit 0 {
         family inet {
             inactive: filter {    >> Activate to make WEDGE condition
                 input VRRP;
             }
             address 192.168.10.2/24 {
                 vrrp-group 101 {
                     virtual-address 192.168.10.1;
                     priority 110;
                     advertise-interval 1;
                     preempt {
                         hold-time 180;
                     }
                     accept-data;
                 }
             }
         }
     }
}

Firewall activation to make WEDGE

[email protected]:R1# activate interfaces ge-0/0/0 unit 0 family inet filter input 
[edit]
[email protected]:R1# commit

Change priority on backup router

[email protected]:R2# edit interfaces ge-0/0/2 unit 0 family inet address 192.168.10.3/24 
[edit interfaces ge-0/0/2 unit 0 family inet address 192.168.10.3/24]
[email protected]:R2# set vrrp-group 101 priority 120 

[edit interfaces ge-0/0/2 unit 0 family inet address 192.168.10.3/24]
[email protected]:R2# commit 
commit complete

Create master/master state

[email protected]:R2# run show vrrp 
Interface State Group VR state VR Mode Timer Type Address
ge-0/0/2.0 up 101 master Active A 0.326 lcl 192.168.10.3 
vip 192.168.10.1 

[email protected]:R1# run show vrrp 
Interface State Group VR state VR Mode Timer Type Address
ge-0/0/0.0 up 101 master Active A 0.601 lcl 192.168.10.2 
vip 192.168.10.1

When a master/master state is encountered, check to see if the control packets are being correctly exchanged.

VRRP master-master state replication

Related