VRRP master-master state replication
Control packets are not being exchanged between master and backup because of faulty status. This article describes how to replicate a master/master state in VRRP.
Control packets are not exchanging between master and backup because the current state is master/master, probably due to a mistaken firewall filter or packet loss among service providers, or WEDGE condition in PFE.
Here is how to replicate the master/master problem state. This KB articles uses a firewall filter instead of WEDGE condition for the example.
Topology
R1-------------------------------- R2 master Backup 110 105
Normal state
[email protected]:R1# run show vrrp Interface State Group VR state VR Mode Timer Type Address ge-0/0/0.0 up 101 master Active A 0.768 lcl 192.168.10.2 vip 192.168.10.1 [email protected]:R2# run show vrrp Interface State Group VR state VR Mode Timer Type Address ge-0/0/2.0 up 101 backup Active D 2.918 lcl 192.168.10.3 vip 192.168.10.1 mas 192.168.10.2
Configuration
[email protected]:R1# run show configuration firewall family inet { filter VRRP { term 1 { from { destination-address { 224.0.0.18/32; } } then { log; reject; } } term 2 { then accept; } } } [email protected]:R1# run show configuration interfaces ge-0/0/0 { unit 0 { family inet { inactive: filter { >> Activate to make WEDGE condition input VRRP; } address 192.168.10.2/24 { vrrp-group 101 { virtual-address 192.168.10.1; priority 110; advertise-interval 1; preempt { hold-time 180; } accept-data; } } } } }
Firewall activation to make WEDGE
[email protected]:R1# activate interfaces ge-0/0/0 unit 0 family inet filter input [edit] [email protected]:R1# commit
Change priority on backup router
[email protected]:R2# edit interfaces ge-0/0/2 unit 0 family inet address 192.168.10.3/24 [edit interfaces ge-0/0/2 unit 0 family inet address 192.168.10.3/24] [email protected]:R2# set vrrp-group 101 priority 120 [edit interfaces ge-0/0/2 unit 0 family inet address 192.168.10.3/24] [email protected]:R2# commit commit complete
Create master/master state
[email protected]:R2# run show vrrp Interface State Group VR state VR Mode Timer Type Address ge-0/0/2.0 up 101 master Active A 0.326 lcl 192.168.10.3 vip 192.168.10.1 [email protected]:R1# run show vrrp Interface State Group VR state VR Mode Timer Type Address ge-0/0/0.0 up 101 master Active A 0.601 lcl 192.168.10.2 vip 192.168.10.1
When a master/master state is encountered, check to see if the control packets are being correctly exchanged.