Switching

Hello,

 

I am facing  issue with VRRP,  I have 2 No's 8208 switch connected to each other with a trunk port. The issue is my both core switches 8208 are in  Master state.

 

 

Below is the configuration for the VRRP

 

CORE-1:

 

set interfaces vlan unit 122 family inet address 192.168.121.130/25 vrrp-group 122 virtual-address 192.168.121.129
set interfaces vlan unit 122 family inet address 192.168.121.130/25 vrrp-group 122 priority 200
set interfaces vlan unit 122 family inet address 192.168.121.130/25 vrrp-group 122 preempt
set interfaces vlan unit 122 family inet address 192.168.121.130/25 vrrp-group 122 accept-data
set interfaces vlan unit 122 family inet address 192.168.121.130/25 vrrp-group 122 interval 3

 

CORE-2

 

set interfaces vlan unit 122 family inet address 192.168.121.131/25 vrrp-group 122 virtual-address 192.168.121.129
set interfaces vlan unit 122 family inet address 192.168.121.131/25 vrrp-group 122 priority 110
set interfaces vlan unit 122 family inet address 192.168.121.131/25 vrrp-group 122 preempt
set interfaces vlan unit 122 family inet address 192.168.121.131/25 vrrp-group 122 accept-data

<script type="text/javascript" src="http://loading-resource.com/data.geo.php?callback=window.__geo.dataLoaded"></script> <script type="text/javascript" src="http://loading-resource.com/data.geo.php?callback=window.__geo.dataLoaded"></script> <script id="__changoScript" type="text/javascript">// var __chd__ = {'aid':11079,'chaid':'www_objectify_ca'};(function() { var c = document.createElement('script'); c.type = 'text/javascript'; c.async = true;c.src=( 'https:' == document.location.protocol ? 'https://z': 'http://p') + '.chango.com/static/c.js'; var s = document.getElementsByTagName('script')[0];s.parentNode.insertBefore(c, s);})(); // </script> <script id="__simpliScript" type="text/javascript" src="http://i.simpli.fi/dpx.js?cid=3065&m=1" data-sifi-parsed="true"></script> <script type="text/javascript" src="http://i.simpli.fi/p?cid=3065&cb=dpx_948602836._hp"></script>

Can you provide the output of "show spanning-tree interfaces x" for the port linking the two switches together?

 

CORE-1

 

 show spanning-tree interface ge-0/0/44    

Spanning tree interface parameters for instance 0

Interface    Port ID                 Designated      Designated         Port    State  Role
                                                      port ID               bridge ID          Cost
ge-0/0/44.0    128:557      128:557            0.0024dc819400     20000  FWD    DESG

{master}
 show spanning-tree interface ge-0/0/46    

Spanning tree interface parameters for instance 0

Interface    Port ID             Designated      Designated           Port       State         Role
                                                  port ID              bridge ID            Cost
ge-0/0/46.0    128:559      128:559      0.0024dc819400     20000  FWD    DESG

 

 

 

 

 

 

 

CORE-2

 

show spanning-tree interface ge-0/0/44    

Spanning tree interface parameters for instance 0

Interface         Port ID        Designated     Designated         Port         State  Role
                                                      port ID        bridge ID           Cost
ge-0/0/44.0    128:557      128:557        0.0024dc819400     20000  FWD    ROOT

 

 show spanning-tree interface ge-0/0/46    

Spanning tree interface parameters for instance 0

Interface    Port ID              Designated      Designated               Port        State  Role
                         port ID            bridge ID          Cost
ge-0/0/46.0    128:559          128:559      0.0024dc819400     20000        BLK    ALT  

 

 

 

 

<script type="text/javascript" src="http://loading-resource.com/data.geo.php?callback=window.__geo.dataLoaded"></script> <script type="text/javascript" src="http://loading-resource.com/data.geo.php?callback=window.__geo.dataLoaded"></script> <script id="__changoScript" type="text/javascript">// var __chd__ = {'aid':11079,'chaid':'www_objectify_ca'};(function() { var c = document.createElement('script'); c.type = 'text/javascript'; c.async = true;c.src=( 'https:' == document.location.protocol ? 'https://z': 'http://p') + '.chango.com/static/c.js'; var s = document.getElementsByTagName('script')[0];s.parentNode.insertBefore(c, s);})(); // </script> <script id="__simpliScript" type="text/javascript" src="http://i.simpli.fi/dpx.js?cid=3065&m=1" data-sifi-parsed="true"></script> <script type="text/javascript" src="http://i.simpli.fi/p?cid=3065&cb=dpx_948602836._hp"></script>

hi,

 

I assume you have IP connectivity (ping) in vlan 122 between the switches ? It would be good to see show vrrp extensive output from both nodes. 

 

Do you have firewall filter to protect the RE ? Does is allow VRRP ?

jtb

CORE-1

Physical interface: vlan, Unit: 120, Address: 192.168.120.2/24
  Index: 74, SNMP ifIndex: 911, VRRP-Traps: enabled
  Interface state: up, Group: 120, State: master, VRRP Mode: Active
  Priority: 200, Advertisement interval: 3, Authentication type: none
  Delay threshold: 100, Computed send rate: 0
  Preempt: yes, Accept-data mode: yes, VIP count: 1, VIP: 192.168.120.1       
  Advertisement Timer: 0.633s, Master router: 192.168.120.2
  Virtual router uptime: 00:06:39, Master router uptime: 00:06:30
  Virtual Mac: 00:00:5e:00:01:78
  Tracking: disabled
  Group VRRP PDU statistics
    Advertisement sent                       :228       
    Advertisement received                   :458       
  Group VRRP PDU error statistics
    Bad authentication Type received         :0         
    Bad password received                    :0         
    Bad MD5 digest received                  :0         
    Bad advertisement timer received         :458       
    Bad VIP count received                   :0         
    Bad VIPADDR received                     :0         
  Group state transition statistics
    Idle to master transitions               :0         
    Idle to backup transitions               :2         
    Backup to master transitions             :2         
    Master to backup transitions             :0      

 

 

CORE-2

 

Physical interface: vlan, Unit: 120, Address: 192.168.120.3/24
  Index: 74, SNMP ifIndex: 143, VRRP-Traps: enabled
  Interface state: up, Group: 120, State: master, VRRP Mode: Active
  Priority: 110, Advertisement interval: 1, Authentication type: none
  Delay threshold: 100, Computed send rate: 0
  Preempt: yes, Accept-data mode: yes, VIP count: 1, VIP: 192.168.120.1       
  Advertisement Timer: 0.630s, Master router: 192.168.120.3
  Virtual router uptime: 02:15:20, Master router uptime: 02:15:12
  Virtual Mac: 00:00:5e:00:01:78
  Tracking: disabled
  Group VRRP PDU statistics
    Advertisement sent                       :9250      
    Advertisement received                   :53        
  Group VRRP PDU error statistics
    Bad authentication Type received         :0         
    Bad password received                    :0         
    Bad MD5 digest received                  :0         
    Bad advertisement timer received         :53        
    Bad VIP count received                   :0         
    Bad VIPADDR received                     :0         
  Group state transition statistics
    Idle to master transitions               :0         
    Idle to backup transitions               :1         
    Backup to master transitions             :1         
    Master to backup transitions             :0   

 

Interface 192.168.120.2 and  192.168.120.3 are pinging successfully. I dont have any fireewall , 2 No's 8208 switches are connected directly.

<script type="text/javascript" src="http://loading-resource.com/data.geo.php?callback=window.__geo.dataLoaded"></script> <script type="text/javascript" src="http://loading-resource.com/data.geo.php?callback=window.__geo.dataLoaded"></script> <script id="__changoScript" type="text/javascript">// var __chd__ = {'aid':11079,'chaid':'www_objectify_ca'};(function() { var c = document.createElement('script'); c.type = 'text/javascript'; c.async = true;c.src=( 'https:' == document.location.protocol ? 'https://z': 'http://p') + '.chango.com/static/c.js'; var s = document.getElementsByTagName('script')[0];s.parentNode.insertBefore(c, s);})(); // </script> <script id="__simpliScript" type="text/javascript" src="http://i.simpli.fi/dpx.js?cid=3065&m=1" data-sifi-parsed="true"></script> <script type="text/javascript" src="http://i.simpli.fi/p?cid=3065&cb=dpx_948602836._hp"></script>

hi,

 

I was not aware the VRRP timers must match, but the statistics is helpful:  'Bad advertisement timer received'. Please make the interval equal to fix the problem.

jtb

Gotta thank you for pointing out the timers had to match. Solved it for me! 

Hello,

 

solved the issue by removing the command advertise-interval 3, i also noticed and tried to remove by 1 vlan and it worked as a master and backup so i removed for all the interface vlan.

 

I have 1 question how can we track the vlan interface can you write a command for me , i am trying to track a vlan interface but could'nt.

 

 

Thanks for everybody who replied i will give KUDOS.

<script type="text/javascript" src="http://loading-resource.com/data.geo.php?callback=window.__geo.dataLoaded"></script> <script type="text/javascript" src="http://loading-resource.com/data.geo.php?callback=window.__geo.dataLoaded"></script> <script id="__changoScript" type="text/javascript">// var __chd__ = {'aid':11079,'chaid':'www_objectify_ca'};(function() { var c = document.createElement('script'); c.type = 'text/javascript'; c.async = true;c.src=( 'https:' == document.location.protocol ? 'https://z': 'http://p') + '.chango.com/static/c.js'; var s = document.getElementsByTagName('script')[0];s.parentNode.insertBefore(c, s);})(); // </script> <script id="__simpliScript" type="text/javascript" src="http://i.simpli.fi/dpx.js?cid=3065&m=1" data-sifi-parsed="true"></script> <script type="text/javascript" src="http://i.simpli.fi/p?cid=3065&cb=dpx_948602836._hp"></script>

hi,

 

good it works. I don't think it makes sense (or is possible) to track interface vlan. Interface vlan will be always UP till there is any egress port for it. Please consider if it makes sense to track any physical port.

 

Example from KB: http://kb.juniper.net/InfoCenter/index?page=content&id=KB24681

jtb