Routing
Highlighted
Routing

Juniper vrrp issue. Both router remain master master- Urgent -

‎01-28-2014 09:45 PM

I am having an issue with 2 Juniper routers where all of the vrrp groups between them are in a master state despite the fact I have given one router higher priority than the other.

This started to happen after rebooting both routers as part of maintenance test.   Can someone help me determine why this is happening? or how I can fix it?

 

R1

set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 virtual-address 10.4.3.206

set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 priority 250

set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 advertise-interval 1

set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 preempt

set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 accept-data

set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 authentication-type simple

set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 authentication-key "ClM8XbwmXT"

set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 track priority-hold-time 1

 

 

R2

 

set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 virtual-address 10.4.3.206

set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 priority 200

set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 advertise-interval 1

set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 preempt

set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 accept-data

set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 authentication-type simple

set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 authentication-key " ClM8XbwmXT"

set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 track priority-hold-time 1

 

 

 

Vrrp for R1 status

 

xe-1/1/1.1016 up             10   master   Active      A  0.138 lcl    10.4.3.205 

                                                                 vip    10.4.3.206 

Vrrp for R2 status

ge-1/1/1.1988 up             10   master   Active      A  0.900 lcl    10.4.3.204 

                                                                                           vip    10.4.3.206 

 

R1

Model: mx240

JUNOS Base OS boot [11.4R9.4]

 

R2

Model: mx240

JUNOS Base OS boot [11.4R9.4]

 

Any help on this issue it would be greatly appreciated 

3 REPLIES 3
Highlighted
Routing

Re: Juniper vrrp issue. Both router remain master master- Urgent -

‎01-28-2014 09:56 PM
Hello,

The outputs that you pasted are from different interface-units.
However, for the two units that you've shown above (ge-1/1/1.1010 on R1 and ge-1/1/1.1700 on R2), the VRRP IP is not in the same subnet as the interface IP address.

This same VRRP (.206) seems to be on unit 1016 and unit 1988.

My suggestion would be to change the VRRP IP on units 1010 and 1700 and see if that helps.

Thanks,
ankit
Highlighted
Routing

Re: Juniper vrrp issue. Both router remain master master- Urgent -

‎01-29-2014 06:42 AM

Thanks Ankit. Below is the correct configuration it was a copy an paste error. The problem still exist. Any help would be greatly appreciated.

Thanks in advance.

 

I am sorry for the typos be low is the correct configuration.

R1

set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 virtual-address 10.4.3.106

set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 priority 250

set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 advertise-interval 1

set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 preempt

set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 accept-data

set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 authentication-type simple

set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 authentication-key "ClM8XbwmXT"

set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 track priority-hold-time 1

 

 

R2

 

set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 virtual-address 10.4.3.106

set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 priority 200

set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 advertise-interval 1

set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 preempt

set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 accept-data

set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 authentication-type simple

set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 authentication-key " ClM8XbwmXT"

set interfaces ge-1/1/1 unit 1700 family inet address 10.4.3.104/28 vrrp-group 10 track priority-hold-time 1

 

 

 

Vrrp for R1 status

 

ge-1/1/1.1010 up             10   master   Active      A  0.138 lcl    10.4.3.205 

                                                                 vip    10.4.3.206 

Vrrp for R2 status

ge-1/1/1.1700 up             10   master   Active      A  0.900 lcl    10.4.3.204 

                                                                                           vip    10.4.3.206 

 

Highlighted
Routing

Re: Juniper vrrp issue. Both router remain master master- Urgent -

‎01-29-2014 08:28 AM

There still seems to be some issue with the outputs here.  Check this out:

 

R1

set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 virtual-address 10.4.3.106

set interfaces ge-1/1/1 unit 1010 family inet address 10.4.3.105/28 vrrp-group 10 priority 250

 

Vrrp for R1 status

 

ge-1/1/1.1010 up             10   master   Active      A  0.138 lcl    10.4.3.205 

                                                                 vip    10.4.3.206 

 

The IP addresses (both local and VRRP) for R1 show up in the 10.4.3.192/28 subnet whereas the configuration that you posted show the IP addresses in the 10.4.3.96/28 range.  Could you please post the complete configuration.  Probably your active and candidate configurations are different (commit is required).

 

Basically, if your VRRP IP is in a different subnet than the interface-IP, then you need to make sure that the VRRP-IP's subnet is not being used anywhere else.

 

Could you post these outputs from the operational mode:

 

show configuration | no-more

show vrrp status

 

Thanks,

ankit

Feedback