VRRP : I am unable to ping the virtual address, I can only ping thebackup addresses.

Discussion in 'Cisco' started by ATM, Nov 12, 2008.

  1. ATM

    ATM Guest

    I have two vlans and two VRRPs on a layer2/3 switch.

    Switch 1 |
    Switch 2
    ---------------------------------------------------------------------|----------------------------------------------------------------------
    Master VRRP 1
    IP Backup

    vlan 11 ] 10.199.9.32 --------| 10.199.9.50 | ----------------|
    10.199.9.50 |------10.199.9.33 [ Vlan 21

    Master VRRP 2 IP

    vlan 12 ] 10.199.77.32 --------| 10.199.77.50 |--------------|
    10.199.77.50|-----10.199.77.33 [ Vlan 22

    ---------------------------------------------------------------------|----------------------------------------------------------------------

    I can consistently ping only the back up vlan ip ( 10.199.9.33 or
    10.199.77.33 )
    But I can never ping the virtual IPs ( 10.199.9.50 or 10.199.77.50)
    and the IPs of the master ( 10.199.9.32/10.199.77.32)

    All interfaces and VRRP interconnects are untagged mode.
    Am i missing something ?

    Thanks a lot
    Arvind
    ATM, Nov 12, 2008
    #1
    1. Advertising

  2. ATM

    Trendkill Guest

    Re: VRRP : I am unable to ping the virtual address, I can only pingthe backup addresses.

    On Nov 12, 3:16 pm, ATM <> wrote:
    > I have two vlans and two VRRPs on a layer2/3 switch.
    >
    > Switch 1                                                        |
    > Switch 2
    > ---------------------------------------------------------------------|----------------------------------------------------------------------
    > Master                                                   VRRP 1
    > IP                                       Backup
    >
    > vlan 11 ] 10.199.9.32 --------| 10.199.9.50 | ----------------|
    > 10.199.9.50 |------10.199.9.33 [ Vlan 21
    >
    > Master                                                  VRRP 2 IP
    >
    > vlan 12 ] 10.199.77.32 --------| 10.199.77.50 |--------------|
    > 10.199.77.50|-----10.199.77.33 [ Vlan 22
    >
    > ---------------------------------------------------------------------|----------------------------------------------------------------------
    >
    > I can consistently ping only the back up vlan ip ( 10.199.9.33 or
    > 10.199.77.33 )
    > But I can never ping the virtual IPs ( 10.199.9.50 or 10.199.77.50)
    > and the IPs of the master ( 10.199.9.32/10.199.77.32)
    >
    > All interfaces and VRRP interconnects are untagged mode.
    > Am i missing something ?
    >
    > Thanks a lot
    > Arvind


    I can't speak to this directly, but here is a related link.

    http://www.ciscoblog.com/archives/2006/04/hsrp_vs_vrrp_vs.html
    Do a control-F for 'through' and you'll see some posts about pings
    failing to group IP after failover.

    I would recommend doing some show arps and show cam/macs on the
    network gear to see exactly what is going on.
    Trendkill, Nov 13, 2008
    #2
    1. Advertising

  3. ATM

    Stephen Guest

    Re: VRRP : I am unable to ping the virtual address, I can only ping the backup addresses.

    On Wed, 12 Nov 2008 12:16:06 -0800 (PST), ATM <>
    wrote:

    >
    >
    >I have two vlans and two VRRPs on a layer2/3 switch.
    >
    >Switch 1 |
    >Switch 2
    >---------------------------------------------------------------------|----------------------------------------------------------------------
    >Master VRRP 1
    >IP Backup
    >
    >vlan 11 ] 10.199.9.32 --------| 10.199.9.50 | ----------------|
    >10.199.9.50 |------10.199.9.33 [ Vlan 21
    >
    >Master VRRP 2 IP
    >
    >vlan 12 ] 10.199.77.32 --------| 10.199.77.50 |--------------|
    >10.199.77.50|-----10.199.77.33 [ Vlan 22
    >
    >---------------------------------------------------------------------|----------------------------------------------------------------------
    >
    >I can consistently ping only the back up vlan ip ( 10.199.9.33 or
    >10.199.77.33 )
    >But I can never ping the virtual IPs ( 10.199.9.50 or 10.199.77.50)
    >and the IPs of the master ( 10.199.9.32/10.199.77.32)


    VRRP standard explicitly says the software should do wierd things for
    the "master" IP address which dont apply to backup, so you may be
    stumbling over this.

    the issue was about the owner MAC address and ping responses (only a
    master will reply, which was something about knowing when backup is
    active) - sounds like the opposite of what you are getting.

    it was much easier for diags if each physical interface has its own
    address and the VRRP floating address(es) are separate (and your NMS
    may prefer this as well for consistent polling).

    1 way around this on other systems (Bay / Nortel routers) was to use 2
    different backup priorities and not configure a master at all.
    >
    >All interfaces and VRRP interconnects are untagged mode.
    >Am i missing something ?


    note from someone setting it up, who seems to have had similar issues.
    http://www.ciscoblog.com/archives/2006/04/hsrp_vs_vrrp_vs.html
    >
    >Thanks a lot
    >Arvind

    --
    Regards

    - replace xyz with ntl
    Stephen, Nov 13, 2008
    #3
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. james
    Replies:
    1
    Views:
    993
    shope
    Oct 29, 2003
  2. Martin
    Replies:
    5
    Views:
    670
    Plato
    Oct 28, 2005
  3. Replies:
    2
    Views:
    399
    Thrill5
    Nov 1, 2006
  4. alexd

    Can VRRP do this?

    alexd, Dec 7, 2007, in forum: Cisco
    Replies:
    2
    Views:
    555
    alexd
    Dec 7, 2007
  5. verve13
    Replies:
    0
    Views:
    785
    verve13
    Sep 7, 2012
Loading...

Share This Page