How do you remove VRRP from a pair of BD8806s?

  • 0
  • 1
  • Question
  • Updated 2 years ago
  • Answered
Hello guys, I hope you are all doing well!

We have a set of BD8806 chassis switches that are currently running VRRP.  I didn't set this up, it was way before my time.  However, I'm tasked with removing VRRP from both switches because we are not going to need it in our upcoming configuration.

What are the proper commands to remove VRRP from both switches and disable it completely?

P.S. - We have 22 VLANs on these 2 switches, since I'm new to VRRP, do we need to remove it for each VLAN?

Thanks,
Stan
Photo of Stanley Riley Jr.

Stanley Riley Jr.

  • 950 Points 500 badge 2x thumb

Posted 2 years ago

  • 0
  • 1
Photo of Henrique

Henrique, Employee

  • 10,342 Points 10k badge 2x thumb
Hi Stanley.

When disabling and unconfiguring VRRP you must be careful to avoid routing problems.

Since VRRP works with a VIP address, your network devices such as PCs, Servers, IP Phones, etc might be pointing to that VIP/Gateway. That means if you disable VRRP, right after that the routing would be performed by Vlan IP address instead of VIP IP. However, your network devices IP configuration will keep sending packets to VIP address which will no longer be available.

Depending on your Vlan IP/VRRP configuration you may need to do some other adjustments.

Will you be using just 1 BD for routing? Could you please provide more details?

Also, Is your VRRP configuration using 3 IPs (1 VIP + 2 vlan IPs) or just 2 IPs (1 vlan using the same VIP address + 1 vlan IP)?
Photo of Stanley Riley Jr.

Stanley Riley Jr.

  • 950 Points 500 badge 2x thumb
Henrique,

Thank you for your time and reply.

Actually, we will not be using either BD for routing going forward.  We are implementing Fortigates that will take over all of our Layer 3 concerns. 

I believe that the current configuration is using just 2 IPs.  Is there a way that I can confirm this?

Please excuse my noobness with VRRP.
Photo of Henrique

Henrique, Employee

  • 10,342 Points 10k badge 2x thumb
Hi Stanley,

The procedure to unconfigure/disable VRRP would be:

disable vrrp vlan <vlan_name> vrid <vrid_number>
delete vrrp vlan <vlan_name> vrid <vrid_number>
disable vrrp

I would start from the VRRP Backup node. To check the VRRP role just use the command "show vrrp".

Right after disabling VRRP on the Master node, your routing will stop working. Then just enable the Fortigate to route those networks (assuming it's already configured).

PS: Make sure the vlans are extended to your Fortigate prior to change routing roles.
Photo of OscarK

OscarK, ESE

  • 7,912 Points 5k badge 2x thumb
You could do disable vrrp globall, right after that the switch is not doing vrrp anymore. It will still do routing but only for the vlan IP address, not for the VRRP IP anymore. After that you can delete the vrid's for every vlan.

If you want to completely disable routing enter 'disable iprouting' on the switch.
Photo of Henrique

Henrique, Employee

  • 10,342 Points 10k badge 2x thumb
I guess that you meant "disable ipforwarding" :-)