Secondary VLAN IP address in same subnet as the primary IP - NO GO!

  • 0
  • 1
  • Question
  • Updated 2 months ago
  • Answered
Anyone have a clever way around this issue?

I am 90% migrated from an old Cisco environment. I had an issue where one of my vendors was running around setting the wrong gateway IP address on radiology equipment. To fix the issue on the Cisco stuff (many moons ago) I added that address as a secondary IP to the VLAN IP address.

Now - many years later I am trying to reproduce this on my Extreme environment but EXOS won't have it. It's telling me that my secondary IP address is in the same network as the primary IP address (which is true). But I sort of need that to work.

If anyone knows a neat trick around this - please share!  :-)
Photo of Steve Ballantyne

Steve Ballantyne

  • 5,806 Points 5k badge 2x thumb

Posted 11 months ago

  • 0
  • 1
Photo of Eric Burke

Eric Burke

  • 3,288 Points 3k badge 2x thumb
Not 100% sure, but you may need to add a new virtual router in order to accomplish this. My sense is that you'd then have to do the same for your upstream network(s) too so likely not ideal in your example...
Photo of Brandon Clay

Brandon Clay, Escalation Support Engineer

  • 13,486 Points 10k badge 2x thumb
I've seen VRRP used for this scenario. Just create a VRRP instance on the VLAN with the VIP set as the same address as the secondary IP on the Cisco.

Being the only VRRP router in the VLAN, it should always be master.

The only downside is periodic VRRP adverts, but you could turn up the advertisement interval to reduce that if you wanted to.
Photo of Steve Ballantyne

Steve Ballantyne

  • 5,806 Points 5k badge 2x thumb
Thanks! This is the kind of silly solution I was looking for. I will give this a shot.
Photo of Drew C.

Drew C., Community Manager

  • 40,206 Points 20k badge 2x thumb
That's disgustingly clever... I like it! haha
Photo of Steve Ballantyne

Steve Ballantyne

  • 5,806 Points 5k badge 2x thumb
Hello folks, because I love to reply to my own threads - and because I am just now getting around to moving this VLAN 10+ months later, I decided I would drop a few lines for future readers on how it went down.

Using Brandon's suggestion, I threw in a new VRRP and gave it an IP address. And that was all there really was to it. Easy!

Here is what the config looked like ...

create vlan "Radiology" tag 172
configure vlan Radiology add ports 48 tagged
configure vlan Radiology ipaddress
enable ipforwarding vlan Radiology
enable bootprelay vlan Radiology
create vrrp vlan 172 vrid 1
configure vrrp vlan 172 vrid 1 add
enable vrrp vlan 172 vrid 1
In this example - I gave a VLAN called "Radiology" and it has a VLAN tag of 172. The actual gateway IP (aka the VLAN IP) ends in .1, but .201 is what some devices were randomly configured to use.

Thanks again Brandon!