VRRP Master in both BD

  • 0
  • 1
  • Problem
  • Updated 3 years ago
  • Solved
Hi everybody!

We have a two Blackdiamond and i need create a new intance VRRP, the cli below:

Blackdiamond 1

++++++++++++++++++++++++++++++++++++++++++++++++++++++++
create vrrp vlan Ext_F5 vrid 70
configure vrrp "Ext_F5" vrid 70 version v2
configure vrrp vlan Ext_F5 vrid 70 priority 130
configure vrrp vlan Server_F5 vrid 70 add 10.120.30.1
enable vrrp vlan Ext_F5 vrid 70

++++++++++++++++++++++++++++++++++++++++++++++++++++++++
create vrrp vlan Server_F5 vrid 70
configure vrrp "Server_F5" vrid 70 version v2
configure vrrp vlan Server_F5 vrid 70 priority 130
configure vrrp vlan Ext_F5 vrid 70 add 10.120.110.1
enable vrrp vlan Server_F5 vrid 70

++++++++++++++++++++++++++++++++++++++++++++++++++++++++
create vrrp vlan Admin_F5 vrid 70
configure vrrp "Admin_F5" vrid 70 version v2
configure vrrp vlan Admin_F5 vrid 70 priority 130
configure vrrp vlan Admin_F5 vrid 70 add 10.120.160.1
enable vrrp vlan Admin_F5 vrid 70


Blackdiamond 2

++++++++++++++++++++++++++++++++++++++++++++++++++++++++
create vrrp vlan Ext_F5 vrid 70
configure vrrp "Ext_F5" vrid 70 version v2
configure vrrp vlan Ext_F5 vrid 70 priority 120
configure vrrp vlan Server_F5 vrid 70 add 10.120.30.1
enable vrrp vlan Ext_F5 vrid 70

++++++++++++++++++++++++++++++++++++++++++++++++++++++++
create vrrp vlan Server_F5 vrid 70
configure vrrp "Server_F5" vrid 70 version v2
configure vrrp vlan Server_F5 vrid 70 priority 120
configure vrrp vlan Ext_F5 vrid 70 add 10.120.110.1
enable vrrp vlan Server_F5 vrid 70

++++++++++++++++++++++++++++++++++++++++++++++++++++++++
create vrrp vlan Admin_F5 vrid 70
configure vrrp "Admin_F5" vrid 70 version v2
configure vrrp vlan Admin_F5 vrid 70 priority 120
configure vrrp vlan Admin_F5 vrid 70 add 10.120.160.1
enable vrrp vlan Admin_F5 vrid 70


when i enable all vrrp instances, this is result:

TRI_B1_I11_CORE_1.2 # show vrrp   VLAN Name VRID Pri Virtual IP Addr   State  Master Mac Address  TP/TR/TV/P/T
 SALASER(En) 0002 140 120.11.1.1         MSTR  00:00:5e:00:01:02    0  0  0 Y 1
 New-Ser(En) 0011 140 10.120.11.1        MSTR  00:00:5e:00:01:0b    0  0  0 Y 1
 MGMT_FW(En) 0006 140 197.1.1.229        MSTR  00:00:5e:00:01:06    0  0  0 Y 1
  SOA_SW(En) 0020 200 10.120.20.1        MSTR  00:00:5e:00:01:14    0  0  0 Y 1
 F5_Serv(En) 0021 200 10.120.100.1       MSTR  00:00:5e:00:01:15    0  0  0 Y 1
  Ext_F5(En) 0070 130 10.120.110.1       MSTR  00:00:5e:00:01:46    0  0  0 Y 1
 Server_(En) 0070 130 10.120.30.1        MSTR  00:00:5e:00:01:46    0  0  0 Y 1
 Admin_F(En) 0070 130 10.120.160.1       MSTR  00:00:5e:00:01:46    0  0  0 Y 1

TRI_B1_I11_CORE_BD_2.4 # show vrrp                      Virtual                 Master
   VLAN Name VRID Pri IP Address        State MAC Address       TP/TR/TV/P/T
 SALASER(En) 0002 130 120.11.1.1         BKUP 00:00:5e:00:01:02  0  0  0 Y 1
 New-Ser(En) 0011 130 10.120.11.1        BKUP 00:00:5e:00:01:0b  0  0  0 Y 1
 MGMT_FW(En) 0006 120 197.1.1.229        BKUP 00:00:5e:00:01:06  0  0  0 Y 1
  SOA_SW(En) 0020 150 10.120.20.1        BKUP 00:00:5e:00:01:14  0  0  0 Y 1
 F5_Serv(En) 0021 150 10.120.100.1       BKUP 00:00:5e:00:01:15  0  0  0 Y 1
  Ext_F5(En) 0070 120 10.120.110.1       MSTR 00:00:5e:00:01:46  0  0  0 Y 1
 Server_(En) 0070 120 10.120.30.1        MSTR 00:00:5e:00:01:46  0  0  0 Y 1
 Admin_F(En) 0070 120 10.120.160.1       MSTR 00:00:5e:00:01:46  0  0  0 Y 1

  En-Enabled, Ds-Disabled, Pri-Priority, T-Advert Timer, P-Preempt
  TP-Tracked Pings, TR-Tracked Routes, TV-Tracked VLANs

the tree vlan  Ext_F5 , Server_, Admin_F is master in both core,


please help me!
Photo of Oscar Javier Rojas

Oscar Javier Rojas

  • 172 Points 100 badge 2x thumb

Posted 3 years ago

  • 0
  • 1
Photo of Patrick Voss

Patrick Voss, Alum

  • 11,674 Points 10k badge 2x thumb
Hi Oscar,

VRRP uses multicast to communicate with its peer. Can you make sure there is a L2 path between both the cores? Basically the intended backup is not receiving the adverts form the intended master so it thinks it is down and comes up as master. The logs on both the cores might help with troubleshooting this as well.
Photo of Roberto F.

Roberto F.

  • 690 Points 500 badge 2x thumb
If you can set up diffrent vrid for each vlan
Photo of Oscar Javier Rojas

Oscar Javier Rojas

  • 172 Points 100 badge 2x thumb
In L2 its fine, i have other instances and works fine. The log not describe a lot, only:

VRRP BCKP
and change status
VRRP MSTR

The VRID 70 in this vlan can to has any issue?
Photo of Henrique

Henrique, Employee

  • 10,342 Points 10k badge 2x thumb
Hi Oscar,

As mentioned by Patrick, you have to check if there is L2 communication between both BDs. If you are using a direct link between the BDs, please check if that port is added to all 3 vlans: Ext_F5, Server_ and Admin_F.

Those 3 vlans must communicate to each other through mcast so they can start the election process. If there is no communication caused by wrong config, acl, etc then both Core switches will take over as Master.
Photo of Patrick Voss

Patrick Voss, Alum

  • 11,674 Points 10k badge 2x thumb
Hi Oscar,

Considering these appear to be different VLANs it would be good to check and see if the L2 path is there. Each instance has to be treated separately and starting with L2 is a good step so we don't end up chasing our tails.

Are these BDs directly connected? or do they go through a switch(es) to get to the BD? A topology might help us look into this.
(Edited)
Photo of Oscar Javier Rojas

Oscar Javier Rojas

  • 172 Points 100 badge 2x thumb
Hi, this is a topology.

Blackdiamond have different versions of software, this can cause a problem?
Photo of Balaji

Balaji, Employee

  • 776 Points 500 badge 2x thumb
Oscar, 

BDs running different version will not cause this. 

Could you post the below outputs from both the BDs?

1) show vlan admin_f
2) show edp ports all
(Edited)
Photo of Ole

Ole

  • 330 Points 250 badge 2x thumb
Hi, are the vlans configured on the Core interconnection?
Photo of Oscar Javier Rojas

Oscar Javier Rojas

  • 172 Points 100 badge 2x thumb
Hi everybody, 

We make a dashboard and many ports not include in vrrp vlan. 

tonight we'll add ports and tell you the result.
thank you for your help