Header Only - DO NOT REMOVE - Extreme Networks

Telnet problems on VRRP virtual address

Userlevel 1
I'm currently trying to take remote access (via telnet or SSH) on a virtual VRRP ip address that is shared by two x670v switches and it doesn't work.

To figure out the problem, I've also tried to access via physical address on the same LAN that is shared by the switches, and, of course, no problem.
The VRRP virtual IP address is also well configured (One switch Master and the second switch is Backup).

Somebody knows why it's not possible to take remote access on the master of the VRRP Virtual address or knows a work-around ?

Thanks in advance.

5 replies

Userlevel 6
If I am correct the VRRP standard does not allow the answer for services (including telnet) on virtual IP. The exclusion is if it is owner of the IP address.
Userlevel 1
Are you sure of that ? Because on other manufacturers, VRRP implementation allows to make connections to the management plane of the Master of the Virtual address in pointing on the Virtual IP address.

And this Virtual has not to be part of the physical addresses of the Master router (as VRRP allows).

Detail: I'm using currently VRRPv2
Userlevel 7
I'm pretty sure that Zdenek is correct, but I can't find it in the RFC. It could be worded in such a way that I'm missing it. This behavior seems common across other vendors.

I believe the only way to make this work is to enable fabric routing mode, which has its own caveats.

Edit: See Kevin's response below 🙂
Userlevel 4
Please turn on accept mode for VRRP. It's set to off by default.

# configure vrrp vlan "v1100" vrid 10 accept-mode
off Do not accept packets addressed to the VRRP Virtual IP.
on Accept packets addressed to the VRRP Virtual IP.
Userlevel 1
Thanks you, it's exactly what I was looking for.