topic RE: Telnet problems on VRRP virtual address in ExtremeSwitching (EXOS/Switch Engine)

Telnet problems on VRRP virtual address

Fauriant_Trista — Mon, 04 Apr 2016 14:18:00 GMT

I'm currently trying to take remote access (via telnet or SSH) on a virtual VRRP ip address that is shared by two x670v switches and it doesn't work.

To figure out the problem, I've also tried to access via physical address on the same LAN that is shared by the switches, and, of course, no problem.
The VRRP virtual IP address is also well configured (One switch Master and the second switch is Backup).

Somebody knows why it's not possible to take remote access on the master of the VRRP Virtual address or knows a work-around ?

Thanks in advance.

RE: Telnet problems on VRRP virtual address

Zdeněk_Pala — Mon, 04 Apr 2016 14:22:00 GMT

If I am correct the VRRP standard does not allow the answer for services (including telnet) on virtual IP. The exclusion is if it is owner of the IP address.

RE: Telnet problems on VRRP virtual address

Fauriant_Trista — Mon, 04 Apr 2016 17:17:00 GMT

Are you sure of that ? Because on other manufacturers, VRRP implementation allows to make connections to the management plane of the Master of the Virtual address in pointing on the Virtual IP address.

And this Virtual has not to be part of the physical addresses of the Master router (as VRRP allows).

Detail: I'm using currently VRRPv2

RE: Telnet problems on VRRP virtual address

Drew_C — Mon, 04 Apr 2016 19:05:00 GMT

I'm pretty sure that Zdenek is correct, but I can't find it in the RFC. It could be worded in such a way that I'm missing it. This behavior seems common across other vendors.

I believe the only way to make this work is to enable fabric routing mode, which has its own caveats.
http://documentation.extremenetworks.com/exos/EXOS_21_1/VRRP/c_fabric-routing-functionality.shtml

Edit: See Kevin's response below 

RE: Telnet problems on VRRP virtual address

Kevin_Kim — Mon, 04 Apr 2016 21:04:00 GMT

Please turn on accept mode for VRRP. It's set to off by default.

# configure vrrp vlan "v1100" vrid 10 accept-mode
off Do not accept packets addressed to the VRRP Virtual IP.
on Accept packets addressed to the VRRP Virtual IP.

RE: Telnet problems on VRRP virtual address

Fauriant_Trista — Tue, 05 Apr 2016 12:31:00 GMT

Thanks you, it's exactly what I was looking for.