cancel
Showing results for 
Search instead for 
Did you mean: 

MLAG ISC VRRP asymmetric routing possible

MLAG ISC VRRP asymmetric routing possible

Justin_Metts
New Contributor
We are having a problem with the ISC between two x460s. VRRP is configured as ACTIVE/STANDBY. Everything looked fine initially during our tests as we only used ICMP. I configured separate "external" switches with IPs I could ping to test MLAG fail over on access switches connected to the two x460 core switches. The test dropped pings as expected and VRRP transitioned properly on failover. MLAG worked as well going to the access switches. Now the problem. TCP and UDP traffic does not establish any kind of connection. We connected the 460s to the internet and were able to ping 8.8.8.8, but cannot telnet to 53 nor http ports. Needless to say, no internet. When I disconnect the ISC between the two 460's, internet works flawlessly. I have no idea why this is and have not opened a ticket yet. I was plugged into the active VRRP switch when I tested, so the traffic shouldn't have been affected by the ISC in the first place. VRRP is balanced on the switches, half ACTIVE and half STANDBY. I figure if I change the configuration to ACTIVE/ACTIVE, then the traffic would flow correctly. I have followed the Extreme guides to configure the ISC and MLAG as well. That is how the switches are configured. Link that is similar to ours. Instead of the server, we have access switches. https://d2r1vs3d9006ap.cloudfront.net/s3_images/1108985/RackMultipart20141015-13973-hmz4ni-L3MLAG.png?1413378047 This image showed the traffic flowing over the ISC and I would not think this would be an issue.
20 REPLIES 20

That is a good point. The firewall should create the ARP with the virtual mac address for the VIP and should transition seamlessly from active to backup. I would think that the firewall would also block ICMP if this was the case as well. I would provide the config of the switch if I were at the site. Here is topology we are implementing. The workstation works on VLAN 3 with the ISC connections connected, but not VLAN20.

00ea85c2994042beb7ebcd862f47a8d8_RackMultipart20160111-30347-xjwbtj-CoreToInternet_inline.jpg

GTM-P2G8KFN