Cisco Systems VRRP : I am unable to ping the virtual address, I can only ping the backup addresses.
Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
VRRP : I am unable to ping the virtual address, I can only ping the backup addresses. ATM 11-12-08
Posted by ATM on November 12, 2008, 3:16 pm
Please log in for more thread options


I have two vlans and two VRRPs on a layer2/3 switch.

Switch 1 |
Switch 2
---------------------------------------------------------------------|----------------------------------------------------------------------
Master VRRP 1
IP Backup

vlan 11 ] 10.199.9.32 --------| 10.199.9.50 | ----------------|
10.199.9.50 |------10.199.9.33 [ Vlan 21

Master VRRP 2 IP

vlan 12 ] 10.199.77.32 --------| 10.199.77.50 |--------------|
10.199.77.50|-----10.199.77.33 [ Vlan 22

---------------------------------------------------------------------|----------------------------------------------------------------------

I can consistently ping only the back up vlan ip ( 10.199.9.33 or
10.199.77.33 )
But I can never ping the virtual IPs ( 10.199.9.50 or 10.199.77.50)
and the IPs of the master ( 10.199.9.32/10.199.77.32)

All interfaces and VRRP interconnects are untagged mode.
Am i missing something ?

Thanks a lot
Arvind

Posted by Trendkill on November 13, 2008, 7:14 am
Please log in for more thread options
> I have two vlans and two VRRPs on a layer2/3 switch.
>
> Switch 1 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0|
> Switch 2
> ---------------------------------------------------------------------|---=
-------------------------------------------------------------------
> Master =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 VRRP 1
> IP =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 Backup
>
> vlan 11 ] 10.199.9.32 --------| 10.199.9.50 | ----------------|
> 10.199.9.50 |------10.199.9.33 [ Vlan 21
>
> Master =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0VRRP 2 IP
>
> vlan 12 ] 10.199.77.32 --------| 10.199.77.50 |--------------|
> 10.199.77.50|-----10.199.77.33 [ Vlan 22
>
> ---------------------------------------------------------------------|---=
-------------------------------------------------------------------
>
> I can consistently ping only the back up vlan ip ( 10.199.9.33 or
> 10.199.77.33 )
> But I can never ping the virtual IPs ( 10.199.9.50 or 10.199.77.50)
> and the IPs of the master ( 10.199.9.32/10.199.77.32)
>
> All interfaces and VRRP interconnects are untagged mode.
> Am i missing something ?
>
> Thanks a lot
> Arvind

I can't speak to this directly, but here is a related link.

http://www.ciscoblog.com/archives/2006/04/hsrp_vs_vrrp_vs.html
Do a control-F for 'through' and you'll see some posts about pings
failing to group IP after failover.

I would recommend doing some show arps and show cam/macs on the
network gear to see exactly what is going on.


Posted by Stephen on November 13, 2008, 4:50 pm
Please log in for more thread options
wrote:

>
>
>I have two vlans and two VRRPs on a layer2/3 switch.
>
>Switch 1 |
>Switch 2
>---------------------------------------------------------------------|----------------------------------------------------------------------
>Master VRRP 1
>IP Backup
>
>vlan 11 ] 10.199.9.32 --------| 10.199.9.50 | ----------------|
>10.199.9.50 |------10.199.9.33 [ Vlan 21
>
>Master VRRP 2 IP
>
>vlan 12 ] 10.199.77.32 --------| 10.199.77.50 |--------------|
>10.199.77.50|-----10.199.77.33 [ Vlan 22
>
>---------------------------------------------------------------------|----------------------------------------------------------------------
>
>I can consistently ping only the back up vlan ip ( 10.199.9.33 or
>10.199.77.33 )
>But I can never ping the virtual IPs ( 10.199.9.50 or 10.199.77.50)
>and the IPs of the master ( 10.199.9.32/10.199.77.32)

VRRP standard explicitly says the software should do wierd things for
the "master" IP address which dont apply to backup, so you may be
stumbling over this.

the issue was about the owner MAC address and ping responses (only a
master will reply, which was something about knowing when backup is
active) - sounds like the opposite of what you are getting.

it was much easier for diags if each physical interface has its own
address and the VRRP floating address(es) are separate (and your NMS
may prefer this as well for consistent polling).

1 way around this on other systems (Bay / Nortel routers) was to use 2
different backup priorities and not configure a master at all.
>
>All interfaces and VRRP interconnects are untagged mode.
>Am i missing something ?

note from someone setting it up, who seems to have had similar issues.
http://www.ciscoblog.com/archives/2006/04/hsrp_vs_vrrp_vs.html
>
>Thanks a lot
>Arvind
--
Regards

stephen_hope@xyzworld.com - replace xyz with ntl

Similar ThreadsPosted
VRRP : I am unable to ping the virtual address, I can only ping the backup addresses. November 12, 2008, 3:16 pm
PIX 506e VPN connected but unable to ping between sites April 7, 2006, 7:39 am
Frame Relay Lab - Unable to ping - Newbie October 1, 2006, 10:02 pm
unable to ping directly connected interface ( Mind Bender) September 18, 2007, 3:22 pm
Can connect to PIX 501 with VPN client and ping internal addresses but some issues October 28, 2008, 8:33 am
Is It Possible to Ping Static NAT Address? August 23, 2006, 3:07 pm
Can't ping loopback address October 16, 2007, 11:37 pm
PING to inside address goes thru translation and timesout August 22, 2005, 1:44 pm
Can't Ping from Serial0, but E0 works great - One address only? October 9, 2008, 2:06 pm
initial config of 3560, set config, cant ping~~nv_done: unable to open "flash:/C:\new\config.new February 5, 2008, 11:39 pm
unable to "lock" mac address March 20, 2006, 10:42 am
ping August 4, 2005, 3:08 pm
Ping across VPN April 10, 2006, 11:06 pm
Why doesn't this NAT ping? July 2, 2007, 6:22 pm
ISDN PRI to BRI can't ping July 12, 2005, 11:10 pm
Residential Cabling Guide

Home Cabling Guide

Finally, an instantly downloadable book that saves you thousands in home improvement dollars! Enjoy living in 21st century technology-advanced home while increasing its selling value and competitive advantage on the real estate market. Whether your cabling is for home office or high-tech leisure, you can wire your home yourself or learn "wirish" to speak with your cabling contractors in their language!

Learn More