CSS 11151 VIP Redundancy - Link State Redundancy/Keepalive

[regular123]

I have a pair of CSS 11151 each connected to a pair of cross-connected 3550 switches,I've configured VIP & Interface Redundacy,either VLAN1 interface or VLAN2 interface is shut down will cause the virtual router switchover. Recently I met some problem with CSS switchover when just one VLAN1 interface shutdown, and I was told that "type redundancy-up" should not work with VIP redundant mode, so I am trying to configure a critical service with a keepalive ap-kal-pinglist and ping all the circuit vlan's ip address on the CSS itself. but I am still confuse with some aspects.

1. Should I configure two separate virtual router for two circuit VLANs?

2. How to configure the service IP address? Because two 3550 have separate vlan ip address, and did not configured HSRP.

3. The script on my CSS is different with document, can I edit a new ap-kal-pinglist script to replace it?

Here's my config...

!************ INTERFACE *********************

interface 2

bridge vlan 2

!**************** CIRCUIT **************************

circuit VLAN1

ip address 10.0.2.33 255.255.255.128

ip virtual-router 1 priority 100

ip redundant-interface 1 10.0.2.29

ip critical-service 1 sw1-up-down

ip critical-service 1 sw2-up-down

circuit VLAN2

ip address 10.0.2.133 255.255.255.240

ip virtual-router 1 priority 100

ip redundant-interface 1 10.0.2.129

ip redundant-vip 1 10.0.2.132

ip critical-service 1 gateway

!************************** SERVICE

service gateway

ip address 10.0.2.130

type redundancy-up

active

service sw1-up-down

ip address 10.0.2.30

type redundancy-up

active

service sw2-up-down

ip address 10.0.2.31

type redundancy-up

active

[Gilles Dufour]

I would recommend an upgrade to version 7.40 in order to get the 'reporter' functionality.

http://www.cisco.com/en/US/products/hw/contnetw/ps792/products_command_reference_chapter09186a008028fe6c.html

A reporter let you define which ports you want to monitor and when to failover [all ports down or any port down].

If you can't use 7.40, here is an answer to your question :

1. it does not matter. The vrid is used to differentiate other instances of VRRP that could exist on the same VLAN.

2. if you plan to use an ap-kal-pinglist, the service ip address really does not matter. The keepalive will use the ip addresses that you will pass to the ap-kal-pinglist function

3. you can modify the script and upload it back to the CSS. However, I would recommend using a different name in case you need the original script in the future.

Regards,

Gilles.

[regular123]

Unfortunated, the version is 5.00 Build 605, and can not upgrade to 7.4.

But I am confuse on the failover happened with the previous configuration, both VLAN states will switchover.

Thanks and regards.