11-19-2008 01:49 AM
Hi, I have configured the VRRP on CSS properly and it had worked previously without any problem. The only change is i have moved the box from the old location to the new and have change the vlan and ip address rest everything is same.
Now the problem is both CSS are becoming Master kindly some one help me if i have to change anything back to work properly.
Output from the CSS-
CSS A# show virtual-routers
Virrtual-Routers:
Interface Address: 1.1.1.1 VRID: 2
Priority: 120 Config. Priority: 110
State: Master Master IP: 1.1.1.1
State Changes: 10 Last Change: 18/11/2008 00:31:21
Preempt: True Last Fail Reason: IF Down
CSS B# show virtual-routers
Virtual-Routers:
Interface Address: 1.1.1.2 VRID: 2
Priority: 80 Config. Priority: 90
State: Master Master IP: 1.1.1.2
State Changes: 8 Last Change: 18/11/2008 01:18:18
Preempt: False Last Fail Reason: IF Down
Anyhelp would be appriciated.
Thanks
Neha
Solved! Go to Solution.
12-02-2008 06:38 AM
Hi neha,
Plz find the procedure below for your query:-
After disabling the access-list reconfigure the access-list as mentioned below :-
acl 01
clause 10 permit any x.x.x.x x.x.x.x destination any sourcegroup NATvip
clause 20 permit any any destination any
apply circuit-(VLANabc)
This should solve your issue.
Plz rate if this help.
Regards
Shariff
11-19-2008 03:21 AM
they obvisouly don't see each other.
Try to do a 'acl disable' in config mode and see if that solves the issue.
You then know your acl are blocking vrrp traffic.
If that does not help, take a sniffer trace on the vlan and see if there is any vrrp traffic going in and out of each CSS.
You may have a switch blocking this traffic.
Gilles.
11-19-2008 05:12 AM
Hi Giles,
Thanks for your prompt response.
but this was working fine before without any issues. Anyway let me try disabling the accesslist and update you.
reg
neha
11-19-2008 07:07 AM
Giles,
I am disabling the access list, Please could you let me know how we permit vrrp traffic thru the ACLs, because this ACLs are needed for natting groups.
12-02-2008 06:38 AM
Hi neha,
Plz find the procedure below for your query:-
After disabling the access-list reconfigure the access-list as mentioned below :-
acl 01
clause 10 permit any x.x.x.x x.x.x.x destination any sourcegroup NATvip
clause 20 permit any any destination any
apply circuit-(VLANabc)
This should solve your issue.
Plz rate if this help.
Regards
Shariff
12-03-2008 05:46 AM
Hi Inayath,
Thanks for the info this works as expected.
Appriciate your help.
Regards
Neha
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide