Configure VRRP IP for the Secondary IP Address

[gohcw]

I’m currently migrating from a Cisco Catalyst 3850 Layer 3 core switch to a Cisco Nexus N9K using vPC. On the Catalyst, Interface VLAN 1622 is configured with multiple IP addresses on a single SVI, as shown below:

192.9.203.253
192.9.209.253 secondary
192.9.202.253 secondary
192.9.204.253 secondary
192.9.201.253 secondary
192.9.208.253 secondary
192.9.205.253 secondary
192.9.207.253 secondary

For the migration to the Nexus N9K, can I configure multiple VRRP virtual IP addresses on the same VLAN interface to match this setup? If not, what’s the recommended best practice for handling multiple gateway addresses during the migration?

Thanks in advance for your guidance!

[balaji.bandi]

Cat 3850 dual switches, or on the single switch you have dual ip configured ? both on same subnet primary and secondary IP ? or different IP range ?

VRRP is used for redundancy with multiple device, configuring on single device with secondary IP not solve the redundancy,

If you have dual switches then  You can configure same way as VRRP in nexus, make sure you have Layer 2 link separate from the vPC link between nexus to work as expected.

check configuration guide :

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/6-x/unicast/configuration/guide/l3_cli_nxos/l3_vrrp.html

[gohcw]

Hi,

Yes, on the current single Catalyst switch, VLAN 1622 has multiple IP addresses configured. For the migration to the two Cisco Nexus N9K core switches (core-sw1 and core-sw2), we plan to replicate this setup by assigning multiple IP addresses on each Nexus device.

Our concern is whether VRRP can support multiple virtual IP addresses on the same VLAN interface, or if there’s an alternative best practice for handling this scenario.

[balaji.bandi]

i have not tested but as per the document it support :

VRRP Benefits

Multiple IP addresses—Allows you to manage multiple IP addresses, including secondary IP
addresses. If you have multiple subnets configured on an Ethernet interface, you can configure
VRRP on each subnet.

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/9-x/unicast/configuration/guide/l3_cli_nxos/l3_vrrp.pdf

[MHM Cisco World]

Why you need this secondary IP?

MHM

[gohcw]

As I am doing a migration from the Cisco Catalyst 3850, and all these IP addresses are inside the interface VLAN. Hence, from the migration purpose I will copy to the Cisco Nexus N9K as well.

[MHM Cisco World]

Why you use multi secondary under same SVI? Why this design?

Why yoh not config one SVI for each subnet?

Are you sure you run vrrp or hsrp?

MHM