Problem with VRRP MGMT second Gateway

[mnice]

hello guys,

I hope you're well.

I've set up VRRP on two C9500s, it works but I have a random problem accessing the second C9500, sometimes it's accessible, sometimes it's not.

Regards.

[MHM Cisco World]

Access use real interface IP not VIP.

Try this and check

MHM

[mnice]

Hello MHM,

Thank you for your return.

For management I use the vla x interface, which is the default gateway and also the virtual interface for VRRP

So you're suggesting I create another vlan dedicated to MGMT? or use the chassis outofband?

SW01 :

interface Vlan X
description VLAN_ADMIN
ip address 192.168.1.1 255.255.255.0 ---- used for MGMT
vrrp 1 address-family ipv4
description VRRP group
priority 120
preempt delay minimum 60
address 192.168.1.1 primary

SW02:

interface Vlan X
description VLAN_ADMIN
ip address 192.168.1.2 255.255.255.0 ---- used for MGMT
vrrp 1 address-family ipv4
description VRRP group
priority 120
preempt delay minimum 60
address 192.168.1.1 primary

Regards.

[MHM Cisco World]

Yes use vlan SVI detect for mgmt. 

MHM

[mnice]

that's what I use the SVI interface, but it's in the VRRP.

Should I create a new SVI and not add it to VRRP to use it as MGMT ?

Regards.

[MHM Cisco World · Accepted solution]

Yes svi config without vrrp

MHM

[mnice]

OK bro I try and back to you.

Thx again.

Regards.

[balaji.bandi]

You need to provide some information, what IOS XE code running on both Cat 9500 ?how is this Cat 9500 connected each other (Hope they are not in SVL right ?)

 show vrrp config of both the devices

tell us from what IP address not reachable from what source IP address ?

[mnice]

Hello Balaji,

Thank you for your return.

1 - IOSXE = Version 17.03.05

2 - No SVL but VRRP

3 - The two devices are connected directly with two 40Gigabyte links

4 -  Show Vrrp SW01

show vrrp brief
Interface Grp A-F Pri Time Own Pre State Master addr/Group addr
VlX 1 IPv4 255 0 Y Y MASTER X.X.X.X(local) X.X.X.X
VlX 1 IPv4 255 0 Y Y MASTER X.X.X.X(local) X.X.X.X
VlXX 1 IPv4 255 0 Y Y MASTER X.X.X.X(local) X.X.X.X
VlXX 1 IPv4 255 0 Y Y MASTER X.X.X.X(local) X.X.X.X
VlXX 1 IPv4 255 0 Y Y MASTER X.X.X.X(local) X.X.X.X
VlXX 1 IPv4 255 0 Y Y MASTER X.X.X.X(local) X.X.X.X
VlXX 1 IPv4 255 0 Y Y MASTER X.X.X.X(local) X.X.X.X
VlXX 1 IPv4 255 0 Y Y MASTER X.X.X.X(local) X.X.X.X
VlXX 1 IPv4 255 0 Y Y MASTER X.X.X.X(local) X.X.X.X
VlXX 1 IPv4 255 0 Y Y MASTER X.X.X.X(local) X.X.X.X
VlXXX 1 IPv4 255 0 Y Y MASTER X.X.X.X(local) X.X.X.X
VlXXX 1 IPv4 255 0 Y Y MASTER X.X.X.X(local) X.X.X.X
VlXXX 1 IPv4 255 0 Y Y MASTER X.X.X.X(local) X.X.X.X
VlXXX 1 IPv4 255 0 Y Y MASTER X.X.X.X(local) X.X.X.X

4 - Show Vrrp SW02 (Not reachable)

5 - From LAN users (Another VLAN), but the address is sometimes reachable and sometimes not

Regards.

[balaji.bandi]

can you try ping 192.168.1.2 and try to connect.

how is these switches connected each other what port, where is your STP root bridge for the VLAN ?

where is users connectd ?

[mnice]

When I try to ping it's not reachable and also when I connect with SSH (Random)

The inter-connection is made

STP is activated on SW01 (vlan 1-4094) root primary
on SW02 (vlan 1-4094) root secondary

Users are connected on access switches which terminates either on another access switch or on the last acces switch connected to VRRP switch depending on the location.

Regards.