Cisco 887VA - VRRP LAN setup (vlan, group, virtual ip)

[mozmarr124]

Hi

I have a Cisco 887VAM and a Cisco 2960 switch providing LAN and DSL connectivity. This is replicated for redundancy and all 4 devices connected in a type of ring topology.

The cisco 887's contain a 4 port switch type port module. There are 7 VLANs on here.

Im confused between VRRP groups and Virtual router IP's in this sort of setup.

Each VLAN has an IP address and this is also the address of its virtual router IP.  Can someone shed some light on how this works?

I thought VRRP ip address was either the address of the router, or a shared ip address?

Also an explanation of the groups in this context, is each router a group?

Does Vlan 5 setup look correct for vrrp purpose?

This is how the vrrp config looks:

Router 1:

#show vrrp
Vlan1 - Group 6
State is Master
Virtual IP address is 10.164.108.62
Virtual MAC address is 0000.5e00.0106
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 255
Master Router is 10.164.108.62 (local), priority is 255
Master Advertisement interval is 1.000 sec
Master Down interval is 3.003 sec

Vlan2 - Group 6
State is Master
Virtual IP address is 10.164.108.126
Virtual MAC address is 0000.5e00.0106
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 255
Master Router is 10.164.108.126 (local), priority is 255
Master Advertisement interval is 1.000 sec
Master Down interval is 3.003 sec

Vlan3 - Group 6
State is Master
Virtual IP address is 10.164.108.142
Virtual MAC address is 0000.5e00.0106
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 255
Master Router is 10.164.108.142 (local), priority is 255
Master Advertisement interval is 1.000 sec
Master Down interval is 3.003 sec

Vlan6 - Group 6
State is Master
Virtual IP address is 10.164.108.254
Virtual MAC address is 0000.5e00.0106
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 255
Master Router is 10.164.108.254 (local), priority is 255
Master Advertisement interval is 1.000 sec
Master Down interval is 3.003 sec

Vlan8 - Group 6
State is Master
Virtual IP address is 10.164.108.158
Virtual MAC address is 0000.5e00.0106
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 255
Master Router is 10.164.108.158 (local), priority is 255
Master Advertisement interval is 1.000 sec
Master Down interval is 3.003 sec

Vlan9 - Group 6
State is Master
Virtual IP address is 10.164.108.190
Virtual MAC address is 0000.5e00.0106
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 255
Master Router is 10.164.108.190 (local), priority is 255
Master Advertisement interval is 1.000 sec
Master Down interval is 3.003 sec

Vlan5 - Group 5
State is Master
Virtual IP address is 10.210.66.14
Virtual MAC address is 0000.5e00.0105
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 100
Master Router is 10.210.66.13 (local), priority is 100
Master Advertisement interval is 1.000 sec
Master Down interval is 3.609 sec

R1# show vrrp brie
Interface Grp Pri Time Own Pre State Master addr Group addr
Vl1 6 255 3003 Y Y Master 10.164.108.62 10.164.108.62
Vl2 6 255 3003 Y Y Master 10.164.108.126 10.164.108.126
Vl3 6 255 3003 Y Y Master 10.164.108.142 10.164.108.142
Vl6 6 255 3003 Y Y Master 10.164.108.254 10.164.108.254
Vl8 6 255 3003 Y Y Master 10.164.108.158 10.164.108.158
Vl9 6 255 3003 Y Y Master 10.164.108.190 10.164.108.190
Vl5 5 100 3609 Y Master 10.210.66.13 10.210.66.14

Router 2:

show vrrp all
Vlan1 - Group 6
State is Backup
Virtual IP address is 10.164.108.62
Virtual MAC address is 0000.5e00.0106
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 100
Master Router is 10.164.108.62, priority is 255
Master Advertisement interval is 1.000 sec
Master Down interval is 3.609 sec (expires in 3.025 sec)

Vlan2 - Group 6
State is Backup
Virtual IP address is 10.164.108.126
Virtual MAC address is 0000.5e00.0106
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 100
Master Router is 10.164.108.126, priority is 255
Master Advertisement interval is 1.000 sec
Master Down interval is 3.609 sec (expires in 3.573 sec)

Vlan3 - Group 6
State is Backup
Virtual IP address is 10.164.108.142
Virtual MAC address is 0000.5e00.0106
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 100
Master Router is 10.164.108.142, priority is 255
Master Advertisement interval is 1.000 sec
Master Down interval is 3.609 sec (expires in 2.749 sec)

Vlan5 - Group 5
State is Master
Virtual IP address is 10.210.66.14
Virtual MAC address is 0000.5e00.0105
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 100
Master Router is 10.210.66.13 (local), priority is 100
Master Advertisement interval is 1.000 sec
Master Down interval is 3.609 sec

Vlan6 - Group 6
State is Backup
Virtual IP address is 10.164.108.254
Virtual MAC address is 0000.5e00.0106
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 100
Master Router is 10.164.108.254, priority is 255
Master Advertisement interval is 1.000 sec
Master Down interval is 3.609 sec (expires in 3.025 sec)

Vlan8 - Group 6
State is Backup
Virtual IP address is 10.164.108.158
Virtual MAC address is 0000.5e00.0106
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 100
Master Router is 10.164.108.158, priority is 255
Master Advertisement interval is 1.000 sec
Master Down interval is 3.609 sec (expires in 3.437 sec)

Vlan9 - Group 6
State is Backup
Virtual IP address is 10.164.108.190
Virtual MAC address is 0000.5e00.0106
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 100
Master Router is 10.164.108.190, priority is 255
Master Advertisement interval is 1.000 sec
Master Down interval is 3.609 sec (expires in 3.585 sec)

show vrrp brief
Interface Grp Pri Time Own Pre State Master addr Group addr
Vl1 6 100 3609 Y Backup 10.164.108.62 10.164.108.62
Vl2 6 100 3609 Y Backup 10.164.108.126 10.164.108.126
Vl3 6 100 3609 Y Backup 10.164.108.142 10.164.108.142
Vl5 5 100 3609 Y Master 10.210.66.13 10.210.66.14
Vl6 6 100 3609 Y Backup 10.164.108.254 10.164.108.254
Vl8 6 100 3609 Y Backup 10.164.108.158 10.164.108.158
Vl9 6 100 3609 Y Backup 10.164.108.190 10.164.108.190

[Georg Pauwen]

Hello,

the VRRP group is just a random number. You can use the same number on different VLANs.

The virtual router IP is the same as the master router IP, which is the same as the physical IP address of the master router (VLAN) interface...

Does that make sense ?

[mozmarr124]

Hi George thanks. I was just hoping for a clean obvious master / backup virtual ip one for each router but there are at least seven, each Vlan has a virtual ip then. I’ll ha e to figure out how this works in my head. Vlans not my strongest point and when they are part of the router as a module I’m  even worse trying to work it out 

[paul driver]

Hello

Each of these vlans on each router will have a virtual ip which will be the default-gateway for the clients for group/vlan.(just like hrsp)

The Primary(state master) and multiple backups (state backup) are just the same as in the other FHRP's set by group priority or highest ip address of the L3 (routed) interlace.

You do get virtual ip for one router, But just in this case its a virtual ip for each vlan.

You would see it it even clearer from the client perspective. -- if you ping something off the vlan from the client it will create an arp entry on the client with actual ip address of the L3 interface it goes through and of the virtual mac address of vrrrp group its in.

As for vrrp group 5 ( vlan5) you are correct in saying something doesn't look right as both are stating its the master and the reason for that looks like they have either the wrong virtual ip configured - or the correct vip but a possible connectivity issue between each other (wrong subnet, switch-port assignment etc?)

Lastly - The master and the supposedly backup also have the same group priority values which isn't a problem as I stated before the highest ip address will take precedence but I would personally be more deterministic and set the priority values.

res
Paul

[mozmarr124]

Great stuff thanks Paul

[Predrag Jovic]

Small correction - having the same IP address on physical and virtual interface is the most deterministic that you can get with VRRP (as it is configured now). That interface will always become Master - interface will get priority 255, manually max priority that can be assigned to interface is 254.

[paul driver]

Hello
I assume your mean for the vrrp master creation only? as the backup rtrs just require the same version vip (which would so happen to the physical and vip of its master)

Res
Paul

[Predrag Jovic]

Yes, master creation only.

VRRP group and virtual ip address always need to match. In the case that VIP or VRRP group do not match both routers will claim that they are masters.