How To Design network With 2 Routers and 2 Switches With VRRP

Iloveyou · ‎08-30-2023

I have seen designs in which VRRP was running but there were 2 routers and one L2 switch. (with 2 separate ISP of course)

How is it possible to change it such that there are 2 routers and 2 switches using the VRRP.

More information given will be good.

balaji.bandi · ‎08-30-2023

2 Switches stacked or in Standalone Layer2 ?

what is the Goal for VRRP here ? your ISP router work independetly - so personally other than Gateway for inside Lan network for VRRP or HSRP.

You need to Look Active /Active and Active standby model for your ISP usage - so you can use both the links same time and fail over.

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Joseph W. Doherty · ‎08-30-2023

The two L2 switches only need to share the same L2 broadcast domain.

E.g. R1 <vlan 5> SW1 <vlan 5> SW2 <vlan 5> R2

Iloveyou · ‎08-30-2023

thanks i get it

Leo Laohoo · ‎08-30-2023

In our network, "critical" sites have HSRP. Non-critical sites use VSS.

Iloveyou · ‎08-31-2023

VSS is stacking. It is also a form of redundancy. So why is it used for non critical sites?

Why not use both VRRP and VSS?

Joseph W. Doherty · ‎08-31-2023

Using both a FHRP and VSS, if supported, is like wearing a belt and suspenders.

As to which to use based on how critical that part of a network is, Leo's answer might mention VSS (software) might be a single point of failure, is likely more complex software increasing odds it may break, and/or hasn't had decades of widespread usage.

Consider what might be better for hardware redundancy, one chassis with redundant components or two chassis with redundant components.

In the forgoing what hardware component isn't redundant? A. The chassis itself.

So, what about the OS? Two totally independent IOSs vs. one VSS?

One company I worked at even considered not using the same hardware in a pair. E.g. rather than a pair of 6500's or 4500's, possibly only use a 6500 and 4500 or even a Cisco device and a brand "X' device. This mostly to hopefully avoid one security flaw being on a pair of network devices.

Leo Laohoo · ‎08-31-2023

@Iloveyou wrote:
So why is it used for non critical sites?

Because when VSS goes wrong, it will go with a very big bang.

We once had a non-critical site (VSS) and something caused the VSS pair to go into split brain scenario. It was difficult to fix because we had to, literally, pull the plug.