12-17-2015 02:34 AM - edited 03-08-2019 03:08 AM
Hello,
I have a problem with VRRP advertissment : the TTL seems to be different than 255.
The backup 3850 can't process the received advertisement :
*Dec 17 03:17:05.967: VRRPv4 Vlan555 [2] Send V3 Advertisement, Type: 1, Group Id: 2, Priority: 100, Advert interval: 100 csec, Count: 1
*Dec 17 03:17:06.394: VRRP Vlan555 Processing Packet: Invalid ttl/hop limit
I configured VRRP between two 3850 (03.06.03E) on SVI Vlan255 :
On the master :
C3850st_HDV_254#show vlan id 555
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
555 test active Gi1/0/42, Gi1/0/45, Gi3/0/36
Po1, Po2
C3850st_HDV_254#sh ip int brief | i 555
Vlan555 10.32.0.1 YES manual up up
C3850st_HDV_254#sh run int vlan 555
Building configuration...
Current configuration : 144 bytes
!
interface Vlan555
ip address 10.32.0.1 255.255.255.0
vrrp 2 address-family ipv4
priority 110
address 10.32.0.3 primary
exit-vrrp
end
C3850st_HDV_254#sh int gi 3/0/36 trunk
Port Mode Encapsulation Status Native vlan
Gi3/0/36 on 802.1q trunking 1
Port Vlans allowed on trunk
Gi3/0/36 555
Port Vlans allowed and active in management domain
Gi3/0/36 555
Port Vlans in spanning tree forwarding state and not pruned
Gi3/0/36 555
C3850st_HDV_254#show vrrp 2 ipv4 vlan 555 all
Vlan555 - Group 2 - Address-Family IPv4
State is MASTER
State duration 8 mins 5.500 secs
Virtual IP address is 10.32.0.3
Virtual MAC address is 0000.5E00.0102
Advertisement interval is 1000 msec
Preemption enabled
Priority is 110
Master Router is 10.32.0.1 (local), priority is 110
Master Advertisement interval is 1000 msec (expires in 483 msec)
Master Down interval is unknown
C3850st_HDV_254#show vrrp statistics
VRRP Global Statistics:
Dropped Packets : 0
VRRP Statistics for Vlan555
Header Discarded Packets: 0
Invalid TTL/Hop Limit: 0
Invalid Checksum: 0
Invalid Version: 0
Invalid Msg Type: 0
Invalid length/Incomplete packet: 0
Invalid group no: 0
Invalid packet other reason: 0
VRRP Statistics for Vlan555 - Group 2 - Address-Family IPv4
State is MASTER
State duration 16 mins 37.750 secs
VRRPv3 Advertisements: sent 1107 (errors 0) - rcvd 1092
VRRPv2 Advertisements: sent 0 (errors 0) - rcvd 0
Group Discarded Packets: 0
VRRPv2 incompatibility: 0
IP Address Owner conflicts: 0
Invalid address count: 0
IP address configuration mismatch : 0
Invalid Advert Interval: 0
Adverts received in Init state: 0
Invalid group other reason: 0
Group State transition:
Init to master: 0
Init to backup: 1 (Last change Thu Dec 17 11:08:47.599)
Backup to master: 1 (Last change Thu Dec 17 11:08:51.169)
Master to backup: 0
Master to init: 0
Backup to init: 0
C3850st_HDV_254#ter mon
C3850st_HDV_254#deb vrrp pack
vrrp packet debugging enabled
C3850st_HDV_254#
008846: Dec 17 11:17:30.329 CET: VRRPv4 Vlan555 [2] Send V3 Advertisement, Type: 1, Group Id: 2, Priority: 110, Advert interval: 100 csec, Count: 1
008847: Dec 17 11:17:30.476 CET: VRRPv4 Vlan555 [2] Receive V3 Advertisement, Type: 1, Group Id: 2, Priority: 100, Advert interval: 100 csec, Count: 1
008848: Dec 17 11:17:31.323 CET: VRRPv4 Vlan555 [2] Receive V3 Advertisement, Type: 1, Group Id: 2, Priority: 100, Advert interval: 100 csec, Count: 1
008849: Dec 17 11:17:31.329 CET: VRRPv4 Vlan555 [2] Send V3 Advertisement, Type: 1, Group Id: 2, Priority: 110, Advert interval: 100 csec, Count: 1u
008850: Dec 17 11:17:32.227 CET: VRRPv4 Vlan555 [2] Send V3 Advertisement, Type: 1, Group Id: 2, Priority: 110, Advert interval: 100 csec, Count: 1
008851: Dec 17 11:17:32.232 CET: VRRPv4 Vlan555 [2] Receive V3 Advertisement, Type: 1, Group Id: 2, Priority: 100, Advert interval: 100 csec, Count: 1
008852: Dec 17 11:17:33.197 CET: VRRPv4 Vlan555 [2] Send V3 Advertisement, Type: 1, Group Id: 2, Priority: 110, Advert interval: 100 csec, Count: 1
008853: Dec 17 11:17:33.202 CET: VRRPv4 Vlan555 [2] Receive V3 Advertisement, Type: 1, Group Id: 2, Priority: 100, Advert interval: 100 csec, Count: 1all
008854: Dec 17 11:17:34.035 CET: VRRPv4 Vlan555 [2] Receive V3 Advertisement, Type: 1, Group Id: 2, Priority: 100, Advert interval: 100 csec, Count: 1
008855: Dec 17 11:17:34.112 CET: VRRPv4 Vlan555 [2] Send V3 Advertisement, Type: 1, Group Id: 2, Priority: 110, Advert interval: 100 csec, Count: 1
008856: Dec 17 11:17:34.938 CET: VRRPv4 Vlan555 [2] Send V3 Advertisement, Type: 1, Group Id: 2, Priority: 110, Advert interval: 100 csec, Count: 1
008857: Dec 17 11:17:35.013 CET: VRRPv4 Vlan555 [2] Receive V3 Advertisement, Type: 1, Group Id: 2, Priority: 100, Advert interval: 100 csec, Couu all
All possible debugging has been turned off
C3850st_HDV_254#ter no m
008858: Dec 17 11:17:35.823 CET: VRRPv4 Vlan555 [2] Receive V3 Advertisement, Type: 1, Group Id: 2, Priority: 100, Advert interval: 100 csec, Count: 1
008859: Dec 17 11:17:35.898 CET: VRRPv4 Vlan555 [2] Send V3 Advertisement, Type: 1, Group Id: 2, Priority: 110, Advert interval: 100 csec, Count: 1on
On the backup :
Switch#sh vlan id 555
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
555 test active Gi1/0/24
Switch#sho ip int brief | i 555
Vlan555 10.32.0.2 YES NVRAM up up
Switch#sh run int vlan 555
Building configuration...
Current configuration : 129 bytes
!
interface Vlan555
ip address 10.32.0.2 255.255.255.0
vrrp 2 address-family ipv4
address 10.32.0.3 primary
exit-vrrp
end
Switch#sho int gi 1/0/24 tru
Port Mode Encapsulation Status Native vlan
Gi1/0/24 on 802.1q trunking 1
Port Vlans allowed on trunk
Gi1/0/24 555
Port Vlans allowed and active in management domain
Gi1/0/24 555
Port Vlans in spanning tree forwarding state and not pruned
Gi1/0/24 555
Switch#show vrrp 2 ipv4 vlan 555 all
Vlan555 - Group 2 - Address-Family IPv4
State is MASTER
State duration 10 mins 43.470 secs
Virtual IP address is 10.32.0.3
Virtual MAC address is 0000.5E00.0102
Advertisement interval is 1000 msec
Preemption enabled
Priority is 100
Master Router is 10.32.0.2 (local), priority is 100
Master Advertisement interval is 1000 msec (expires in 179 msec)
Master Down interval is unknown
Switch#show vrrp statistics
VRRP Global Statistics:
Dropped Packets : 0
VRRP Statistics for Vlan555
Header Discarded Packets: 1089
Invalid TTL/Hop Limit: 1089
Invalid Checksum: 0
Invalid Version: 0
Invalid Msg Type: 0
Invalid length/Incomplete packet: 0
Invalid group no: 0
Invalid packet other reason: 0
VRRP Statistics for Vlan555 - Group 2 - Address-Family IPv4
State is MASTER
State duration 15 mins 51.910 secs
VRRPv3 Advertisements: sent 1096 (errors 0) - rcvd 0
VRRPv2 Advertisements: sent 0 (errors 0) - rcvd 0
Group Discarded Packets: 0
VRRPv2 incompatibility: 0
IP Address Owner conflicts: 0
Invalid address count: 0
IP address configuration mismatch : 0
Invalid Advert Interval: 0
Adverts received in Init state: 0
Invalid group other reason: 0
Group State transition:
Init to master: 0
Init to backup: 2 (Last change Thu Dec 17 03:05:15.911)
Backup to master: 2 (Last change Thu Dec 17 03:05:19.517)
Master to backup: 0
Master to init: 1 (Last change Thu Dec 17 03:05:08.173)
Backup to init: 0
Switch#deb vrrp pack
Switch#ter mon
Switch#deb
*Dec 17 03:17:05.967: VRRPv4 Vlan555 [2] Send V3 Advertisement, Type: 1, Group Id: 2, Priority: 100, Advert interval: 100 csec, Count: 1
*Dec 17 03:17:06.394: VRRP Vlan555 Processing Packet: Invalid ttl/hop limit
*Dec 17 03:17:06.886: VRRPv4 Vlan555 [2] Send V3 Advertisement, Type: 1, Group Id: 2, Priority: 100, Advert interval: 100 csec, Count: 1vrrp pa
*Dec 17 03:17:07.294: VRRP Vlan555 Processing Packet: Invalid ttl/hop limit
*Dec 17 03:17:07.819: VRRPv4 Vlan555 [2] Send V3 Advertisement, Type: 1, Group Id: 2, Priority: 100, Advert interval: 100 csec, Count: 1
*Dec 17 03:17:08.184: VRRP Vlan555 Processing Packet: Invalid ttl/hop limitckets
*Dec 17 03:17:08.696: VRRPv4 Vlan555 [2] Send V3 Advertisement, Type: 1, Group Id: 2, Priority: 100, Advert interval: 100 csec, Count: 1
*Dec 17 03:17:09.073: VRRP Vlan555 Processing Packet: Invalid ttl/hop limit
*Dec 17 03:17:09.599: VRRPv4 Vlan555 [2] Send V3 Advertisement, Type: 1, Group Id: 2, Priority: 100, Advert interval: 100 csec, Count: 1
*Dec 17 03:17:10.056: VRRP Vlan555 Processing Packet: Invalid ttl/hop limit
*Dec 17 03:17:10.549: VRRPv4 Vlan555 [2] Send V3 Advertisement, Type: 1, Group Id: 2, Priority: 100, Advert interval: 100 csec, Count: 1
*Dec 17 03:17:10.946: VRRP Vlan555 Processing Packet: Invalid ttl/hop limit
*Dec 17 03:17:11.547: VRRPv4 Vlan555 [2] Send V3 Advertisement, Type: 1, Group Id: 2, Priority: 100, Advert interval: 100 csec, Count: 1
*Dec 17 03:17:11.864: VRRP Vlan555 Processing Packet: Invalid ttl/hop limit
*Dec 17 03:17:12.437: VRRPv4 Vlan555 [2] Send V3 Advertisement, Type: 1, Group Id: 2, Priority: 100, Advert interval: 100 csec, Count: 1
*Dec 17 03:17:12.693: VRRP Vlan555 Processing Packet: Invalid ttl/hop limit
*Dec 17 03:17:13.307: VRRPv4 Vlan555 [2] Send V3 Advertisement, Type: 1, Group Id: 2, Priority: 100, Advert interval: 100 csec, Count: 1
*Dec 17 03:17:13.653: VRRP Vlan555 Processing Packet: Invalid ttl/hop limit
*Dec 17 03:17:14.237: VRRPv4 Vlan555 [2] Send V3 Advertisement, Type: 1, Group Id: 2, Priority: 100, Advert interval: 100 csec, Count: 1
*Dec 17 03:17:14.633: VRRP Vlan555 Processing Packet: Invalid ttl/hop limit
*Dec 17 03:17:15.236: VRRPv4 Vlan555 [2] Send V3 Advertisement, Type: 1, Group Id: 2, Priority: 100, Advert interval: 10ter no mon
Switch#
*Dec 17 03:17:15.596: VRRP Vlan555 Processing Packet: Invalid ttl/hop limit
*Dec 17 03:17:16.119: VRRPv4 Vlan555 [2] Send V3 Advertisement, Type: 1, Group Id: 2, Priority: 100, Advert interval: 100 csec, Count: 1
*Dec 17 03:17:16.404: VRRP Vlan555 Processing Packet: Invalid ttl/hop limit
The logs below show that the Master Send and receive advertisement but the Backup can't process the adverstisement due to TTL different than 255.
The Backup 3850 MUST discard VRRP advertisement with a TTL not equal to 255, that the expected behaviour.
But, I don't know how it could be possible regarding to this configuration.
I will try to implement HSRP to see if there is the same behaviour on TTL's HSRP Advertisement.
Does someone already troubleshoot on this ? Any idea on other things to troubleshoot ?
12-17-2015 03:19 AM
That sounds like a bug as you cant manually set the ttl that I am aware of so something has gone wrong , if your hsrp works then its most likely a bug in vrrp
I checked your release notes for that version but no known caveat like yours , there is a vrrp bug but its not related. That does not mean you have not hit something that the developers are not aware of yet.
You could try move off the default priorities see if that makes a difference and change timers etc incase something in the software is triggering this behaviour
01-27-2016 08:50 AM
Hello,
After open a case :
IP routing needs to be activate on the backup side for the L2 VRRP negociation (master/backup) to be successfull.
In my case, it was a migration, so At first, I verified the role nego on both side before activating ip routing on my backup. It's not possible with VRRP.
There is not the same behaviour on HSRP.
This behaviour is Cisco internally documented.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide