No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

more fact cause vrrp Interface state is peer down

Publication Date:  2012-09-25 Views:  58 Downloads:  0
Issue Description
S8016-1-----------S8016-2
      |                  |
      |                  |
E1000-1-----------E1000-2

S8016-1 and S8016-2 belong to network1,E1000-1 and E1000-2 belong to network2,network1 and network2 joining by VRRP+static route,heart of VRRP is provided by layer2 links of S8016-1 and S8016-2,between E1000s connect with layer3 links, VRID of network 1 is 5,VRID of network 2 is 14,primary plate is S8016-1 and E1000-1,network 2 direct configured vrrp group,add port of opposite of s8016 to vrrp group
Phenomenon of problem,network 2 direction,through command
HRP_M disp vrrp-group verbose                                        
Vrrp Group 1 
   state : Master                         Priority : 105                          Preempt : YES   Delay Time : 0               Timer : 1000                                                            
Group-Send  : YES                      
Peer Status : OnLine                     
Vrrp number : 4   
VGMP member : Same                      
   interface : Ethernet4/0/7, vrrp id : 10 Up          interface : GigabitEthernet1/0/1, vrrp id : 12 Up           interface : GigabitEthernet2/0/1, vrrp id : 14 Peer Down
interface : GigabitEthernet1/0/0, vrrp id : 11 Up
check found state of E1000 up port is peer down
Alarm Information
none
Handling Process
1 low safe area to local area inbound at E1000 permit multicast of address 224.0.0.18 pass
Configuration as follows
HRP_M[E1000]acl number 3000
                       rule 5 permit ip destination 224.0.0.18 0
HRP_M[E1000]firewall interzone local untr                                
                       packet-filter 3000 inbound      
then check state is also peer down
2 vrrp multicast message forward by heart wire between S8016,if not learnt transparent function in heart vlan
In problem networking,at S8016-1 mirror  do packet capture,can not received VRRP messages,and at S8016-1 mirror do packet capture too,can not received VRRP messages either
3 open vrrp broadcast enable of valn,problem solved

Root Cause
1 not configure pass rule of low safe area to local area,After check,require configure permit rule to multicast address 224.0.0.18
2 between S8016s connect with heart wire transparent vlan not permit multicast messages pass
Suggestions
none

END