No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

"VRRP config error" Occurs When Two Hot-Standby USGs Connect to Downstream Switches

Publication Date:  2019-01-18 Views:  103 Downloads:  0
Issue Description

USGs work in hot standby mode. Their service interfaces work at Layer 3 and connect to switches in the downstream direction. http://support.huawei.com/enterprise/product/images/9f30b38af6494094bc561d44273de987


The related VRRP configuration is as follows:
#USG-1#
interface GigabitEthernet6/0/3
ip address 172.16.100.34 255.255.255.224
vrrp vrid 1 virtual-ip 172.16.100.33 master
#
#USG-2#
interface GigabitEthernet6/0/3
ip address 172.16.100.35 255.255.255.224
vrrp vrid 1 virtual-ip 172.16.100.33 slave
#
#Switch-1#
interface Vlanif100
ip address 172.16.100.61 255.255.255.224
vrrp vrid 1 virtual-ip 172.16.100.60
vrrp vrid 1 priority 110
vrrp vrid 1 track interface GigabitEthernet0/0/1 reduced 20
#Switch-2#
interface Vlanif100
ip address 172.16.100.62 255.255.255.224
vrrp vrid 1 virtual-ip 172.16.100.60
vrrp vrid 1 track interface GigabitEthernet0/0/1 reduced 20
#

Alarm Information

告警信息

The error information on the USGs is as follows:
%%01VRRP/3/CONFIGERROR(l): System detected a VRRP config error of VIRTUAL IP ADDRESS ERROR, Interface: GigabitEthernet6/0/3, Virtual Router: 1!

Handling Process
Change the VRIDs of the switches or USGs so that the two pairs of VRIDs are different. In this example, change the VRIDs of the switches as follows:
#Switch-1#
interface Vlanif100
ip address 172.16.100.61 255.255.255.224
vrrp vrid 5 virtual-ip 172.16.100.60
vrrp vrid 5 priority 110
vrrp vrid 5 track interface GigabitEthernet0/0/1 reduced 20
#Switch-2#
interface Vlanif100
ip address 172.16.100.62 255.255.255.224
vrrp vrid 5 virtual-ip 172.16.100.60
vrrp vrid 5 track interface GigabitEthernet0/0/1 reduced 20
Root Cause

The VRIDs of the USGs are the same as the VRIDs of the switches. As a result, the error message is displayed.
The detailed analysis as follows:
A VRRP group is established based on the VRRP packets exchanged between devices. VRRP packets are encapsulated into IP packets and sent to the VRRP multicast IP address 224.0.0.18. In this networking, Layer 2 links transparently transmit multicast packets between the USGs and switches, and between switch-1 and switch-2. If the USGs and switches use the same VRID, the four devices are considered in the same VRRP group, but the virtual-ip values planned for the USGs and switches are obviously different. As different virtual-ip values exist in one VRRP group, "VRRP config error of VIRTUAL IP ADDRESS ERROR" is generated on the USGs.

Suggestions

When configuring VRRP, ensure that the VRIDs of the devices that form a VRRP group are different from the VRIDs of other devices in the same broadcast domain.

END