Link Search Menu Expand Document

VRRP Tab

Configuration > Networking > VRRP

This tab summarizes the configuration and state for appliances deployed with Virtual Router Redundancy Protocol (VRRP).

VRRP specifies an election protocol that dynamically assigns responsibility for a virtual router to one of the VRRP routers on a LAN. The VRRP router controlling the IP address(es) associated with a virtual router is called the Master and forwards packets sent to these IP addresses. The election process provides dynamic failover in the forwarding responsibility should the Master become unavailable. This allows end hosts to use any virtual router IP addresses on the LAN as the default first-hop router. The advantage gained from using VRRP is a higher availability default path without configuring dynamic routing protocols such as BGP or OSPF.

VRRP Configuration Considerations

When configuring VRRP, please observe the following restrictions:

  • If you set the VRRP virtual IP (VIP) to a subnet that is different than that of the LAN physical interfaces, do not use static routes on the LAN side.

  • By default, EdgeHA operates within the IPv4 link-local address range. If you configure the LAN interfaces to use the same range, ensure that there are no duplicate IP addresses.

  • If the LAN physical interfaces are set to the link-local subnet 169.254.0.0/16, make sure that this subnet is not shared via route-map filtering.

  • DHCP server, DHCP relay, or other management services on the VRRP VIP with a different subnet are not supported.

VRRP Edit Row

From the list of appliances, click the edit icon to display the VRRP screen. Click Add VRRP to add a VRRP instance. Use the information in the following table to assist you in configuring a VRRP. Click Save to deploy your VRRP configuration.

VRRP Settings

Field Description
Group ID The value is assigned to a group of routing devices. The group most commonly includes two appliances, but depending on the deployment, could contain one or more appliances and a router (or L3 switch), or more than two appliances. The valid range is 1 to 255.
Interface Choose an interface that VRRP will use for peering from a list of configured system interfaces.
Version Select the VRRP version that applies for your system:

2 – Supports only IPv4.

3 – Supports IPv4 and IPv6; does not support authentication strings.
State The VRRP instance has three states:

Backup – Instance is in VRRP backup state.

Init – Instance is initializing, it is disabled, or the interface is down.

Master – Instance is the current VRRP master.
Admin Select up (enable) or down (disable).
Virtual IP IP address of the VRRP instance. Configure the VRRP VIP on a different subnet than the LAN physical interfaces; this maximizes the number of available LAN IP addresses . VRRP instances can run between two or more appliances, or appliances and routers. The VRRP VIP subnet is shared with the peers.
Hold Down The number of seconds a higher-priority backup router that has just started up waits before preempting the primary router. It is best practice to configure a hold time so that routing protocols converge and tunnels come back up before preemption occurs. The default value is 60 sec to account for the default quiescent tunnel keep alive time. The minimum value is 1 second.
Advertisement Timer The time interval between sent advertisements. For version 2, the time is measured in seconds, and the default is 1 sec. For version 3, the time is measured in centi-seconds, and the default is 1 centi-sec. 1 centi-sec = 10ms.
Priority Config The greater the number, the higher the priority. The appliance with the higher priority is the VRRP Master.
Priority State The current VRRP priority, which can be influenced by IP SLA rules.
Preemption Leave this selected/enabled so that after a failure, the appliance with the highest priority comes back online and again assumes primary responsibility.
Authentication String Clear text password for authenticating VRRP version 2 group members. You cannot use an authentication string if you are using VRRP version 3.
Description Free-form text field where you can enter a description of the VRRP instance.
Details Click the info icon in this column to view the following details about the VRRP instance.

Master IP – The interface or local IP address of the current VRRP Master.

Virtual MAC Address – MAC Address that the VRRP instance is using. On a hardware appliance, this is in 00-00-5E-00-01-{VRID} format. On virtual appliances, the VRRP instance uses the MAC Address assigned to the interface (for example, the MAC address that the hypervisor assigned to wan0).

State Uptime – Time elapsed since the VRRP instance entered the state it is in.

Master State Transitions – Number of times the VRRP instance went from Master to Backup and vice versa. A high number of transitions indicates a problematic VRRP configuration or unstable network. In this case, check the configuration of all local appliances and routers, and then review the log files.

IP Address Owner – An EdgeConnect appliance cannot use one of its own IP addresses as the VRRP IP, so this will always be No.
Segment Name of the segment, if enabled.