High Availability

Part 2 - VRRP

www.ine.com
 VRRP
Open standard (original RFC 3768, now 5798)
Built-in transport protocol: 112
Multicast address: 224.0.0.18
Master router replies to ARP request for virtual IP address
Preemption enabled by default
Default priority = 100
Timers
Advertisement interval = 1 second
Master down interval = 3.6 seconds
Copyright www.ine.com
 VRRP
MAC address: 0000.5e00.01xx
XX refers to the VRRP group number in hexadecimal
No load-sharing feature
Different instance of VRRP can provide load-
sharing

Copyright www.ine.com
 Implementing VRRP
Enabling VRRP in the interface
Sw1(config-if)# vrrp <group-id> <virtual IP>
Configuring priority
Sw1(config-if)# vrrp <group-id> <virtual IP> priority
<priority>

Copyright www.ine.com
 VRRP Authentication
Authentication supported:
Plain-text
MD5
Plain-text configuration
Sw1(config-if)#vrrp <group-id> authentication
<password>

Copyright www.ine.com
 VRRP Authentication
MD5 configuration
Key-string
Sw1(config-if)# vrrp <group-id> authentication md5 key-
string <password>
Key-chain
Sw1(config-if)# vrrp <group-id> authentication md5 key-
chain <key-chain name>

Copyright www.ine.com
 Optimizing VRRP Timers
All routers in VRRP group must share the same Hello
timer.
Configuring advertise timer
Sw1(config-if)# vrrp <group-id> timers advertise msec
<value>

Copyright www.ine.com
 Optimizing VRRP Timers
When increasing VRRP Hello timer, all other routers
must learn the new timer (not default behavior).
Sw1(config-if)# vrrp <group-id> timers learn

VRRP hello packet cannot advertise millisecond timers.

If configuring sub-second timers, must be configured on all
VRRP routers in group.

Copyright www.ine.com
 Verifying VRRP
Verification commands
Sw1# show vrrp
Sw1# show vrrp brief

Copyright www.ine.com