VRRP Issue on CSS 11501 !!Plz help

Answered Question
Nov 19th, 2008

Hi, I have configured the VRRP on CSS properly and it had worked previously without any problem. The only change is i have moved the box from the old location to the new and have change the vlan and ip address rest everything is same.

Now the problem is both CSS are becoming Master kindly some one help me if i have to change anything back to work properly.

Output from the CSS-

CSS A# show virtual-routers

Virrtual-Routers:

Interface Address: 1.1.1.1 VRID: 2

Priority: 120 Config. Priority: 110

State: Master Master IP: 1.1.1.1

State Changes: 10 Last Change: 18/11/2008 00:31:21

Preempt: True Last Fail Reason: IF Down

CSS B# show virtual-routers

Virtual-Routers:

Interface Address: 1.1.1.2 VRID: 2

Priority: 80 Config. Priority: 90

State: Master Master IP: 1.1.1.2

State Changes: 8 Last Change: 18/11/2008 01:18:18

Preempt: False Last Fail Reason: IF Down

Anyhelp would be appriciated.

Thanks

Neha

I have this problem too.
0 votes
Correct Answer by inayathulla1 about 8 years 1 week ago

Hi neha,

Plz find the procedure below for your query:-

After disabling the access-list reconfigure the access-list as mentioned below :-

acl 01

clause 10 permit any x.x.x.x x.x.x.x destination any sourcegroup NATvip

clause 20 permit any any destination any

apply circuit-(VLANabc)

This should solve your issue.

Plz rate if this help.

Regards

Shariff

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Gilles Dufour Wed, 11/19/2008 - 03:21

they obvisouly don't see each other.

Try to do a 'acl disable' in config mode and see if that solves the issue.

You then know your acl are blocking vrrp traffic.

If that does not help, take a sniffer trace on the vlan and see if there is any vrrp traffic going in and out of each CSS.

You may have a switch blocking this traffic.

Gilles.

nehakulsum Wed, 11/19/2008 - 05:12

Hi Giles,

Thanks for your prompt response.

but this was working fine before without any issues. Anyway let me try disabling the accesslist and update you.

reg

neha

nehakulsum Wed, 11/19/2008 - 07:07

Giles,

I am disabling the access list, Please could you let me know how we permit vrrp traffic thru the ACLs, because this ACLs are needed for natting groups.

Correct Answer
inayathulla1 Tue, 12/02/2008 - 06:38

Hi neha,

Plz find the procedure below for your query:-

After disabling the access-list reconfigure the access-list as mentioned below :-

acl 01

clause 10 permit any x.x.x.x x.x.x.x destination any sourcegroup NATvip

clause 20 permit any any destination any

apply circuit-(VLANabc)

This should solve your issue.

Plz rate if this help.

Regards

Shariff

nehakulsum Wed, 12/03/2008 - 05:46

Hi Inayath,

Thanks for the info this works as expected.

Appriciate your help.

Regards

Neha

Actions

This Discussion