Solved: VRRP Issue on CSS 11501 !!Plz help

nehakulsum · ‎11-19-2008

Hi, I have configured the VRRP on CSS properly and it had worked previously without any problem. The only change is i have moved the box from the old location to the new and have change the vlan and ip address rest everything is same.

Now the problem is both CSS are becoming Master kindly some one help me if i have to change anything back to work properly.

Output from the CSS-

CSS A# show virtual-routers

Virrtual-Routers:

Interface Address: 1.1.1.1 VRID: 2

Priority: 120 Config. Priority: 110

State: Master Master IP: 1.1.1.1

State Changes: 10 Last Change: 18/11/2008 00:31:21

Preempt: True Last Fail Reason: IF Down

CSS B# show virtual-routers

Virtual-Routers:

Interface Address: 1.1.1.2 VRID: 2

Priority: 80 Config. Priority: 90

State: Master Master IP: 1.1.1.2

State Changes: 8 Last Change: 18/11/2008 01:18:18

Preempt: False Last Fail Reason: IF Down

Anyhelp would be appriciated.

Thanks

Neha

inayathulla1 · ‎12-02-2008

Hi neha,

Plz find the procedure below for your query:-

After disabling the access-list reconfigure the access-list as mentioned below :-

acl 01

clause 10 permit any x.x.x.x x.x.x.x destination any sourcegroup NATvip

clause 20 permit any any destination any

apply circuit-(VLANabc)

This should solve your issue.

Plz rate if this help.

Regards

Shariff

View solution in original post

Gilles Dufour · ‎11-19-2008

they obvisouly don't see each other.

Try to do a 'acl disable' in config mode and see if that solves the issue.

You then know your acl are blocking vrrp traffic.

If that does not help, take a sniffer trace on the vlan and see if there is any vrrp traffic going in and out of each CSS.

You may have a switch blocking this traffic.

Gilles.

nehakulsum · ‎11-19-2008

Hi Giles,

Thanks for your prompt response.

but this was working fine before without any issues. Anyway let me try disabling the accesslist and update you.

reg

neha

nehakulsum · ‎11-19-2008

Giles,

I am disabling the access list, Please could you let me know how we permit vrrp traffic thru the ACLs, because this ACLs are needed for natting groups.

inayathulla1 · ‎12-02-2008

Hi neha,

Plz find the procedure below for your query:-

After disabling the access-list reconfigure the access-list as mentioned below :-

acl 01

clause 10 permit any x.x.x.x x.x.x.x destination any sourcegroup NATvip

clause 20 permit any any destination any

apply circuit-(VLANabc)

This should solve your issue.

Plz rate if this help.

Regards

Shariff

nehakulsum · ‎12-03-2008

Hi Inayath,

Thanks for the info this works as expected.

Appriciate your help.

Regards

Neha