VRRP problem - state change

vitalykovalenko · ‎05-27-2009

Hi. we have 2 cisco 2821 routers. Few days ago one of them (vrrp backup) started to change vrrp state from backup to master. Its trying to change status a few times and leave it as master. And now we have 2 masters. And this second router constantly trying to change vrrp status.

connection present on both routers.

Interesting but first router which working without problems, dont have any log messages about vrrp state change.

Here is the log file of "bad" router:

000087: May 27 18:25:49.346 EEST: %VRRP-6-STATECHANGE: Vl1 Grp 1 state Master -> Backup

000088: May 27 18:25:52.995 EEST: %VRRP-6-STATECHANGE: Vl1 Grp 1 state Backup -> Master

000089: May 27 18:27:38.149 EEST: %VRRP-6-STATECHANGE: Vl1 Grp 1 state Master -> Backup

000090: May 27 18:27:41.797 EEST: %VRRP-6-STATECHANGE: Vl1 Grp 1 state Backup -> Master

000091: May 27 18:29:30.767 EEST: %VRRP-6-STATECHANGE: Vl1 Grp 1 state Master -> Backup

000092: May 27 18:29:34.415 EEST: %VRRP-6-STATECHANGE: Vl1 Grp 1 state Backup -> Master

000094: May 27 18:31:14.153 EEST: %VRRP-6-STATECHANGE: Vl1 Grp 1 state Master -> Backup

000097: May 27 18:31:17.801 EEST: %VRRP-6-STATECHANGE: Vl1 Grp 1 state Backup -> Master

000098: May 27 18:32:41.423 EEST: %VRRP-6-STATECHANGE: Vl1 Grp 1 state Master -> Backup

000099: May 27 18:32:45.071 EEST: %VRRP-6-STATECHANGE: Vl1 Grp 1 state Backup -> Master

000101: May 27 18:34:25.557 EEST: %VRRP-6-STATECHANGE: Vl1 Grp 1 state Master -> Backup

000102: May 27 18:34:29.205 EEST: %VRRP-6-STATECHANGE: Vl1 Grp 1 state Backup -> Master

000103: May 27 18:36:06.403 EEST: %VRRP-6-STATECHANGE: Vl1 Grp 1 state Master -> Backup

000104: May 27 18:36:10.051 EEST: %VRRP-6-STATECHANGE: Vl1 Grp 1 state Backup -> Master

Peter010101 · ‎05-27-2009

Hi,

Are there any other messages in the logs?

Check the routers's cpu to see if it is running high.

vitalykovalenko · ‎05-27-2009

no other messages, except vrrp and acl messages.

Cpu utilization ~0 %

vitalykovalenko · ‎05-29-2009

"Bad" router

interface Vlan1

description Internal

ip address xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx

ip access-group 102 in

no ip redirects

no ip unreachables

no ip proxy-arp

vrrp 1 ip xxx.xxx.xxx.1

vrrp 1 priority 90

no mop enabled

!

Working router

the same without vrrp 1 priority. it means, that it has priority 100 by default.

please help someone.

crow930us · ‎05-29-2009

Compare the results from show vrrp on each device. It might be that the two devices are not seeing each other or are not communicating with each other.

this link should give you some more vrrp commands.

http://www.cisco.com/en/US/docs/ios/12_0st/12_0st18/feature/guide/st_vrrpx.html#wp1025628

hth

vitalykovalenko · ‎06-10-2009

Jun 11 09:00:10 36687: 036692: Jun 11 09:00:10.413 EEST: VRRP: Grp 1 sending Advertisement checksum 5220

Jun 11 09:00:12 36688: 036693: Jun 11 09:00:11.353 EEST: VRRP: Grp 1 sending Advertisement checksum 5220

Jun 11 09:00:12 36689: 036694: Jun 11 09:00:12.257 EEST: VRRP: Grp 1 sending Advertisement checksum 5220

Jun 11 09:00:13 36690: 036695: Jun 11 09:00:13.065 EEST: VRRP: Grp 1 sending Advertisement checksum 5220

Jun 11 09:00:13 36691: 036696: Jun 11 09:00:13.121 EEST: VRRP: Grp 1 Advertisement priority 100,ipaddr 192.2.1.1

Jun 11 09:00:13 36692: 036697: Jun 11 09:00:13.121 EEST: VRRP: Grp 1 Event - Advert higher or equal priority

Jun 11 09:00:14 36693: 036698: Jun 11 09:00:13.121 EEST: %VRRP-6-STATECHANGE: Vl1 Grp 1 state Master -> Backup

Jun 11 09:00:16 36694: 036699: Jun 11 09:00:16.769 EEST: VRRP: Grp 1 Event - Master down timer expired

Jun 11 09:00:16 36695: 036700: Jun 11 09:00:16.769 EEST: %VRRP-6-STATECHANGE: Vl1 Grp 1 state Backup -> Master

Jun 11 09:00:17 36696: 036701: Jun 11 09:00:16.769 EEST: VRRP: tbridge_smf_update failed

Jun 11 09:00:12 36689: 036694: Jun 11 09:00:12.257 EEST: VRRP: Grp 1 sending Advertisement checksum 5220

Cant to find info about errors.

kabuelenain · ‎06-10-2009

Hi,

This is a physical layer problem. You need to make sure of the connectivity at layer 2 for this specific vlan. It seems to me that the link passing this vlan is flapping. Try passing this vlan on another link and block it from the current link, or if possible, change the link between both switches altogether.

BR,

Khaled Wahba