PG1X WIKI

My Knowledge Base

User Tools

Site Tools

You are here: PG1X WIKI » Technology » Networking » Cisco Systems » VRRP
Trace: • VRRP
tech:network:cisco:vrrp:vrrp

Table of Contents

VRRP

, , ,

  • ASW1
en
conf t
!
vlan 10
exit
!
int range f0/1 - 2
switchport mode access
switchport access vlan 10
no shut
exit
int gig0/1
switchport mode access
switchport access vlan 10
spanning-tree portfast
no shut
exit
!
end
  • ASW2
en
conf t
!
vlan 2
exit
!
int range f0/1 - 2
switchport mode access
switchport access vlan 2
spanning-tree portfast
no shut
exit
int gig0/1
switchport mode access
switchport access vlan 2
spanning-tree portfast
no shut
exit
!
end
  • SW1
en
conf t
!
ip routing
!
vlan 3,10
exit
!
int vlan 3
ip address 172.16.3.1 255.255.255.0
no shut
exit
int vlan 10
ip address 172.16.10.1 255.255.255.0
vrrp 10 ip 172.16.10.1
no shut
exit
int f1/0/1
switchport mode access
switchport access vlan 10
no shut
exit
int f1/0/2
switchport mode access
switchport access vlan 3
no shut
exit
!
router ospf 1
network 172.16.0.0 0.0.255.255 area 0
exit
!
end
  • SW2
en
conf t
!
ip routing
!
vlan 4,10
exit
!
int vlan 10
ip address 172.16.10.2 255.255.255.0
vrrp 10 ip 172.16.10.1
no shut
exit
int vlan 4
ip address 172.16.4.2 255.255.255.0
no shut
exit
int f1/0/1
switchport mode access
switchport access vlan 10
no shut
exit
int f1/0/2
switchport mode access
switchport access vlan 4
no shut
exit
!
router ospf 1
network 172.16.0.0 0.0.255.255 area 0
exit
!
end
  • R1
en
conf t
!
int f0/0
ip address 172.16.3.3 255.255.255.0
no shut
exit
int f0/1
ip address 172.16.2.3 255.255.255.0
vrrp 2 ip 172.16.2.3
no shut
exit
!
router ospf 1
network 172.16.0.0 0.0.255.255 area 0
exit
!
end
  • R2
en
conf t
!
int f0/0
ip address 172.16.4.4 255.255.255.0
no shut
exit
int f0/1
ip address 172.16.2.4 255.255.255.0
vrrp 2 ip 172.16.2.3
no shut
exit
!
router ospf 1
network 172.16.0.0 0.0.255.255 area 0
exit
!
end
  • PC1
route delete 172.16.0.0 mask 255.255.0.0 172.16.10.254 metric 1 if 25
route add 172.16.0.0 mask 255.255.0.0 172.16.10.1 metric 1 if 25
  • PC2
sudo ip route del 172.16.0.0/16 via 172.16.2.254
sudo ip route add 172.16.0.0/16 via 172.16.2.3
SW1#sh vrrp brief
Interface          Grp Pri Time  Own Pre State   Master addr     Group addr
Vl10               10  255 3003   Y   Y  Master  172.16.10.1     172.16.10.1
SW1#

SW2#sh vrrp brief
Interface          Grp Pri Time  Own Pre State   Master addr     Group addr
Vl10               10  100 3609       Y  Backup  172.16.10.1     172.16.10.1
SW2#

R1#sh vrrp brief
Interface          Grp Pri Time  Own Pre State   Master addr     Group addr
Fa0/1              10  255 3003   Y   Y  Master  172.16.2.3      172.16.2.3
R1#

R2#sh vrrp brief
Interface          Grp Pri Time  Own Pre State   Master addr     Group addr
Fa0/1              10  100 3609       Y  Backup  172.16.2.3      172.16.2.3
R2#

C:\WINDOWS\system32>ping 172.16.2.245

Pinging 172.16.2.245 with 32 bytes of data:
Reply from 172.16.2.245: bytes=32 time=8ms TTL=62
Reply from 172.16.2.245: bytes=32 time=1ms TTL=62
Reply from 172.16.2.245: bytes=32 time=1ms TTL=62
Reply from 172.16.2.245: bytes=32 time=1ms TTL=62

Ping statistics for 172.16.2.245:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 1ms, Maximum = 8ms, Average = 2ms

C:\WINDOWS\system32>tracert 172.16.2.245

Tracing route to 172.16.2.245 over a maximum of 30 hops

  1     1 ms     1 ms     1 ms  LASTHOPE-WIN [172.16.10.1]
  2     1 ms     1 ms     1 ms  172.16.3.3
  3     1 ms    <1 ms     1 ms  172.16.2.245

Trace complete.

SW1 down 

SW1(config)#int f1/0/1
SW1(config-if)#shut
SW1(config-if)#
*Mar  1 04:44:40.564: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan10, changed state to down
*Mar  1 04:44:40.564: %VRRP-6-STATECHANGE: Vl10 Grp 10 state Master -> Init
SW1(config-if)#
*Mar  1 04:44:40.572: %OSPF-5-ADJCHG: Process 1, Nbr 172.16.4.2 on Vlan10 from FULL to DOWN, Neighbor Down: Interface down or detached
SW1(config-if)#
*Mar  1 04:44:42.552: %LINK-5-CHANGED: Interface FastEthernet1/0/1, changed state to administratively down
*Mar  1 04:44:43.559: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/0/1, changed state to down
SW1(config-if)#

SW2#
*Mar  1 04:44:43.475: %VRRP-6-STATECHANGE: Vl10 Grp 10 state Backup -> Master
SW2#
*Mar  1 04:45:17.012: %OSPF-5-ADJCHG: Process 1, Nbr 172.16.3.1 on Vlan10 from FULL to DOWN, Neighbor Down: Dead timer expired

C:\WINDOWS\system32>ping 172.16.2.245

Pinging 172.16.2.245 with 32 bytes of data:
Reply from 172.16.2.245: bytes=32 time=9ms TTL=61
Reply from 172.16.2.245: bytes=32 time=1ms TTL=62
Reply from 172.16.2.245: bytes=32 time=1ms TTL=62
Reply from 172.16.2.245: bytes=32 time=1ms TTL=62

Ping statistics for 172.16.2.245:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 1ms, Maximum = 9ms, Average = 3ms

C:\WINDOWS\system32>tracert 172.16.2.245

Tracing route to 172.16.2.245 over a maximum of 30 hops

  1     2 ms     3 ms     2 ms  172.16.10.2
  2     1 ms     1 ms    <1 ms  172.16.4.4
  3     1 ms    <1 ms     1 ms  172.16.2.245

Trace complete.
SW2#show vrrp brief
Interface          Grp Pri Time  Own Pre State   Master addr     Group addr
Vl10               10  100 3609       Y  Master  172.16.10.2     172.16.10.1

SW1 back to normal. 

SW1(config)#int f1/0/1
SW1(config-if)#no shut
SW1(config-if)#
*Mar  1 04:49:42.017: %LINK-3-UPDOWN: Interface FastEthernet1/0/1, changed state to up
*Mar  1 04:49:43.024: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/0/1, changed state to up
SW1(config-if)#
*Mar  1 04:50:11.855: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan10, changed state to up
SW1(config-if)#
*Mar  1 04:50:11.855: %VRRP-6-STATECHANGE: Vl10 Grp 10 state Init -> Master
SW1(config-if)#
*Mar  1 04:50:16.519: %OSPF-5-ADJCHG: Process 1, Nbr 172.16.4.2 on Vlan10 from LOADING to FULL, Loading Done
SW1(config-if)#

SW1#sh vrrp brief
Interface          Grp Pri Time  Own Pre State   Master addr     Group addr
Vl10               10  255 3003   Y   Y  Master  172.16.10.1     172.16.10.1

R1 goes down 

R1#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R1(config)#int f0/1
R1(config-if)#shut
R1(config-if)#
*Sep 17 06:19:46.386: %VRRP-6-STATECHANGE: Fa0/1 Grp 10 state Master -> Init
R1(config-if)#
*Sep 17 06:19:46.386: %OSPF-5-ADJCHG: Process 1, Nbr 172.16.4.4 on FastEthernet0/1 from FULL to DOWN, Neighbor Down: Interface down or detached
R1(config-if)#
*Sep 17 06:19:48.386: %LINK-5-CHANGED: Interface FastEthernet0/1, changed state to administratively down
*Sep 17 06:19:49.386: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to down
R1(config-if)#do sh vrrp bri
Interface          Grp Pri Time  Own Pre State   Master addr     Group addr
Fa0/1              10  255 3003   Y   Y  Init    0.0.0.0         172.16.2.3
R1(config-if)#

R2#
*Sep 17 06:22:30.610: %VRRP-6-STATECHANGE: Fa0/1 Grp 10 state Backup -> Master
R2#sh ip ro 172.16.10.10
Routing entry for 172.16.10.0/24
  Known via "ospf 1", distance 110, metric 2, type intra area
  Last update from 172.16.4.2 on FastEthernet0/0, 00:00:10 ago
  Routing Descriptor Blocks:
  * 172.16.4.2, from 172.16.4.2, 00:00:10 ago, via FastEthernet0/0
      Route metric is 2, traffic share count is 1
R2#
*Sep 17 06:23:02.138: %OSPF-5-ADJCHG: Process 1, Nbr 172.16.3.3 on FastEthernet0/1 from FULL to DOWN, Neighbor Down: Dead timer expired
R2#sh vrrp bri
Interface          Grp Pri Time  Own Pre State   Master addr     Group addr
Fa0/1              10  100 3609       Y  Master  172.16.2.4      172.16.2.3

Object Tracking

SW1#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
SW1(config)#tra
SW1(config)#track 101 int
SW1(config)#track 101 interface fa1/0/2 lin
SW1(config)#track 101 interface fa1/0/2 line-protocol ?
  <cr>

SW1(config)#track 101 interface fa1/0/2 ip ro
SW1(config)#track 101 interface fa1/0/2 line
SW1(config)#track 101 interface fa1/0/2 line-protocol
SW1(config-track)#exit
SW1(config)#int f1/0/2
SW1(config-if)#tra
SW1(config-if)#vrr
SW1(config-if)#vrrp
SW1(config-if)#vrrp
SW1(config-if)#vrrp
SW1(config-if)#exit
SW1(config)#int f1/0/1
SW1(config-if)#vrr
SW1(config-if)#vrr
SW1(config-if)#vrr
SW1(config-if)#vrr?
% Unrecognized command
SW1(config-if)#int vlan10
SW1(config-if)#vrr
SW1(config-if)#vrrp 10 tra
SW1(config-if)#vrrp 10 track 101 dec
SW1(config-if)#vrrp 10 track 101 decrement 200
VRRP: Tracking not supported on IP Address owner
SW1(config-if)#vrrp 10 track 101 decrement 200
VRRP: Tracking not supported on IP Address owner
SW1(config-if)#vrrp 10 track 101
VRRP: Tracking not supported on IP Address owner
SW1(config-if)#ip addr 172.16.10.3
% Incomplete command.

SW1(config-if)#ip addr 172.16.10.3 255.255.255.0
SW1(config-if)#
*Mar  1 01:23:48.139: %OSPF-5-ADJCHG: Process 1, Nbr 172.16.10.2 on Vlan10 from FULL to DOWN, Neighbor Down: Interface down or detached
SW1(config-if)#
*Mar  1 01:23:48.139: %VRRP-6-STATECHANGE: Vl10 Grp 10 state Master -> Disable
*Mar  1 01:23:48.139: %VRRP-6-STATECHANGE: Vl10 Grp 10 state Init -> Backup
*Mar  1 01:23:48.148: %VRRP-6-STATECHANGE: Vl10 Grp 10 state Backup -> Disable
*Mar  1 01:23:48.148: %VRRP-6-STATECHANGE: Vl10 Grp 10 state Init -> Backup
SW1(config-if)#ip addr
SW1(config-if)#ip address
*Mar  1 01:23:51.763: %VRRP-6-STATECHANGE: Vl10 Grp 10 state Backup -> Master
SW1(config-if)#pri
SW1(config-if)#vrr
SW1(config-if)#vrrp 10 pri
SW1(config-if)#vrrp 10 priority 105
SW1(config-if)#vrrp
SW1(config-if)#vrrp 10 tra
SW1(config-if)#vrrp 10 track 10
*Mar  1 01:24:31.366: %OSPF-5-ADJCHG: Process 1, Nbr 172.16.10.2 on Vlan10 from LOADING to FULL, Loading Done
SW1(config-if)#vrrp 10 track 101 dec
SW1(config-if)#vrrp 10 track 101 decrement 50
SW1(config-if)#

Solved: Question on configuring VRRP tracking !... - Cisco Community 

R1#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R1(config)#int f0/0
R1(config-if)#shut
R1(config-if)#
*Sep 22 07:53:39.707: %OSPF-5-ADJCHG: Process 1, Nbr 172.16.10.1 on FastEthernet0/0 from FULL to DOWN, Neighbor Down: Interface down or detached
R1(config-if)#
*Sep 22 07:53:41.699: %LINK-5-CHANGED: Interface FastEthernet0/0, changed state to administratively down
*Sep 22 07:53:42.699: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to down

SW1(config-if)#
*Mar  1 01:29:35.528: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan3, changed state to down
*Mar  1 01:29:35.528: %OSPF-5-ADJCHG: Process 1, Nbr 172.16.3.3 on Vlan3 from FULL to DOWN, Neighbor Down: Interface down or detached
*Mar  1 01:29:36.208: %TRACKING-5-STATE: 101 interface Fa1/0/2 line-protocol Up->Down
*Mar  1 01:29:36.527: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/0/2, changed state to down
SW1(config-if)#
*Mar  1 01:29:37.525: %LINK-3-UPDOWN: Interface FastEthernet1/0/2, changed state to down
SW1(config-if)#
*Mar  1 01:29:39.136: %VRRP-6-STATECHANGE: Vl10 Grp 10 state Master -> Backup
SW1(config-if)#do sh vrrp
Vlan10 - Group 10
  State is Backup
  Virtual IP address is 172.16.10.1
  Virtual MAC address is 0000.5e00.010a
  Advertisement interval is 1.000 sec
  Preemption enabled
  Priority is 55  (cfgd 105)
    Track object 101 state Down decrement 50
  Master Router is 172.16.10.2, priority is 100
  Master Advertisement interval is 1.000 sec
  Master Down interval is 3.589 sec (expires in 3.531 sec)

SW1(config-if)#

VRRP Authentication

Catalyst 3750 platform(WS-C3750V2-24TS c3750-ipservicesk9-mz.150-2.SE4) may not support md5 authentication? 

SW1(config-if)#vrr
SW1(config-if)#vrrp 10 au
SW1(config-if)#vrrp 10 authentication te
SW1(config-if)#vrrp 10 authentication text pg1x
SW1(config-if)#
*Mar  1 01:35:50.961: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.10.2, group 10, type 0, expected 1
SW1(config-if)#do sh vrrp
Vlan10 - Group 10
  State is Master
  Virtual IP address is 172.16.10.1
  Virtual MAC address is 0000.5e00.010a
  Advertisement interval is 1.000 sec
  Preemption enabled
  Priority is 105
    Track object 101 state Up decrement 50
  Authentication is enabled
  Master Router is 172.16.10.3 (local), priority is 105
  Master Advertisement interval is 1.000 sec
  Master Down interval is 3.589 sec

SW1(config-if)#
*Mar  1 01:36:21.654: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.10.2, group 10, type 0, expected 1
SW1(config-if)#
*Mar  1 01:36:51.677: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.10.2, group 10, type 0, expected 1
SW1(config-if)#
*Mar  1 01:36:53.565: %VRRP-4-BADAUTH: Bad authentication from 172.16.10.2, group 10, type 1
SW1(config-if)#do sh vrrp
Vlan10 - Group 10
  State is Master
  Virtual IP address is 172.16.10.1
  Virtual MAC address is 0000.5e00.010a
  Advertisement interval is 1.000 sec
  Preemption enabled
  Priority is 105
    Track object 101 state Up decrement 50
  Authentication is enabled
  Master Router is 172.16.10.3 (local), priority is 105
  Master Advertisement interval is 1.000 sec
  Master Down interval is 3.589 sec

SW1(config-if)#vrrp 10 authentication md pg1x
SW1(config-if)#vrrp 10 authentication md5
SW1(config-if)#vrrp 10 authentication md5
SW1(config-if)#vrrp 10 authentication ?
  text  TEXT authentication

SW1(config-if)#vrrp 10 authentication te
SW1(config-if)#vrrp 10 authentication text ?
  WORD  authentication string

SW1(config-if)#vrrp 10 authentication ?
  text  TEXT authentication

SW1(config-if)#vrrp 10 authentication md5 ?
% Unrecognized command
SW1(config-if)#vrrp 10 authentication md5 ?
% Unrecognized command
SW1(config-if)#sta
SW1(config-if)#standby 10 au
SW1(config-if)#standby 10 authentication ?
  WORD  Plain text authentication string (8 chars max)
  md5   Use MD5 authentication
  text  Plain text authentication

SW1(config-if)#standby 10 authentication md
SW1(config-if)#vrrp 10 authentication ?
  text  TEXT authentication

SW1(config-if)#vrrp 10 authentication md5 key
SW1(config-if)#vrrp 10 authentication md5 key
SW1(config-if)#vrrp 10 authentication md5 key-string 111
                                      ^
% Invalid input detected at '^' marker.

SW1(config-if)#

SW2#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
SW2(config)#int vlan10
SW2(config-if)#vrr
SW2(config-if)#vrrp 10 au
SW2(config-if)#vrrp 10 authentication te
SW2(config-if)#vrrp 10 authentication text pgg
*Mar  1 01:36:49.966: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.10.3, group 10, type 1, expected 0
SW2(config-if)#vrrp 10 authentication text pggg
SW2(config-if)#vrrp 10 authentication text pg
*Mar  1 01:36:53.783: %VRRP-4-BADAUTH: Bad authentication from 172.16.10.3, group 10, type 1
SW2(config-if)#vrrp 10 authentication text pg1x
SW2(config-if)#
*Mar  1 01:37:02.641: %VRRP-6-STATECHANGE: Vl10 Grp 10 state Master -> Backup

go to opposite side Cisco 1841 router. 

R1#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R1(config)#int f0/0
R1(config-if)#shut
R1(config-if)#
*Sep 22 07:53:39.707: %OSPF-5-ADJCHG: Process 1, Nbr 172.16.10.1 on FastEthernet0/0 from FULL to DOWN, Neighbor Down: Interface down or detached
R1(config-if)#
*Sep 22 07:53:41.699: %LINK-5-CHANGED: Interface FastEthernet0/0, changed state to administratively down
*Sep 22 07:53:42.699: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to down
R1(config-if)#no shut
R1(config-if)#
*Sep 22 07:55:18.859: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up
*Sep 22 07:55:19.859: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
R1(config-if)#
*Sep 22 07:56:28.623: %OSPF-5-ADJCHG: Process 1, Nbr 172.16.10.1 on FastEthernet0/0 from LOADING to FULL, Loading Done
R1(config-if)#int f0/1
R1(config-if)#vrr
R1(config-if)#vrrp 2 ?
  authentication  Authentication
  description     Group specific description
  ip              Enable Virtual Router Redundancy Protocol (VRRP) for IP
  preempt         Enable preemption of lower priority Master
  priority        Priority of this VRRP group
  shutdown        Disable VRRP Configuration
  timers          Set the VRRP timers
  track           Event Tracking

R1(config-if)#vrrp 2 au
R1(config-if)#vrrp 2 authentication ?
  WORD  Plain text authentication string
  md5   Use MD5 authentication
  text  Plain text authentication

R1(config-if)#vrrp 2 authentication md
R1(config-if)#vrrp 2 authentication md5 cisco
                                        ^
% Invalid input detected at '^' marker.

R1(config-if)#vrrp 2 authentication md5 key
R1(config-if)#vrrp 2 authentication md5 key-str
R1(config-if)#vrrp 2 authentication md5 key-string pg1x
R1(config-if)#
*Sep 22 08:03:51.619: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.4, group 2, type 0, expected 254
R1(config-if)#
*Sep 22 08:04:22.059: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.4, group 2, type 0, expected 254
R1(config-if)#
*Sep 22 08:04:52.795: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.4, group 2, type 0, expected 254
R1(config-if)#
*Sep 22 08:05:23.103: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.4, group 2, type 0, expected 254
R1(config-if)#do sh vrrp
FastEthernet0/1 - Group 2
  State is Master
  Virtual IP address is 172.16.2.3
  Virtual MAC address is 0000.5e00.0102
  Advertisement interval is 1.000 sec
  Preemption enabled
  Priority is 255
  Authentication MD5, key-string
  Master Router is 172.16.2.3 (local), priority is 255
  Master Advertisement interval is 1.000 sec
  Master Down interval is 3.003 sec

R1(config-if)#
*Sep 22 08:05:53.683: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.4, group 2, type 0, expected 254
R1(config-if)#
*Sep 22 08:06:24.303: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.4, group 2, type 0, expected 254
R1(config-if)#no vrrp 2 authentication md5 key-string pg1x
R1(config-if)#
*Sep 22 08:10:03.619: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.4, group 2, type 254, expected 0
R1(config-if)#exit
R1(config)#key cha
R1(config)#key chain PG1X
R1(config-keychain)#ke
R1(config-keychain)#key 1
R1(config-keychain-key)#key
R1(config-keychain-key)#key-string ine
R1(config-keychain-key)#exit
R1(config-keychain)#exit
R1(config)#int vlan10
                ^
% Invalid input detected at '^' marker.

R1(config)#int vlan 10
                ^
% Invalid input detected at '^' marker.

R1(config)#int vl
R1(config)#int f0/1
R1(config-if)#int
R1(config-if)#vrrp 2 au
R1(config-if)#vrrp 2 authentication md
R1(config-if)#vrrp 2 authentication md5 key
R1(config-if)#vrrp 2 authentication md5 key-ch
R1(config-if)#vrrp 2 authentication md5 key-chain PG1X
R1(config-if)#do
*Sep 22 08:11:46.251: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.4, group 2, type 0, expected 254
R1(config-if)#do sh vrrp
FastEthernet0/1 - Group 2
  State is Master
  Virtual IP address is 172.16.2.3
  Virtual MAC address is 0000.5e00.0102
  Advertisement interval is 1.000 sec
  Preemption enabled
  Priority is 255
  Authentication MD5, key-chain "PG1X"
  Master Router is 172.16.2.3 (local), priority is 255
  Master Advertisement interval is 1.000 sec
  Master Down interval is 3.003 sec

R1(config-if)#
*Sep 22 08:12:16.499: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.4, group 2, type 0, expected 254
R1(config-if)#
*Sep 22 08:12:46.899: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.4, group 2, type 0, expected 254
R1(config-if)#
*Sep 22 08:13:17.183: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.4, group 2, type 0, expected 254
R1(config-if)#
*Sep 22 08:13:47.343: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.4, group 2, type 0, expected 254
R1(config-if)#

2#
*Sep 22 08:06:36.611: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.3, group 2, type 254, expected 0
R2#
*Sep 22 08:06:39.343: %VRRP-6-STATECHANGE: Fa0/1 Grp 2 state Backup -> Master
R2#
*Sep 22 08:07:06.767: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.3, group 2, type 254, expected 0
R2#
*Sep 22 08:07:37.063: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.3, group 2, type 254, expected 0
R2#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R2(config)#int f0/1
R2(config-if)#vrr
R2(config-if)#vrrp 2
*Sep 22 08:08:07.603: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.3, group 2, type 254, expected 0
R2(config-if)#do sh vrrp
FastEthernet0/1 - Group 2
  State is Master
  Virtual IP address is 172.16.2.3
  Virtual MAC address is 0000.5e00.0102
  Advertisement interval is 1.000 sec
  Preemption enabled
  Priority is 100
  Master Router is 172.16.2.4 (local), priority is 100
  Master Advertisement interval is 1.000 sec
  Master Down interval is 3.609 sec

R2(config-if)#
*Sep 22 08:08:38.159: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.3, group 2, type 254, expected 0
R2(config-if)#vrrp 2 md
R2(config-if)#vrrp 2 auth
R2(config-if)#vrrp 2 authentication md
R2(config-if)#vrrp 2 authentication md5 ke
R2(config-if)#vrrp 2 authentication md5 key-?
key-chain  key-string

R2(config-if)#vrrp 2 authentication md5 key-
*Sep 22 08:09:08.363: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.3, group 2, type 254, expected 0
R2(config-if)#vrrp 2 authentication md5 key-str
R2(config-if)#vrrp 2 authentication md5 key-string pg1x
R2(config-if)#
*Sep 22 08:09:15.911: %VRRP-6-STATECHANGE: Fa0/1 Grp 2 state Master -> Backup
R2(config-if)#
*Sep 22 08:12:48.575: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.3, group 2, type 0, expected 254
R2(config-if)#vrrp 2 authentication md5 key-string pg1x
*Sep 22 08:12:51.343: %VRRP-6-STATECHANGE: Fa0/1 Grp 2 state Backup -> Master
R2(config-if)#no vrrp 2 authentication md5 key-string pg1x
R2(config-if)#
*Sep 22 08:12:54.839: %VRRP-6-STATECHANGE: Fa0/1 Grp 2 state Master -> Backup
R2(config-if)#
*Sep 22 08:14:31.339: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.3, group 2, type 254, expected 0
R2(config-if)#
*Sep 22 08:14:33.979: %VRRP-6-STATECHANGE: Fa0/1 Grp 2 state Backup -> Master
R2(config-if)#exit
R2(config)#keycha
R2(config)#keycha
*Sep 22 08:15:01.499: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.3, group 2, type 254, expected 0
R2(config)#keychai
R2(config)#key cah
R2(config)#key chai
R2(config)#key chain PG1X
R2(config-keychain)#key
R2(config-keychain)#key ?
  <0-2147483647>  Key identifier

R2(config-keychain)#key 1
*Sep 22 08:15:31.779: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.3, group 2, type 254, expected 0
R2(config-keychain)#key 1
R2(config-keychain-key)#vrr
R2(config-keychain-key)#do sh vrrp
FastEthernet0/1 - Group 2
  State is Master
  Virtual IP address is 172.16.2.3
  Virtual MAC address is 0000.5e00.0102
  Advertisement interval is 1.000 sec
  Preemption enabled
  Priority is 100
  Master Router is 172.16.2.4 (local), priority is 100
  Master Advertisement interval is 1.000 sec
  Master Down interval is 3.609 sec

R2(config-keychain-key)#key-str
R2(config-keychain-key)#key-string md
R2(config-keychain-key)#key-string ine
*Sep 22 08:16:02.179: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.3, group 2, type 254, expected 0
R2(config-keychain-key)#key-string ine
R2(config-keychain-key)#exit
R2(config-keychain)#exit
R2(config)#int f0/1
R2(config-if)#vrr
R2(config-if)#vrrp
*Sep 22 08:16:32.215: %VRRP-4-BADAUTHTYPE: Bad authentication from 172.16.2.3, group 2, type 254, expected 0
R2(config-if)#vrrp 2 auth
R2(config-if)#vrrp 2 authentication md
R2(config-if)#vrrp 2 authentication md5 key
R2(config-if)#vrrp 2 authentication md5 key-ch
R2(config-if)#vrrp 2 authentication md5 key-chain ?
  WORD  Name of key-chain

R2(config-if)#vrrp 2 authentication md5 key-chain PG
R2(config-if)#vrrp 2 authentication md5 key-chain PG1X
R2(config-if)#
*Sep 22 08:16:53.799: %VRRP-6-STATECHANGE: Fa0/1 Grp 2 state Master -> Backup
R2(config-if)#do sh vrrp
FastEthernet0/1 - Group 2
  State is Backup
  Virtual IP address is 172.16.2.3
  Virtual MAC address is 0000.5e00.0102
  Advertisement interval is 1.000 sec
  Preemption enabled
  Priority is 100
  Authentication MD5, key-chain "PG1X"
  Master Router is 172.16.2.3, priority is 255
  Master Advertisement interval is 1.000 sec
  Master Down interval is 3.609 sec (expires in 3.253 sec)






















References








                            







                            
                                    


                
tech/network/cisco/vrrp/vrrp.txt · Last modified: 2018/09/22 17:20 by wnoguchi


                            


            


            
            

                
Page Tools

                

                    
                

            

        


        



    
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International

    

        CC Attribution-Share Alike 4.0 International        Donate
        Powered by PHP
        Valid HTML5
        Valid CSS
        Driven by DokuWiki