[SOLVED] Configuring VRRP for Load Sharing

[Grogman]

Hi,

I’m trying to build an scenario like the one depicted here: Example: Configuring VRRP for Load Sharing | Junos OS | Juniper Networks

The idea is to have two routers with two separate VRRP instances on the same interface (eth1). Each router would be the master of one of the groups, so we can have an active-active VRRP scenario.

I’m using the following configuration:

Router 1:

set interfaces ethernet eth1 duplex ‘auto’
set interfaces ethernet eth1 smp-affinity ‘auto’
set interfaces ethernet eth1 speed ‘auto’
set interfaces ethernet eth1 address ‘10.5.94.3/24’
set interfaces ethernet eth1 firewall local name ‘LOCAL-LAN-IPv4’
set interfaces ethernet eth1 vrrp vrrp-group 250 advertise-interval ‘3’
set interfaces ethernet eth1 vrrp vrrp-group 250 preempt ‘true’
set interfaces ethernet eth1 vrrp vrrp-group 250 preempt-delay ‘30’
set interfaces ethernet eth1 vrrp vrrp-group 250 priority ‘150’
set interfaces ethernet eth1 vrrp vrrp-group 250 ‘rfc3768-compatibility’
set interfaces ethernet eth1 vrrp vrrp-group 250 sync-group ‘VRRP-GROUP’
set interfaces ethernet eth1 vrrp vrrp-group 250 virtual-address ‘10.5.94.1/32’
set interfaces ethernet eth1 vrrp vrrp-group 251 advertise-interval ‘3’
set interfaces ethernet eth1 vrrp vrrp-group 251 preempt ‘true’
set interfaces ethernet eth1 vrrp vrrp-group 251 preempt-delay ‘30’
set interfaces ethernet eth1 vrrp vrrp-group 251 ‘rfc3768-compatibility’
set interfaces ethernet eth1 vrrp vrrp-group 251 sync-group ‘VRRP-GROUP2’
set interfaces ethernet eth1 vrrp vrrp-group 251 virtual-address ‘10.5.94.2/32’

Router 2:

set interfaces ethernet eth1 duplex ‘auto’
set interfaces ethernet eth1 smp-affinity ‘auto’
set interfaces ethernet eth1 speed ‘auto’
set interfaces ethernet eth1 address ‘10.5.94.4/24’
set interfaces ethernet eth1 firewall local name ‘LOCAL-LAN-IPv4’
set interfaces ethernet eth1 vrrp vrrp-group 250 advertise-interval ‘3’
set interfaces ethernet eth1 vrrp vrrp-group 250 preempt ‘true’
set interfaces ethernet eth1 vrrp vrrp-group 250 preempt-delay ‘30’
set interfaces ethernet eth1 vrrp vrrp-group 250 ‘rfc3768-compatibility’
set interfaces ethernet eth1 vrrp vrrp-group 250 sync-group ‘VRRP-GROUP’
set interfaces ethernet eth1 vrrp vrrp-group 250 virtual-address ‘10.5.94.1/32’
set interfaces ethernet eth1 vrrp vrrp-group 251 advertise-interval ‘3’
set interfaces ethernet eth1 vrrp vrrp-group 251 preempt ‘true’
set interfaces ethernet eth1 vrrp vrrp-group 251 preempt-delay ‘30’
set interfaces ethernet eth1 vrrp vrrp-group 251 priority ‘150’
set interfaces ethernet eth1 vrrp vrrp-group 251 ‘rfc3768-compatibility’
set interfaces ethernet eth1 vrrp vrrp-group 251 sync-group ‘VRRP-GROUP2’
set interfaces ethernet eth1 vrrp vrrp-group 251 virtual-address ‘10.5.94.2/32’

My problem is, group 250 works fine, router 1 becomes the master with priority 150 (router 2 has the default priority of 100), but as soon as router 2 becomes the backup for that group, it stops sending multicast announcements for both groups 250 and 251. Router 2 shows itself as master of group 251, but since it doesn’t send the multicast announcements for that group, router 1 believes it’s also the master for 251.

I can’t really understand why router 2 stops sending the multicast advertisements of group 251 when it becomes the backup router in group 250 (If I disable eth1 in router 1, router 2 starts sending the multicast advertisements for both groups, as soon as it becomes master of 250).

I’m not sure if it’s some kind of keepalived limitation for using multiple instances in the same interface, or if I’m doing something wrong. I’ve also tried to configure secondary IP addresses on the interface, and having separate hello-source-addresses for each group, but the result is always the same.

Any ideas?

I’m using VMs with VyOS 1.1.8 (helium).

Thanks!

[hemant]

I just tested this & works fine for me. Look at the screenshot for the output & Wireshark capture

My config is pretty straight-forward exactly like that of yours. Can you do a packet capture between the 2 interfaces?

[hemant]

VyOS - VRRP Router config for your reference (almost exactly similar as that of yours)

[Grogman]

Hi hemant,

Now it works!!

It seems the problem was with the rfc3768-compatibility, although I was convinced I had tried to remove it previously. Anyway, after seeing your working configuration, I focused on the differences with mine, and removing the rfc3768-compatibility option is what did the trick.

Thank you very much for your help!!