Vrrp in two vyos routers

Bugs
1

Hi Team,

I want to configure the vrrp protocol in between the vyos router.
vyos1 subnet : 172.16.16.0/24. and interfaces IP is .230/24 and VIF is .254
vyos2 subnet : 192.168.1.0/24. and interfaces IP is .231/24 and VIF is .254

but it’s not working as a master and backup, why ?

2

Can you post some relevant config?

3

vyos 1

set interfaces bonding eth0 address 172.16.16.230/24
set interfaces bonding eth0 vrrp vrrp-group 3 preempt
set interfaces bonding eth0 vrrp vrrp-group 3 priority 200
set interfaces bonding eth0 vrrp vrrp-group 3 virtual-address 172.16.16.254

vyos2
set interfaces bonding eth0 address 192.168.1.230/24
set interfaces bonding eth0 vrrp vrrp-group 3 preempt
set interfaces bonding eth0 vrrp vrrp-group 3 priority 200
set interfaces bonding eth0 vrrp vrrp-group 3 virtual-address 192.168.1.254

4

You use some EOL image

5

these are vyos 1.4 latest images

6

VyOS 1.4 doesn’t have this syntax, it was in 1.1.7 or maybe 1.1.8

The current syntax

set high-availability vrrp group foo interface ethX

https://docs.vyos.io/en/latest/configuration/highavailability/index.html

7

Can you please send me the complete commands for this vrrp for both of routers ?

9

There is an example

10

this example using same subnet, but i need help in different subnets.
172.16.16.0/24.
192.168.1.0/24

11

Create another VRRP group for the second subnet if it uses another interface

12

Each vyos router will need an interface on a same subnet.
So, eth0 on vyos-1 and eth0 on vyos-2 belong to the same subnet.
Then, eth1 on vyos-1 and eth1 on vyos-2 belong to the same subnet.
vyos-1
eth0 : 172.16.16.252/24
eth1 : 192.168.1.253/24
vrrp-group 1 eth0: 172.16.16.254
vrrp-group 2 eth1: 192.168.1.254

vyos-2
eth0 : 172.16.16.253/24
eth1 : 192.168.1.253/24
vrrp-group 1 eth0: 172.16.16.254
vrrp-group 2 eth1: 192.168.1.254

13

Your solution can be like this:

In Router 1

set interfaces ethernet eth0 address ‘172.16.16.252/24’
set interfaces ethernet eth1 address ‘192.168.1.252/24’

set high-availability vrrp group Group-01 interface ‘eth0’
set high-availability vrrp group Group-01 preempt-delay ‘180’
set high-availability vrrp group Group-01 priority ‘200’
set high-availability vrrp group Group-01 virtual-address 172.16.16.254/24
set high-availability vrrp group Group-01 vrid ‘11’

set high-availability vrrp group Group-02 interface ‘eth1’
set high-availability vrrp group Group-02 preempt-delay ‘180’
set high-availability vrrp group Group-02 priority ‘200’
set high-availability vrrp group Group-02 virtual-address 192.168.1.254/24
set high-availability vrrp group Group-02 vrid ‘12’

In Router 2

set interfaces ethernet eth0 address ‘172.16.16.253/24’
set interfaces ethernet eth1 address ‘192.168.1.253/24’

set high-availability vrrp group Group-01 interface ‘eth0’
set high-availability vrrp group Group-01 preempt-delay ‘180’
set high-availability vrrp group Group-01 priority ‘100’
set high-availability vrrp group Group-01 virtual-address 172.16.16.254/24
set high-availability vrrp group Group-01 vrid ‘11’

set high-availability vrrp group Group-02 interface ‘eth1’
set high-availability vrrp group Group-02 preempt-delay ‘180’
set high-availability vrrp group Group-02 priority ‘100’
set high-availability vrrp group Group-02 virtual-address 192.168.1.254/24
set high-availability vrrp group Group-02 vrid ‘12’

Aditionally you can change preempt-delay or just set no-preempt. It depends on your requirements.

1 Like