Community discussions

MikroTik App
 
bobby93
just joined
Topic Author
Posts: 16
Joined: Mon Mar 18, 2013 4:10 pm

[99% SOLVED] VRRP strange behaviour on RB 1100 AH X2

Mon Mar 18, 2013 4:28 pm

Hi,

i just bought this small RB 1100 AH x2 with RouterOS 5.19 (and firmware 2.39) to use it as a low consumption BGP router (I already have 2 monster quagga x86 ones)

First step, VRRP. I try to pair it with a x86 PC running Advanced-Vrrpd-1.8 from numsys.eu

It should be easy, but I have some strange problems :

- on the PC i can become master or backup with atropos, and the RB1100 really answer to my ping when the PC is backup.
- whatever I do, 40 seconds after becoming backup, the x86 becomes master again, and answer to my ping

On the RB side :
- on the web interface, vrrp1 is always in RB state, even when it's master !
- on the cli interface, vrrp1 is always in RM state, even when it's backup !

Any idea ?

This is my vrrpd command-line on the x86 (I tried with or without -s and with different priorities)
vrrpd -i eth0 -v 13 -M 1 192.168.88.33 -d 2 -p 80 -s -U /etc/VRRP/Master.sh -D /etc/VRRP/Backup.sh (master and backup.sh are empty)

root@gavroche:/home/chris# atropos --state

VRRPD STATE 25310: STATE MASTER

UID PID PPID C STIME TTY TIME CMD
root 25310 1 0 14:39 pts/7 00:00:00 vrrpd -i eth0 -v 13 -M 1 192.168.88.33 -d 2 -p 80 -s -U /etc/VRRP/Master.sh -D /etc/VRRP/Backup.sh

eth0 Current MAC is: 00 00 5e 00 01 0d

Then I switch backup :
root@gavroche:/home/chris# atropos --backup
VRRPD BACKUP
Please wait
Don't use "CTRL+C"
-
DONE

VRRP PID 25310 STATE: STATE BACKUP

UID PID PPID C STIME TTY TIME CMD
root 25310 1 0 14:39 pts/7 00:00:00 vrrpd -i eth0 -v 13 -M 1 192.168.88.33 -d 2 -p 80 -s -U /etc/VRRP/Master.sh -D /etc/VRRP/Backup.sh

eth0 Current MAC is: 50 e5 49 54 fc d7

Be careful, Atropos don't show virtual mac address of vlan interface


Then, after exactly 40 seconds, it always becomes master again. In the PC logs i see each time the same lines :

Mar 18 15:22:36 gavroche vrrpd[25310]: VRRP ID 13 on eth0: we are now a backup router.
Mar 18 15:22:36 gavroche vrrpd[28513]: VRRP ID 13 on eth0: scriptdown: /etc/VRRP/Backup.sh
Mar 18 15:22:36 gavroche vrrpd[25310]: VRRP ID 13 on eth0: Send gratuitous ARP for all ip addresses
Mar 18 15:22:39 gavroche vrrpd[25310]: VRRP ID 13 on eth0: - State INIT -
Mar 18 15:23:16 vrrpd[25310]: last message repeated 13 times
Mar 18 15:23:16 gavroche vrrpd[25310]: VRRP ID 13 on eth0: we are now the master router.

On the RB 1100 AH x2 side I see that :

The cli output :
[admin@MikroTik] > /interface vrrp print
Flags: X - disabled, I - invalid, R - running, M - master, B - backup
# NAME INTERFACE MAC-ADDRESS VRID PRIORITY INTERVAL VERSION V3-PROTOCOL
0 RM vrrp1 ether1 00:00:5E:00:01:0C 12 100 1s 3 ipv4
[admin@MikroTik] > /ip address print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK INTERFACE
0 ;;; default configuration
192.168.88.1/24 192.168.88.0 ether1
1 192.168.88.33/24 192.168.88.0 vrrp1

One last thing : I can see the multicast packets from the PC on the RB, and the multicast packets from the RB on the PC !

Thank you for your help
Last edited by bobby93 on Wed Mar 20, 2013 1:33 pm, edited 1 time in total.
 
regardtv
Frequent Visitor
Frequent Visitor
Posts: 72
Joined: Sat Jan 21, 2006 6:54 pm
Location: Johannesburg, South Africa
Contact:

Re: VRRP strange behaviour on RB 1100 AH X2

Mon Mar 18, 2013 10:05 pm

Hi There.

First off, have a look at the Mikrotik wiki page - http://wiki.mikrotik.com/wiki/VRRP - in regards to VRRP. You'll note that they require the actual VRRP IP to be defined as a /32 not a /24. I've seen some very weird stuff when this is not done.

So, first off, try setting the actualy VRRP-IP to a /32. Also, typically to have a working vrrp configuration the 'host IPs' (ie the static IPs for earch vrrp member) would typically be in the same subnet as the VRRP IP. I don't recall if that's a *required* item but maybe look at that too.

Let us know ;-)
 
bobby93
just joined
Topic Author
Posts: 16
Joined: Mon Mar 18, 2013 4:10 pm

Re: VRRP strange behaviour on RB 1100 AH X2

Tue Mar 19, 2013 12:29 am

Hi, thank you for your answer.

I upgraded to RouterOS 5.24 and tried with /32, same problem.

My IP addresses are in the same subnet (at least, vrrp1 ip is within the ether1 subnet) :

[admin@MikroTik] > ip address print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK INTERFACE
0 ;;; default configuration
192.168.88.1/24 192.168.88.0 ether1
1 192.168.88.33/32 192.168.88.33 vrrp1
 
bobby93
just joined
Topic Author
Posts: 16
Joined: Mon Mar 18, 2013 4:10 pm

Re: VRRP strange behaviour on RB 1100 AH X2

Tue Mar 19, 2013 8:24 am

Same problem as well when I switch to version 2 VRRP instead of version 3.
 
wimuny
just joined
Posts: 3
Joined: Tue Mar 19, 2013 12:26 pm

Re: VRRP strange behaviour on RB 1100 AH X2

Tue Mar 19, 2013 12:44 pm

Hello,

Maybe you should remove the preempt option and -p 80
Also try -n option (without virtual mac)

Can you see the vrrpd's packets with tcpdump (I mean the same packets VID, auth, etc) ?
 
bobby93
just joined
Topic Author
Posts: 16
Joined: Mon Mar 18, 2013 4:10 pm

Re: VRRP strange behaviour on RB 1100 AH X2

Tue Mar 19, 2013 11:32 pm

Same problem without -s and -p 80 (I added them after the problem, but I tried again with new release to be sure, it's not better)

The virtual mac is necessary on my network.

But the tcpdump is strange ! I see the VRRP packet from the microtik, but only IGMP packets from my second router ???

22:36:49.626128 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:36:50.627186 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:36:51.628251 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:04.641383 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:05.642448 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:06.643510 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:07.644583 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:08.645649 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:09.646713 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:10.647781 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:11.648851 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:12.649909 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:15.652738 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:20.658063 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:21.659133 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:22.660204 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:23.661263 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:24.661980 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:25.663052 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:26.664121 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:27.665173 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:28.666248 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:28.704297 IP gavroche.local > all-routers.mcast.net: igmp leave vrrp.mcast.net
22:37:29.412006 IP gavroche.local > vrrp.mcast.net: igmp v2 report vrrp.mcast.net
22:37:29.667304 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:33.671554 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:34.159987 IP gavroche.local > vrrp.mcast.net: igmp v2 report vrrp.mcast.net
22:37:34.672285 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:35.673332 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:36.674410 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:37.675463 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:38.676525 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:39.677586 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:40.678666 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:41.679708 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:42.680775 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:43.681837 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:44.682571 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
22:37:45.683645 IP 192.168.88.1 > vrrp.mcast.net: VRRPv2, Advertisement, vrid 12, prio 100, authtype none, intvl 1s, length 20
 
wimuny
just joined
Posts: 3
Joined: Tue Mar 19, 2013 12:26 pm

Re: VRRP strange behaviour on RB 1100 AH X2

Wed Mar 20, 2013 10:08 am

You should only look the packet from the master
Strange thing the interval is not the same -d 2 , intvl 1s from Mikrotik
And also the vrid is not the same 12 and 13 ?

About vmac some switches are incompatible can you make a test ?
 
bobby93
just joined
Topic Author
Posts: 16
Joined: Mon Mar 18, 2013 4:10 pm

[99% SOLVED] Re: VRRP strange behaviour on RB 1100 AH X2

Wed Mar 20, 2013 1:32 pm

And also the vrid is not the same 12 and 13 ?
That was the problem. In fact I was quite sure at beginning it needed the same vrid, but as it didn't work I read again the manual, and I understood it differently, then I tried 2 different ID.

But the always "Running Backup" state on the web interface and the "Running Master" state on the console interface made me think there was a bug on the Microtik side... There's probably a bug, but only regarding the displayed state. It's quite annoying though !

Thank you for your help, and sorry for this basic mistake.

Does someone have an idea about this display bug ?
 
wimuny
just joined
Posts: 3
Joined: Tue Mar 19, 2013 12:26 pm

Re: [99% SOLVED] VRRP strange behaviour on RB 1100 AH X2

Wed Mar 20, 2013 2:13 pm

Sorry I'm using only using advance-vrrpd with Linux, I know nothing about Microtik version
 
siberx
just joined
Posts: 2
Joined: Wed Jan 05, 2011 5:06 am

Re: [99% SOLVED] VRRP strange behaviour on RB 1100 AH X2

Sat Nov 02, 2013 12:33 am

Sorry for dredging up an older thread, but I would just like to add that I have recently discovered the display bug mentioned by bobby93; I am running v6.4 on a pair of RB2011s with a single VRRP interface enabled. In winbox, the current master shows RM as expected, and the backup shows B as expected.

In the web interface however, the current master shows "RB" (Running and Backup) and the slave shows nothing (no letters at all). It seems like the web interface isn't handling the display of these flags correctly, although the VRRP seems to be otherwise working just fine.

Who is online

Users browsing this forum: bertus, GoogleOther [Bot], JesusUve, xrlls and 97 guests