IP address on backup VRRP is invalid

RouterOS General
1

Hi!
I have two 951Ui-2HnD: R1 & R2, same last firmware: 3.41 ar9344
I have invalid state ip adddress on backup vrrp intrafaces, but Master vrrp - ok, is it normal:


                                                                       
[user@R1] /interface vrrp> print 
Flags: X - disabled, I - invalid, R - running, M - master, B - backup 
 #     NAME                             INTERFACE                             MAC-ADDRESS       VRID PRIORITY INTERVAL             VERSION V3-PROTOCOL
 0  RM ;;; default-pri-150
       vrrp-gateway                     bridge                                00:00:5E:00:01:01    1      150 1s                   3       ipv4       
 1  RM ;;; vrrp-mgmt
       vrrp-mgmt                        vlan9                                 00:00:5E:00:01:01    1      150 1s                   3       ipv4   
[user@R1] /interface vrrp> / ip address print 
Flags: X - disabled, I - invalid, D - dynamic 
 #   ADDRESS            NETWORK         INTERFACE                                                                                                     
 0   172.17.12.2/23     172.17.12.0     bridge                                                                                                        
 1   172.17.12.1/23     172.17.12.0     vrrp-gateway                                                                                                  
 2   192.168.88.2/24    192.168.88.0    vlan9                                                                                                         
 3   192.168.82.1/24    192.168.82.0    vrrp-mgmt                                                                                                     
 4 D 192.168.0.182/24   192.168.0.0     lte1




[user@R2] /interface vrrp> print 
Flags: X - disabled, I - invalid, R - running, M - master, B - backup 
 #     NAME                             INTERFACE                             MAC-ADDRESS       VRID PRIORITY INTERVAL             VERSION V3-PROTOCOL
 0   B ;;; default-pri-50
       vrrp-gateway                     bridge                                00:00:5E:00:01:01    1       50 1s                   3       ipv4       
 1   B ;;; vrrp-mgmt
       vrrp-mgmt                        vlan9                                 00:00:5E:00:01:01    1       50 1s                   3       ipv4       
[user@R2] /interface vrrp> /ip address print 
Flags: X - disabled, I - invalid, D - dynamic 
 #   ADDRESS            NETWORK         INTERFACE                                                                                                     
0   172.17.12.3/23     172.17.12.0     bridge     
1 I 172.17.12.1/23     172.17.12.0     vrrp-gateway          
2   192.168.82.3/32    192.168.82.3    vlan9       
3 I 192.168.82.1/24    192.168.82.0    vrrp-mgmt
4 D 192.168.0.182/24   192.168.0.0     lte1




Regards!

2

It is OK: as soon as Master is not reachable, Backup VRRP will put their IPs on valid state.

3

I think, you got your subnet masks wrong.
VRRP-Interfaces always should be configured with /32

4

No, it is not necessary. The objective of VRRP is to have two or more devices for failover. If the main fails, the backup actives the IP that is shared in both routers (that is, configured the SAME IP address in vrrp interfaces of both routers).

In this case, @dcmail seems that the IP address that has to be backed-up is 192.168.82.1/24, so that is the address to vrrp in both routers. But, as there can’t be two devices with the same IP address at the same time, IP address on backup stays INVALID until master fails.

It is everything correct

5

/32 is invalid too:

/ip address print
2 I 172.17.12.1/32     172.17.12.0     vrrp-gateway                                                                                                  
 4 I 192.168.82.1/32    192.168.82.0    vrrp-mgmt
6

Wow, thank you for the detailed answer!