VRRP Help

Help

What am I missing? I have several VLAN’s lets call them VLAN2 thru VLAN8. Each VLAN has its own /24 subnet 10.1.2.0 thru 10.1.8.0. I have two Routers A & B.

On router A I have set up
7 x Addresses as 10.1.n.2/24 Network 10.1.n.0 Interface VLAN-n (Gateways for each of the 7 LAN’s)
7 x VRRP addresses of 10.1.n.1/24 Network 10.1.n.0 Interface VRRP-n VRID n PRIORITY 255

On router B I have set up
7 x Addresses as 10.1.n.3/24 Network 10.1.n.0 Interface VLAN-n (Gateways for each of the 7 LAN’s)
7 x VRRP addresses of 10.1.n.1/24 Network 10.1.n.0 Interface VRRP-n VRID n PRIORITY 100

Hosts are all on static IP addresses’s 10.1.n.x, NetMask 255.255.255.0, Gateway 10.1.n.1, DNS 10.1.n.1, 8.8.8.8

When I link the two routers (By enabling the VRRP) , I see ‘RED’ IP address conflict errors against the VRRP interfaces in WinBox, and my entire network collapses (not 100% some data is getting round, but it becomes so disorganised, i cant even start to figure out what is going on). I have checked that they are both using the same security model, firmware versions, and both of the VRRP interfaces for each VRRP on each RouterBoard are the same MAC address. Just for clarification both Routers connect to the same WAN on two consecutive addresses x.y.z.2 and x,y,z,3 themselves gatewaying through x,y,z,1.

Have I missed something?

All The Best

Keith

Hi Keith,
I don’t have much knowledge in these areas but it looks like you want to VRRP internet connectivity but you are doing just the opposite? I think what you need is a public IP x.y.z.4 on the VRRP interface.

VRRP addresses on interfaces should be declared as 10.1.n.1**/32**
https://wiki.mikrotik.com/wiki/Manual:VRRP-examples

Thanks for this, I agree with you 100% on the /32 issue, the /24 was a bit confusing for me. However for some reason when I set the VRRP as a /32 my VLAN’s suddenly can’t communicate with each other (regardless of the backup router even being switched on). So this probably isn’t actually a VRRP problem, but possibly a VLAN issue.

Unfortunately I am on a live system that is operational 24x7 and experimentation is somewhat limited, but I will spend the next available session trying to sort out why the VLAN collapses, when I set the VRRP addresses to single addresses.

Thanks for your help, and confirmation that the virtual address should be a single /32 address.
I will let you know how I get on.
Keith

Can somebody explain the VRID, I understand its the ID of a Virtual Router, but how do I use it. Should I have the same VRID on both primary and backup router? should the be diffrent? what about my situation where I have 7 VLAN’s should each VRRP have a different VRID or should all 14 VRID’s across the primary and backup routers be set to the same. The WiKi dosen’t explain it too well.

Keith