VRRP inactive flag on some interfaces, why??

This is RB800 running v5.6.
I’m puzzled on why some VRRP interfaces are flagged as invalid.
Configuration for all VRRP interfaces is similar.
Any hints?

/interface vrrp print
Flags: X - disabled, I - invalid, R - running, M - master, B - backup
 #     NAME                INTERFACE                MAC-ADDRESS       VRID PRIORITY INTERVAL             VERSION V3-PROTOCOL
 0  RM vrrp101             vlan101                  00:00:5E:00:01:01    1      105 1s                   2       ipv4
 1  RM vrrp202             vlan202                  00:00:5E:00:01:01    1      105 1s                   2       ipv4
 2  RM vrrp1000            vlan1000                 00:00:5E:00:01:01    1      105 1s                   2       ipv4
 3  RM vrrp1001            vlan1001                 00:00:5E:00:01:01    1      105 1s                   2       ipv4
 4 I   vrrp1002            vlan1002                 00:00:5E:00:01:01    1      105 1s                   2       ipv4
 5 I   vrrp1003            vlan1003                 00:00:5E:00:01:01    1      105 1s                   2       ipv4
 6 I   vrrp1004            vlan1004                 00:00:5E:00:01:01    1      105 1s                   2       ipv4



/system resource print
                   uptime: 6m10s
                  version: 5.6
              free-memory: 225428KiB
             total-memory: 256320KiB
                      cpu: e500v2
                cpu-count: 1
            cpu-frequency: 799MHz
                 cpu-load: 17%
           free-hdd-space: 463812KiB
          total-hdd-space: 520192KiB
  write-sect-since-reboot: 926
         write-sect-total: 2510773
               bad-blocks: 0%
        architecture-name: powerpc
               board-name: RB800
                 platform: MikroTik

Most likely cause is that the physical interface that the VRRP interface is attached to isn’t right.

Can you post the output of "/interface vrrp export, “/interface vlan export”, as well as “/interface print detail”, “/ip address print detail” and “/ip route print detail”?

Sure, please see below.



/interface vrrp export
# jan/01/1970 21:47:09 by RouterOS 5.6
# software id = 80HX-K4N1
#
/interface vrrp
add arp=enabled authentication=none disabled=no interface=vlan101 interval=1s mtu=1500 name=vrrp101 on-backup="" \
    on-master="" password="" preemption-mode=yes priority=105 v3-protocol=ipv4 version=2 vrid=1
add arp=enabled authentication=none disabled=no interface=vlan202 interval=1s mtu=1500 name=vrrp202 on-backup="" \
    on-master="" password="" preemption-mode=yes priority=105 v3-protocol=ipv4 version=2 vrid=1
add arp=enabled authentication=none disabled=no interface=vlan1000 interval=1s mtu=1500 name=vrrp1000 on-backup="" \
    on-master="" password="" preemption-mode=yes priority=105 v3-protocol=ipv4 version=2 vrid=1
add arp=enabled authentication=none disabled=no interface=vlan1001 interval=1s mtu=1500 name=vrrp1001 on-backup="" \
    on-master="" password="" preemption-mode=yes priority=105 v3-protocol=ipv4 version=2 vrid=1
add arp=enabled authentication=none disabled=no interface=vlan1002 interval=1s mtu=1500 name=vrrp1002 on-backup="" \
    on-master="" password="" preemption-mode=yes priority=105 v3-protocol=ipv4 version=2 vrid=1
add arp=enabled authentication=none disabled=no interface=vlan1003 interval=1s mtu=1500 name=vrrp1003 on-backup="" \
    on-master="" password="" preemption-mode=yes priority=105 v3-protocol=ipv4 version=2 vrid=1
add arp=enabled authentication=none disabled=no interface=vlan1004 interval=1s mtu=1500 name=vrrp1004 on-backup="" \
    on-master="" password="" preemption-mode=yes priority=105 v3-protocol=ipv4 version=2 vrid=1

/interface vlan export
# jan/01/1970 21:47:59 by RouterOS 5.6
# software id = 80HX-K4N1
#
/interface vlan
add arp=enabled disabled=no interface=ether2 l2mtu=1596 mtu=1500 name=vlan10 use-service-tag=no vlan-id=10
add arp=enabled disabled=no interface=ether2 l2mtu=1596 mtu=1500 name=vlan101 use-service-tag=no vlan-id=101
add arp=enabled disabled=no interface=ether3 l2mtu=1596 mtu=1500 name=vlan2 use-service-tag=no vlan-id=2
add arp=enabled disabled=no interface=ether2 l2mtu=1596 mtu=1500 name=vlan202 use-service-tag=no vlan-id=202
add arp=enabled disabled=no interface=ether2 l2mtu=1596 mtu=1500 name=vlan1000 use-service-tag=no vlan-id=1000
add arp=enabled disabled=no interface=ether2 l2mtu=1596 mtu=1500 name=vlan1001 use-service-tag=no vlan-id=1001
add arp=enabled disabled=no interface=ether2 l2mtu=1596 mtu=1500 name=vlan1002 use-service-tag=no vlan-id=1002
add arp=enabled disabled=no interface=ether2 l2mtu=1596 mtu=1500 name=vlan1003 use-service-tag=no vlan-id=1003
add arp=enabled disabled=no interface=ether2 l2mtu=1596 mtu=1500 name=vlan1004 use-service-tag=no vlan-id=1004

/interface print detail
Flags: D - dynamic, X - disabled, R - running, S - slave
 0  R  name="ether3" type="ether" mtu=1500 l2mtu=1600 max-l2mtu=9116

 1  R  name="ether1" type="ether" mtu=1500 l2mtu=1600 max-l2mtu=9500

 2  R  name="ether2" type="ether" mtu=1500 l2mtu=1600 max-l2mtu=9500

 3  R  name="vlan10" type="vlan" mtu=1500 l2mtu=1596

 4  R  name="vlan101" type="vlan" mtu=1500 l2mtu=1596

 5  R  name="vlan2" type="vlan" mtu=1500 l2mtu=1596

 6  R  name="loopback0" type="bridge" mtu=1500 l2mtu=65535

 7  R  name="vrrp101" type="vrrp" mtu=1500

 8  R  name="vlan202" type="vlan" mtu=1500 l2mtu=1596

 9  R  name="vrrp202" type="vrrp" mtu=1500

10  R  name="vlan1000" type="vlan" mtu=1500 l2mtu=1596

11  R  name="vrrp1000" type="vrrp" mtu=1500

12  R  name="vlan1001" type="vlan" mtu=1500 l2mtu=1596

13  R  name="vrrp1001" type="vrrp" mtu=1500

14  R  name="vlan1002" type="vlan" mtu=1500 l2mtu=1596

15     name="vrrp1002" type="vrrp" mtu=1500

16  R  name="vlan1003" type="vlan" mtu=1500 l2mtu=1596

17     name="vrrp1003" type="vrrp" mtu=1500

18  R  name="vlan1004" type="vlan" mtu=1500 l2mtu=1596

19     name="vrrp1004" type="vrrp" mtu=1500

/ip address print detail
Flags: X - disabled, I - invalid, D - dynamic
 0   ;;; default configuration
     address=192.168.88.1/24 network=192.168.88.0 interface=ether1 actual-interface=ether1

 1   address=200.202.114.146/30 network=200.202.114.144 interface=ether1 actual-interface=ether1

 2   address=10.0.0.151/24 network=10.0.0.0 interface=vlan10 actual-interface=vlan10

 3   address=192.168.0.1/30 network=192.168.0.0 interface=ether3 actual-interface=ether3

 4   address=192.168.1.1/30 network=192.168.1.0 interface=vlan2 actual-interface=vlan2

 5   address=1.1.1.1/32 network=1.1.1.1 interface=loopback0 actual-interface=loopback0

 6   address=200.202.114.153/29 network=200.202.114.152 interface=vlan101 actual-interface=vlan101

 7   address=200.202.114.155/32 network=200.202.114.155 interface=vrrp101 actual-interface=vrrp101

 8   address=200.202.114.161/29 network=200.202.114.160 interface=vlan202 actual-interface=vlan202

 9   address=200.202.114.163/32 network=200.202.114.163 interface=vrrp202 actual-interface=vrrp202

10   address=10.10.0.1/24 network=10.10.0.0 interface=vlan1000 actual-interface=vlan1000

11   address=10.10.0.3/32 network=10.10.0.3 interface=vrrp1000 actual-interface=vrrp1000

12   address=10.10.1.1/24 network=10.10.1.0 interface=vlan1001 actual-interface=vlan1001

13   address=10.10.1.3/32 network=10.10.1.3 interface=vrrp1001 actual-interface=vrrp1001

14   address=10.10.2.1/24 network=10.10.2.0 interface=vlan1002 actual-interface=vlan1002

15 I address=10.10.2.3/32 network=10.10.2.3 interface=vrrp1002 actual-interface=vrrp1002

16   address=10.10.3.1/24 network=10.10.3.0 interface=vlan1003 actual-interface=vlan1003

17 I address=10.10.3.3/32 network=10.10.3.3 interface=vrrp1003 actual-interface=vrrp1003

18   address=10.10.4.1/24 network=10.10.4.0 interface=vlan1004 actual-interface=vlan1004

19 I address=10.10.4.3/32 network=10.10.4.3 interface=vrrp1004 actual-interface=vrrp1004

/ip route print detail
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
 0 ADb  dst-address=0.0.0.0/0 gateway=200.202.114.145 gateway-status=200.202.114.145 reachable ether1 distance=20 scope=40
        target-scope=10 bgp-as-path="15180" bgp-local-pref=200 bgp-med=0 bgp-origin=igp received-from=peer1

 1  Db  dst-address=0.0.0.0/0 gateway=200.202.114.149 gateway-status=200.202.114.149 unreachable distance=200 scope=40
        target-scope=30 bgp-as-path="15180" bgp-local-pref=100 bgp-origin=igp received-from=peer2

 2 ADC  dst-address=1.1.1.1/32 pref-src=1.1.1.1 gateway=loopback0 gateway-status=loopback0 reachable distance=0 scope=10

 3 ADo  dst-address=2.2.2.2/32 gateway=192.168.1.2,192.168.0.2
        gateway-status=192.168.1.2 reachable vlan2,192.168.0.2 reachable ether3 distance=110 scope=20 target-scope=10
        ospf-metric=20 ospf-type=intra-area

 4 ADC  dst-address=10.0.0.0/24 pref-src=10.0.0.151 gateway=vlan10 gateway-status=vlan10 reachable distance=0 scope=10

 5 ADC  dst-address=10.10.0.0/24 pref-src=10.10.0.1 gateway=vlan1000 gateway-status=vlan1000 reachable distance=0 scope=10

 6 ADC  dst-address=10.10.0.3/32 pref-src=10.10.0.3 gateway=vrrp1000 gateway-status=vrrp1000 reachable distance=0 scope=10

 7 ADC  dst-address=10.10.1.0/24 pref-src=10.10.1.1 gateway=vlan1001 gateway-status=vlan1001 reachable distance=0 scope=10

 8 ADC  dst-address=10.10.1.3/32 pref-src=10.10.1.3 gateway=vrrp1001 gateway-status=vrrp1001 reachable distance=0 scope=10

 9 ADC  dst-address=10.10.2.0/24 pref-src=10.10.2.1 gateway=vlan1002 gateway-status=vlan1002 reachable distance=0 scope=10

10 ADC  dst-address=10.10.3.0/24 pref-src=10.10.3.1 gateway=vlan1003 gateway-status=vlan1003 reachable distance=0 scope=10

11 ADC  dst-address=10.10.4.0/24 pref-src=10.10.4.1 gateway=vlan1004 gateway-status=vlan1004 reachable distance=0 scope=10

Huh. That all looks fine - unless I’m missing something that should work.

Here’s a wild stab in the dark: try setting a unique vrid per VRRP instance. On most other platforms it doesn’t matter if they’re the same as long as the interfaces are different, but maybe that’ll fix it.

Also, try enabling logging for VRRP and see what the logs say.

Does the interface for VLAN 1002 come up when you shut down one of the running ones?

Hmmm, I was able to fix things by bouncing the VLAN interfaces as follows:

/interface vlan set [find] disabled=yes
/interface vlan set [find] disabled=no

I don’t understand why a /system reboot didn’t fix it.
Scary.

For the records, I’ve just confirmed that rebooting raises the issue again…

Symptom:
Several VRRP interfaces flagged as I - invalid.

/interface vrrp print
Flags: X - disabled, I - invalid, R - running, M - master, B - backup
 #     NAME                INTERFACE                MAC-ADDRESS       VRID PRIORITY INTERVAL             VERSION V3-PROTOCOL
 0  RM vrrp101             vlan101                  00:00:5E:00:01:01    1      105 1s                   2       ipv4
 1  RM vrrp202             vlan202                  00:00:5E:00:01:01    1      105 1s                   2       ipv4
 2  RM vrrp1000            vlan1000                 00:00:5E:00:01:01    1      105 1s                   2       ipv4
 3 I   vrrp1001            vlan1001                 00:00:5E:00:01:01    1      105 1s                   2       ipv4
 4 I   vrrp1002            vlan1002                 00:00:5E:00:01:01    1      105 1s                   2       ipv4
 5 I   vrrp1003            vlan1003                 00:00:5E:00:01:01    1      105 1s                   2       ipv4

Trigger:

/system reboot

Work-around:

/interface vlan set [find] disabled=yes
/interface vlan set [find] disabled=no

still present in 5.7…

mikroitk ? we’re miss you :wink: