This is RB800 running v5.6.
I’m puzzled on why some VRRP interfaces are flagged as invalid.
Configuration for all VRRP interfaces is similar.
Any hints?
/interface vrrp print
Flags: X - disabled, I - invalid, R - running, M - master, B - backup
# NAME INTERFACE MAC-ADDRESS VRID PRIORITY INTERVAL VERSION V3-PROTOCOL
0 RM vrrp101 vlan101 00:00:5E:00:01:01 1 105 1s 2 ipv4
1 RM vrrp202 vlan202 00:00:5E:00:01:01 1 105 1s 2 ipv4
2 RM vrrp1000 vlan1000 00:00:5E:00:01:01 1 105 1s 2 ipv4
3 RM vrrp1001 vlan1001 00:00:5E:00:01:01 1 105 1s 2 ipv4
4 I vrrp1002 vlan1002 00:00:5E:00:01:01 1 105 1s 2 ipv4
5 I vrrp1003 vlan1003 00:00:5E:00:01:01 1 105 1s 2 ipv4
6 I vrrp1004 vlan1004 00:00:5E:00:01:01 1 105 1s 2 ipv4
/system resource print
uptime: 6m10s
version: 5.6
free-memory: 225428KiB
total-memory: 256320KiB
cpu: e500v2
cpu-count: 1
cpu-frequency: 799MHz
cpu-load: 17%
free-hdd-space: 463812KiB
total-hdd-space: 520192KiB
write-sect-since-reboot: 926
write-sect-total: 2510773
bad-blocks: 0%
architecture-name: powerpc
board-name: RB800
platform: MikroTik
fewi
August 9, 2011, 8:49pm
2
Most likely cause is that the physical interface that the VRRP interface is attached to isn’t right.
Can you post the output of "/interface vrrp export, “/interface vlan export”, as well as “/interface print detail”, “/ip address print detail” and “/ip route print detail”?
Sure, please see below.
fewi:
Most likely cause is that the physical interface that the VRRP interface is attached to isn’t right.
Can you post the output of "/interface vrrp export, “/interface vlan export”, as well as “/interface print detail”, “/ip address print detail” and “/ip route print detail”?
/interface vrrp export
# jan/01/1970 21:47:09 by RouterOS 5.6
# software id = 80HX-K4N1
#
/interface vrrp
add arp=enabled authentication=none disabled=no interface=vlan101 interval=1s mtu=1500 name=vrrp101 on-backup="" \
on-master="" password="" preemption-mode=yes priority=105 v3-protocol=ipv4 version=2 vrid=1
add arp=enabled authentication=none disabled=no interface=vlan202 interval=1s mtu=1500 name=vrrp202 on-backup="" \
on-master="" password="" preemption-mode=yes priority=105 v3-protocol=ipv4 version=2 vrid=1
add arp=enabled authentication=none disabled=no interface=vlan1000 interval=1s mtu=1500 name=vrrp1000 on-backup="" \
on-master="" password="" preemption-mode=yes priority=105 v3-protocol=ipv4 version=2 vrid=1
add arp=enabled authentication=none disabled=no interface=vlan1001 interval=1s mtu=1500 name=vrrp1001 on-backup="" \
on-master="" password="" preemption-mode=yes priority=105 v3-protocol=ipv4 version=2 vrid=1
add arp=enabled authentication=none disabled=no interface=vlan1002 interval=1s mtu=1500 name=vrrp1002 on-backup="" \
on-master="" password="" preemption-mode=yes priority=105 v3-protocol=ipv4 version=2 vrid=1
add arp=enabled authentication=none disabled=no interface=vlan1003 interval=1s mtu=1500 name=vrrp1003 on-backup="" \
on-master="" password="" preemption-mode=yes priority=105 v3-protocol=ipv4 version=2 vrid=1
add arp=enabled authentication=none disabled=no interface=vlan1004 interval=1s mtu=1500 name=vrrp1004 on-backup="" \
on-master="" password="" preemption-mode=yes priority=105 v3-protocol=ipv4 version=2 vrid=1
/interface vlan export
# jan/01/1970 21:47:59 by RouterOS 5.6
# software id = 80HX-K4N1
#
/interface vlan
add arp=enabled disabled=no interface=ether2 l2mtu=1596 mtu=1500 name=vlan10 use-service-tag=no vlan-id=10
add arp=enabled disabled=no interface=ether2 l2mtu=1596 mtu=1500 name=vlan101 use-service-tag=no vlan-id=101
add arp=enabled disabled=no interface=ether3 l2mtu=1596 mtu=1500 name=vlan2 use-service-tag=no vlan-id=2
add arp=enabled disabled=no interface=ether2 l2mtu=1596 mtu=1500 name=vlan202 use-service-tag=no vlan-id=202
add arp=enabled disabled=no interface=ether2 l2mtu=1596 mtu=1500 name=vlan1000 use-service-tag=no vlan-id=1000
add arp=enabled disabled=no interface=ether2 l2mtu=1596 mtu=1500 name=vlan1001 use-service-tag=no vlan-id=1001
add arp=enabled disabled=no interface=ether2 l2mtu=1596 mtu=1500 name=vlan1002 use-service-tag=no vlan-id=1002
add arp=enabled disabled=no interface=ether2 l2mtu=1596 mtu=1500 name=vlan1003 use-service-tag=no vlan-id=1003
add arp=enabled disabled=no interface=ether2 l2mtu=1596 mtu=1500 name=vlan1004 use-service-tag=no vlan-id=1004
/interface print detail
Flags: D - dynamic, X - disabled, R - running, S - slave
0 R name="ether3" type="ether" mtu=1500 l2mtu=1600 max-l2mtu=9116
1 R name="ether1" type="ether" mtu=1500 l2mtu=1600 max-l2mtu=9500
2 R name="ether2" type="ether" mtu=1500 l2mtu=1600 max-l2mtu=9500
3 R name="vlan10" type="vlan" mtu=1500 l2mtu=1596
4 R name="vlan101" type="vlan" mtu=1500 l2mtu=1596
5 R name="vlan2" type="vlan" mtu=1500 l2mtu=1596
6 R name="loopback0" type="bridge" mtu=1500 l2mtu=65535
7 R name="vrrp101" type="vrrp" mtu=1500
8 R name="vlan202" type="vlan" mtu=1500 l2mtu=1596
9 R name="vrrp202" type="vrrp" mtu=1500
10 R name="vlan1000" type="vlan" mtu=1500 l2mtu=1596
11 R name="vrrp1000" type="vrrp" mtu=1500
12 R name="vlan1001" type="vlan" mtu=1500 l2mtu=1596
13 R name="vrrp1001" type="vrrp" mtu=1500
14 R name="vlan1002" type="vlan" mtu=1500 l2mtu=1596
15 name="vrrp1002" type="vrrp" mtu=1500
16 R name="vlan1003" type="vlan" mtu=1500 l2mtu=1596
17 name="vrrp1003" type="vrrp" mtu=1500
18 R name="vlan1004" type="vlan" mtu=1500 l2mtu=1596
19 name="vrrp1004" type="vrrp" mtu=1500
/ip address print detail
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; default configuration
address=192.168.88.1/24 network=192.168.88.0 interface=ether1 actual-interface=ether1
1 address=200.202.114.146/30 network=200.202.114.144 interface=ether1 actual-interface=ether1
2 address=10.0.0.151/24 network=10.0.0.0 interface=vlan10 actual-interface=vlan10
3 address=192.168.0.1/30 network=192.168.0.0 interface=ether3 actual-interface=ether3
4 address=192.168.1.1/30 network=192.168.1.0 interface=vlan2 actual-interface=vlan2
5 address=1.1.1.1/32 network=1.1.1.1 interface=loopback0 actual-interface=loopback0
6 address=200.202.114.153/29 network=200.202.114.152 interface=vlan101 actual-interface=vlan101
7 address=200.202.114.155/32 network=200.202.114.155 interface=vrrp101 actual-interface=vrrp101
8 address=200.202.114.161/29 network=200.202.114.160 interface=vlan202 actual-interface=vlan202
9 address=200.202.114.163/32 network=200.202.114.163 interface=vrrp202 actual-interface=vrrp202
10 address=10.10.0.1/24 network=10.10.0.0 interface=vlan1000 actual-interface=vlan1000
11 address=10.10.0.3/32 network=10.10.0.3 interface=vrrp1000 actual-interface=vrrp1000
12 address=10.10.1.1/24 network=10.10.1.0 interface=vlan1001 actual-interface=vlan1001
13 address=10.10.1.3/32 network=10.10.1.3 interface=vrrp1001 actual-interface=vrrp1001
14 address=10.10.2.1/24 network=10.10.2.0 interface=vlan1002 actual-interface=vlan1002
15 I address=10.10.2.3/32 network=10.10.2.3 interface=vrrp1002 actual-interface=vrrp1002
16 address=10.10.3.1/24 network=10.10.3.0 interface=vlan1003 actual-interface=vlan1003
17 I address=10.10.3.3/32 network=10.10.3.3 interface=vrrp1003 actual-interface=vrrp1003
18 address=10.10.4.1/24 network=10.10.4.0 interface=vlan1004 actual-interface=vlan1004
19 I address=10.10.4.3/32 network=10.10.4.3 interface=vrrp1004 actual-interface=vrrp1004
/ip route print detail
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
0 ADb dst-address=0.0.0.0/0 gateway=200.202.114.145 gateway-status=200.202.114.145 reachable ether1 distance=20 scope=40
target-scope=10 bgp-as-path="15180" bgp-local-pref=200 bgp-med=0 bgp-origin=igp received-from=peer1
1 Db dst-address=0.0.0.0/0 gateway=200.202.114.149 gateway-status=200.202.114.149 unreachable distance=200 scope=40
target-scope=30 bgp-as-path="15180" bgp-local-pref=100 bgp-origin=igp received-from=peer2
2 ADC dst-address=1.1.1.1/32 pref-src=1.1.1.1 gateway=loopback0 gateway-status=loopback0 reachable distance=0 scope=10
3 ADo dst-address=2.2.2.2/32 gateway=192.168.1.2,192.168.0.2
gateway-status=192.168.1.2 reachable vlan2,192.168.0.2 reachable ether3 distance=110 scope=20 target-scope=10
ospf-metric=20 ospf-type=intra-area
4 ADC dst-address=10.0.0.0/24 pref-src=10.0.0.151 gateway=vlan10 gateway-status=vlan10 reachable distance=0 scope=10
5 ADC dst-address=10.10.0.0/24 pref-src=10.10.0.1 gateway=vlan1000 gateway-status=vlan1000 reachable distance=0 scope=10
6 ADC dst-address=10.10.0.3/32 pref-src=10.10.0.3 gateway=vrrp1000 gateway-status=vrrp1000 reachable distance=0 scope=10
7 ADC dst-address=10.10.1.0/24 pref-src=10.10.1.1 gateway=vlan1001 gateway-status=vlan1001 reachable distance=0 scope=10
8 ADC dst-address=10.10.1.3/32 pref-src=10.10.1.3 gateway=vrrp1001 gateway-status=vrrp1001 reachable distance=0 scope=10
9 ADC dst-address=10.10.2.0/24 pref-src=10.10.2.1 gateway=vlan1002 gateway-status=vlan1002 reachable distance=0 scope=10
10 ADC dst-address=10.10.3.0/24 pref-src=10.10.3.1 gateway=vlan1003 gateway-status=vlan1003 reachable distance=0 scope=10
11 ADC dst-address=10.10.4.0/24 pref-src=10.10.4.1 gateway=vlan1004 gateway-status=vlan1004 reachable distance=0 scope=10
fewi
August 9, 2011, 9:25pm
4
Huh. That all looks fine - unless I’m missing something that should work.
Here’s a wild stab in the dark: try setting a unique vrid per VRRP instance. On most other platforms it doesn’t matter if they’re the same as long as the interfaces are different, but maybe that’ll fix it.
Also, try enabling logging for VRRP and see what the logs say.
Does the interface for VLAN 1002 come up when you shut down one of the running ones?
Hmmm, I was able to fix things by bouncing the VLAN interfaces as follows:
/interface vlan set [find] disabled=yes
/interface vlan set [find] disabled=no
I don’t understand why a /system reboot didn’t fix it.
Scary.
fewi:
Huh. That all looks fine - unless I’m missing something that should work.
Here’s a wild stab in the dark: try setting a unique vrid per VRRP instance. On most other platforms it doesn’t matter if they’re the same as long as the interfaces are different, but maybe that’ll fix it.
Also, try enabling logging for VRRP and see what the logs say.
Does the interface for VLAN 1002 come up when you shut down one of the running ones?
For the records, I’ve just confirmed that rebooting raises the issue again…
Symptom:
Several VRRP interfaces flagged as I - invalid.
/interface vrrp print
Flags: X - disabled, I - invalid, R - running, M - master, B - backup
# NAME INTERFACE MAC-ADDRESS VRID PRIORITY INTERVAL VERSION V3-PROTOCOL
0 RM vrrp101 vlan101 00:00:5E:00:01:01 1 105 1s 2 ipv4
1 RM vrrp202 vlan202 00:00:5E:00:01:01 1 105 1s 2 ipv4
2 RM vrrp1000 vlan1000 00:00:5E:00:01:01 1 105 1s 2 ipv4
3 I vrrp1001 vlan1001 00:00:5E:00:01:01 1 105 1s 2 ipv4
4 I vrrp1002 vlan1002 00:00:5E:00:01:01 1 105 1s 2 ipv4
5 I vrrp1003 vlan1003 00:00:5E:00:01:01 1 105 1s 2 ipv4
Trigger:
/system reboot
Work-around:
/interface vlan set [find] disabled=yes
/interface vlan set [find] disabled=no
lan
September 27, 2011, 3:25pm
7
still present in 5.7…
mikroitk ? we’re miss you