VRRP - Multiple Addresses

RouterOS Forwarding Protocols
1

Helo!

We have an enviroment with 2 sites (one core and other as a backup site) and 1 RB 1100 on each. Today, we have different functions for them, like types of tunneling and we have redundancy with OSPF protocol.
We bought 2 CCR’s 1009 and we’re thinking of putting VRRP in production.

The transport between the sites is made by VLAN’s, once we have fiber channel under the ground connecting them.

Once we have a lot of addresses on each one of them, and with the VRRP we’ll need to aggregate the addresses on both routers, my question is: Should I use on VRRP interface for each address or should I use one VRRP interface with multiple ip’s?

2

One VRRP for multiple addresses.

3

And with that, one adicional IP on each router for each floating IP, right?

4

No.
Floating IP is only of one subnet which is used for VRRP protocol communication.
Or no floating IP if you are using vrrpv3 and ipv6 link local addresses.

5

Thank you for the replies, but I think I am not getting this clearly on my mind.

If I have various IP addresses on various interfaces, how could I manage this to work with VRRP? Maybe I am thinking wrongly, but I would need to configure all my interface addresses on VRRP interface right? To do so, how would the router manage the traffic between interfaces, once it just have addressing on VRRP interface? I need, in this case, configure the floating address on VRRP’s interface and other address on same subnet, but on the traffic interface?

OR, on my concern, VRRP is ideal just for 1 floating ip.

6

For example:

three networks 10.1.1.0/24, 10.2.2.0/24, 10.3.3.0/24. First one is used by vrrp. vrrrp runs on ether1

then config
/interface vrrp add interface=ether1
/ip address
add address=10.1.1.1/32 interface=vrrp1
add address=10.1.1.2/24 interface=ether1
add address=10.2.2.1/24 interface=vrrp1
add address=10.3.3.1/24 interface=vrrp1

7

I get your point, but this would work just in the case I have this networks working on ether1, right? In my case, I have a lot of PPTP, EoIP and VLAN interfaces. All of them with one different IP address but PPTP (this have one address on core).
Considering that, I couldn’t respond traffic comming on other interfaces because it would just respond on ether1, right?

8

If addresses are on different interfaces then it is routing. You need to set up routes on remote routers to access those networks not addresses on vrrp interface.

9

Let’s ilustrate it a little bit:
/interface eoip
add local-address=10.254.254.5 mac-address=FE:CB:B4:0B:B3:D2 name=teste remote-address=10.254.54.253 tunnel-id=54
add local-address=10.254.254.5 mac-address=FE:9E:1C:A3:A6:1B name=teste1 remote-address=10.254.18.253 tunnel-id=18

/interface vlan
add interface=ether8-trunk l2mtu=1596 name=vlan2 vlan-id=2
add interface=ether8-trunk l2mtu=1596 name=vlan8 vlan-id=8
add interface=ether8-trunk l2mtu=1596 name=vlan11 vlan-id=11

/ip address
add address=10.1.54.1/30 interface=eoip-bari-blumenau network=10.1.54.0
add address=10.1.18.1/30 interface=eoip-bari-itajai network=10.1.18.0
add address=192.168.1.2/24 interface=vlan2 network=192.168.1.0
add address=192.168.2.2/24 interface=vlan8 network=192.168.2.0
add address=10.254.254.5/28 interface=vlan11 network=10.254.254.0Now I have all this addresses binded to my interfaces. Assuming that I will have another CCR on backup site with the same configs, how would VRRP work on this setup?
Should I put all the addresses on VRRP interface? If so, how would the traffic comming to through vlan2 be responded, once the address 192.168.1.2 is configured on VRRP, and not in the vlan itself?

10

A VRRP interface has to be bound to another interface.

if we say you want a floating IP of 10.0.0.1/24 on ‘VLAN2’ interface:

You add the VRRP interface to the VLAN2 you want the floating IP to be on.

You add the floating IP as a /32 to the VRRP interface.
(10.0.0.1/32)

You then have:
10.0.0.X/24 on VLAN2 interface

and do the same on the other router participating.

Basically the routers will use the 10.0.0.X/24 network to communicate VRRP, so they must be able to talk to each other.

11

In this case you need to run VRRP on all three vlan interfaces.

12

Let’s assume that I’ll need VRRP on all addresses, considering high availability.

  1. Create one VRRP interface for each interface I want to be redundant. That VRRP needs to be binded to each redundant interface.
  2. One ip address of each network on each interface, plus the floating IP on that interface’s VRRP.

In my case, would be 5 VRRP’s. 2 eoips and 3 vlans.

13

3 VRRPS because as far as I can tell EoIP tunnels run over vlan11, which already is used for redundancy.
So you simply need to run EoIP tunnels to VRRP address (no need for vrrp on each tunnel)

14

mrz,

Thanks for your help. I’ll try the setup and will return for feedback.