Community discussions

 
tr00g33k
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 84
Joined: Sun Mar 29, 2015 3:58 pm

MikroTik CCR1016, VLAN, VRRP and reply-only problem

Mon Apr 04, 2016 11:29 pm

Hello I have configured a VRRP on MikroTik CCR-1016 v6.34.4 in my network and I have some problem.

My configuration looks something like this:

I have VLAN10 on VLAN10 I have configured VRRP interface. On interface VLAN10 I have set arp to enabled.
On VRRP-VLAN10 I have set arp to "reply-only". On VRRP interface i have setup dhcp server and set pool to "static-only", and setup to add arp for leases.
What I would like to achieve is that clients cannot get DHCP if not in static lease table, and that clients cannot set static IP, by that I mean that when they do set static IP,
they cannot ccomunicate with defualt gateway (VRRP for VLAN10) and internet.

VRRP works as it should master/slave, clients dont recive DHCP lease if not defined as static lease so far so good.
If I set reply-only directly on VLAN10 interface it works as it should, but if there is VRRP in the game, than I have a problem,...

The strange things start to happen when I set some client static IP inside VLAN10. Sometimes it cannot ping default gateway (VRRP-VLAN10), sometimes it can, than it can ping some WAN IP. Reach some websites, some it cannot.
If I look in the ARP table it get in the arp table on interface VLAN10 and on VRRP-VLAN10 interface. It looks like some communication goes directly throug VLAN10 interface, and some throug VRRP-VLAN10.

Is there something that I`am missing about VRRP protocol ?

I would be really grateful for any help or clue what is going on here. I hope I manage to setup VRRP, otherwise I will try to do some scripting on backup router instead of VRRP.
 
tr00g33k
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 84
Joined: Sun Mar 29, 2015 3:58 pm

Re: MikroTik CCR1016, VLAN, VRRP and reply-only problem

Tue Apr 05, 2016 9:08 pm

Let me ask a bit diffrent, did anybody ever tried arp: reply-only on VLAN VRRP interface ?

Who is online

Users browsing this forum: No registered users and 173 guests