<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
Hi Rhys,
<div class=""><br class="">
</div>
<div class="">
<blockquote type="cite" class="">
<div class="WordSection1" style="page: WordSection1;">
<div class="" style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">
Has anyone had much experience with using Vrrp on a Mikrotik?</div>
</div>
</blockquote>
<div class=""><br class="">
</div>
I use Juniper gear, so apologies if I’m overlooking some Mikrotik-specific VRRP extensions, etc…</div>
<div class=""><br class="">
<blockquote type="cite" class="">
<div class="WordSection1" style="page: WordSection1;">
<div class="" style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p class=""></o:p></div>
<div class="" style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">
It seemed pretty easy to setup but the manual said the floating IP must be a /32 and to put an IP on the physical interface with a /24<o:p class=""></o:p></div>
<div class="" style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">
This seemed wrong so I just put a /24 on the Vrrp interface and a completely different subnet on the physical interface for the routers to communicate.</div>
</div>
</blockquote>
<br class="">
</div>
<div class="">VRRP requires that the VIP and interface IP’s be in the same subnet so the MAC address associated with the VIP can be updated via gratuitous ARP. So you do ‘waste’ two IP’s per subnet (assuming two routers). It doesn’t need to be a /24 though
- /29 or greater is sufficient.</div>
<div class=""><br class="">
</div>
<div class="">
<div class=""><br class="webkit-block-placeholder">
</div>
<div class="">
<blockquote type="cite" class="">
<div class="WordSection1" style="page: WordSection1;">
<div class="" style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">
Thinking I was clever all was well till about 1am two days after I did this, then it completely failed, switching back and forth from master to backup, basically having two masters on and off.<o:p class=""></o:p></div>
<div class="" style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p class=""> </o:p></div>
<div class="" style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">
Is having a /32 on the vrrp really necessary, if so why?</div>
</div>
</blockquote>
<div class=""><br class="">
</div>
<div class="">Yes. It is used for outbound traffic for client devices in the subnet. Inbound traffic can traverse both master and slave devices.</div>
<div class=""><br class="">
</div>
<blockquote type="cite" class="">
<div class="WordSection1" style="page: WordSection1;">
<div class="" style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">
<o:p class=""></o:p></div>
<div class="" style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">
Why would it have been all good for two days?</div>
</div>
</blockquote>
<div class=""><br class="">
</div>
<div class="">I highly doubt that it was. </div>
<div class=""><br class="">
</div>
<div class="">
<blockquote type="cite" class="">
<div class="WordSection1" style="page: WordSection1;">
<div class="" style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">
So my config that lasted two days<o:p class=""></o:p></div>
<div class="" style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">
Vrrp 192.168.1.1/24 (floating IP I care about)<o:p class=""></o:p></div>
<div class="" style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">
Physical 10.0.1.1/24 (to communicate with master/backup routers)</div>
</div>
</blockquote>
<br class="">
</div>
<div class="">See above.</div>
<div class=""><br class="">
</div>
<div class="">
<blockquote type="cite" class="">
<div class="WordSection1" style="page: WordSection1;">
<div class="" style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">
How the manual says to do it<o:p class=""></o:p></div>
<div class="" style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">
Vrrp 192.168.1.1/32<o:p class=""></o:p></div>
<div class="" style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">
Physical 192.168.1.2/24</div>
</div>
</blockquote>
<br class="">
</div>
<div class="">That’s the correct configuration - As I mentioned above, VRRP doesn’t mandate a /24 subnet on the interface though.</div>
<div class=""><br class="">
</div>
<div class="">
<blockquote type="cite" class="">
<div class="WordSection1" style="page: WordSection1;">
<div class="" style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">
Doing it the second way will mean a lot more IP’s/config as I want to have around 20 floating IP’s<o:p class=""></o:p></div>
</div>
</blockquote>
</div>
<div class="">
<div class="WordSection1" style="page: WordSection1;">
<div class="" style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">
<br class="">
</div>
<div class="" style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">
Why? Take a look into MC-LAG - No idea if your gear supports this, but it sounds a better fit for how you’re trying to build your network.</div>
<div class="" style="margin: 0cm; font-size: 11pt; font-family: Calibri, sans-serif;">
<br class="">
</div>
</div>
</div>
<div class="">Kind Regards,</div>
<br class="">
David Hill<br class="">
------------------------------------------------<br class="">
* Hostcentral - Since 2002<br class="">
* <a href="http://www.hostcentral.net.au/" class="">http://www.hostcentral.net.au</a><br class="">
* ABN: 84 034 347 523<br class="">
* Tel: 1300 786 400 / 03 8648 6658<br class="">
* Fax: 03 8648 6659<br class="">
------------------------------------------------<br class="">
</div>
</div>
</div>
</body>
</html>