Multiple Masters Coexist in a VRRP Group
Procedure
- Ping masters to check network connectivity between masters.
If the ping operation fails, check whether the network connection is correct.
If the ping operation is successful and the TTL value of the ping packet is 255, go to step 2.
- Run the display vrrp protocol-information command in any view to check whether the VRRP version on each master is compatible with the mode in which VRRP Advertisement packets are sent.
If the version is incompatible with the mode, run the vrrp version { v2 | v3 } command in the system view to change the version.
If the version is compatible with the mode, go to step 3.
- A VRRPv2 group can only send and receive VRRPv2 Advertisement packets, and discards the received VRRPv3 Advertisement packets.
- A VRRPv3 group can send and receive both VRRPv2 and VRRPv3 Advertisement packets. You can configure the mode in which VRRPv3 Advertisement packets are sent to v2-only, v3-only, or v2v3-both.
- Run the display vrrp virtual-router-id command in any view to check whether the masters use the same virtual IP address, interval at which VRRP Advertisement packets are sent, authentication mode, and authentication key.
If the configured virtual IP addresses are different, run the vrrp vrid virtual-router-id virtual-ip virtual-address command to set the same virtual IP address.
If the intervals are different, run the vrrp vrid virtual-router-id timer advertise advertise-interval command to set the same interval.
If the authentication modes and keys are different, run the vrrp vrid virtual-router-id authentication-mode { simple { key | plain key | cipher cipher-key } | md5 md5-key } command to set the same authentication mode and key.
For security purposes, you are advised to use MD5 as the authentication algorithm of VRRP.