VRRP - Avaya 5530

[abreu10]

Hello guys

i have been trying config VRRP in my company, but happen some problems

the configuration is following

SW 1 (CLUSTER)

Interface Vlan 5 (inter 1,2,23,24) (10.10.5.2) IP VRRP(10.10.5.1)
interface vlan 1000 (inter 23,24 conectadas as portas 23,24 do SW 2) (IST) (10.1.2.1)
Interface Vlan 10 (inter 13,14,23,24) (10.10.10.2) IP VRRP(10.10.10.1)


SW 2 (CLUSTER)
Interface Vlan 5 (inter 1,2,23,24) (10.10.5.3) IP VRRP(10.10.5.1)
interface vlan 1000 (inter 23,24) (IST) (10.1.2.2)
Interface Vlan 10 (inter 13,14,23,24) (10.10.10.3) IP VRRP(10.10.10.1)


NOTEBOOK for network tests
ip address 10.10.5.10 - default gateway 10.10.5.1

SW 4 Edge(
vlan 10 (inter 1 a 3)
vlan ports 1,2 tagging tagAll filter-untagged-frame enable
mlt 1 name core_1
mlt 1 enable

SW 3(EDGE) com mlt habilitado
vlan 5 (portas 1 a 3)
vlan ports 1,2 tagging tagAll filter-untagged-frame enable
mlt 1 name core_1
mlt 1 enable


the problem is, VRRP works until 500 pings, after that, the Virtual IP stop to answer and i have to disconect one of cable of one switch of the cluster.

what i did wrong? or what i fogot to configure?

follow the show run

5530-1#SHOW ip vrrp int
VLAN VR Virtual Admin Primary Master
ID ID IP Address State State IP Address IP Address
---- --- --------------- ---------- ----- --------------- ---------------
5 5 10.10.5.1 Master Up 10.10.5.2 10.10.5.2
10 10 10.10.10.1 Master Up 10.10.10.2 10.10.10.2


5530-1(config)#SHOW RUN
! Embedded ASCII Configuration Generator Script
! Model = Ethernet Routing Switch 5530-24TFD
! Software version = v6.3.3.008
!
! Displaying only parameters different to default
!================================================
enable
configure terminal
!
! *** CORE ***
!

tftp-server 10.1.1.10
!
! *** SNMP ***
!
snmp-server name "5530-1"
!
! *** IP ***
!
ip address switch 10.10.5.2
ip address netmask 255.255.255.0
ip address source configured-address
!
! *** IP Manager ***
!
!
! *** ASSET ID ***
!
!
! *** EAP ***
!
!
! *** IPFIX ***
!
!
! *** System Logging ***
!
!
! *** STACK ***
!
!
! *** Default Command Interface ***
!
!
! *** Custom Banner ***
!
!
! *** STP (Phase 1) ***
!
spanning-tree port-mode auto
!
! *** VLAN ***
!
vlan create 5,10,1000 type port 1
vlan name 5 "data1"
vlan name 10 "data2"
vlan name 1000 "IST"
vlan ports 1-2,13-14,23-24 tagging tagAll filter-untagged-frame enable
vlan configcontrol flexible
vlan members 1 NONE
vlan members 5 1-3,23-24
vlan members 10 13-20,23-24
vlan members 1000 23-24
vlan ports 3,6-12 pvid 5
vlan ports 15-20 pvid 10
vlan ports 21-22 pvid 5
vlan configcontrol strict
!
! *** IGMP ***
!
!
! *** EAP Guest VLAN ***
!
!
! *** EAP Fail Open VLAN ***
!
!
! *** EAP Voip VLAN ***
!
!
! *** Port Mirroring ***
!
!
! *** QOS ***
!
!
! *** RMON ***
!
!
! *** Interface ***
!
!
! *** MLT (Phase 1) ***
!
mlt 1 name "ist" enable member 23-24
!
! *** MAC-Based Security ***
!
!
! *** LACP ***
!
!
! *** ADAC ***
!
!
! *** STP (Phase 2) ***
!
spanning-tree port-mode normal
interface FastEthernet ALL
spanning-tree port 1-3,13-20,23-24 learning disable
exit
!
! *** VLAN Phase 2***
!
vlan mgmt 5
!
! *** MLT (Phase 2) ***
!
mlt spanning-tree 1 stp 1 learning disable
!
! *** PoE ***
!
!
! *** RTC ***
!
! clock set 01:31:06 07 January 2101
!
! *** Avaya Energy Saver ***
!
!
! *** AUR ***
!
!
! *** AAUR ***
!
!
! *** L3 ***
!
ip routing
interface vlan 10
ip address 10.10.10.2 255.255.255.0 2
exit
interface vlan 1000
ip address 10.1.2.1 255.255.255.252 3
exit

! --- ECMP ---


!
! *** IPV6 ***
!
!
! *** VLACP ***
!
!
! *** Brouter Port ***
!
!
! *** DHCP Relay ***
!
!
! *** 802.1ab ***
!

!
! *** 802.1AB MED Voice Network Policies ***
!
!
! *** L3 Protocols ***
!

! --- Proxy ARP ---


! --- UDP Broadcast Forwarding ---


! --- VRRP ---

router vrrp enable
interface vlan 5
ip vrrp address 5 10.10.5.1
ip vrrp 5 enable
ip vrrp 5 priority 110
ip vrrp 5 backup-master enable
exit
interface vlan 10
ip vrrp address 10 10.10.10.1
ip vrrp 10 enable
ip vrrp 10 priority 110
ip vrrp 10 backup-master enable
exit

! --- Route Policies ---


! --- OSPF ---


! --- RIP ---

!
! *** DHCP SNOOPING ***
!
!
! *** ARP INSPECTION ***
!
!
! *** IP SOURCE GUARD ***
!
!
! *** STACK MONITOR ***
!
!
! *** SMLT ***
!
interface mlt 1
ist peer-ip 10.1.2.1
ist vlan 1000
ist enable
exit
!
! *** SLPP ***
!
!
! *** PIM ***
!
!
! *** UNICAST STORM CONTROL ***


SW 2

5530-2(config)#show ip vrrp inter
VLAN VR Virtual Admin Primary Master
ID ID IP Address State State IP Address IP Address
---- --- --------------- ---------- ----- --------------- ---------------
5 5 10.10.5.1 Backup Up 10.10.5.3 10.10.5.2
10 10 10.10.10.1 Backup Up 10.10.10.3 10.10.10.2




show run
! Embedded ASCII Configuration Generator Script
! Model = Ethernet Routing Switch 5530-24TFD
! Software version = v6.3.3
!
! Displaying only parameters different to default
!================================================
enable
configure terminal
!
! *** CORE ***
!

tftp-server 10.1.1.10
!
! *** SNMP ***
!
snmp-server name "5530-2"
!
! *** IP ***
!
ip address switch 10.10.5.3
ip address netmask 255.255.255.0
ip address source configured-address
!
! *** IP Manager ***
!
!
! *** ASSET ID ***
!
!
! *** EAP ***
!
!
! *** IPFIX ***
!
!
! *** System Logging ***
!
!
! *** STACK ***
!
!
! *** Default Command Interface ***
!
!
! *** Custom Banner ***
!
!
! *** STP (Phase 1) ***
!
spanning-tree port-mode auto
!
! *** VLAN ***
!
vlan create 5,10,1000 type port 1
vlan name 5 "data1"
vlan name 10 "data2"
vlan name 1000 "IST"
vlan ports 1-2,13-14,23-24 tagging tagAll filter-untagged-frame enable
vlan configcontrol flexible
vlan members 1 NONE
vlan members 5 1-3,23-24
vlan members 10 13-20,23-24
vlan members 1000 23-24
vlan ports 3,6-12 pvid 5
vlan ports 15-20 pvid 10
vlan ports 21-22,25-26 pvid 5
vlan configcontrol strict
!
! *** IGMP ***
!
!
! *** EAP Guest VLAN ***
!
!
! *** EAP Fail Open VLAN ***
!
!
! *** EAP Voip VLAN ***
!
!
! *** Port Mirroring ***
!
!
! *** QOS ***
!
!
! *** RMON ***
!
!
! *** Interface ***
!
!
! *** MLT (Phase 1) ***
!
mlt 1 name "ist" enable member 23-24
!
! *** MAC-Based Security ***
!
!
! *** LACP ***
!
!
! *** ADAC ***
!
!
! *** STP (Phase 2) ***
!
spanning-tree port-mode normal
interface FastEthernet ALL
spanning-tree port 1-3,13-20,23-24 learning disable
exit
!
! *** VLAN Phase 2***
!
vlan mgmt 5
!
! *** MLT (Phase 2) ***
!
mlt spanning-tree 1 stp 1 learning disable
!
! *** PoE ***
!
!
! *** RTC ***
!
! clock set 00:23:49 07 January 2005
!
! *** Avaya Energy Saver ***
!
!
! *** AUR ***
!
!
! *** AAUR ***
!
!
! *** L3 ***
!
ip routing
interface vlan 10
ip address 10.10.10.3 255.255.255.0 2
exit
interface vlan 1000
ip address 10.1.2.2 255.255.255.252 3
exit

! --- ECMP ---


!
! *** IPV6 ***
!
!
! *** VLACP ***
!
!
! *** Brouter Port ***
!
!
! *** DHCP Relay ***
!
!
! *** 802.1ab ***
!

!
! *** 802.1AB MED Voice Network Policies ***
!
!
! *** L3 Protocols ***
!

! --- Proxy ARP ---


! --- UDP Broadcast Forwarding ---


! --- VRRP ---

router vrrp enable
interface vlan 5
ip vrrp address 5 10.10.5.1
ip vrrp 5 enable
ip vrrp 5 backup-master enable
exit
interface vlan 10
ip vrrp address 10 10.10.10.1
ip vrrp 10 enable
ip vrrp 10 priority 90
ip vrrp 10 backup-master enable
exit

! --- Route Policies ---


! --- OSPF ---


! --- RIP ---

!
! *** DHCP SNOOPING ***
!
!
! *** ARP INSPECTION ***
!
!
! *** IP SOURCE GUARD ***
!
!
! *** STACK MONITOR ***
!
!
! *** SMLT ***
!
interface mlt 1
ist peer-ip 10.1.2.2
ist vlan 1000
ist enable
exit
!
! *** SLPP ***
!
!
! *** PIM ***
!
!
! *** UNICAST STORM CONTROL ***
!
5530-2#

[abreu10]

continuing

SW 3 edge

5530-24TFD#show run
! Embedded ASCII Configuration Generator Script
! Model = Ethernet Routing Switch 5530-24TFD
! Software version = v6.3.3
!
! Displaying only parameters different to default
!================================================
enable
configure terminal
!
! *** CORE ***
!

!
! *** SNMP ***
!
!
! *** IP ***
!
ip address netmask 255.255.255.0
ip address source configured-address
!
! *** IP Manager ***
!
!
! *** ASSET ID ***
!
!
! *** EAP ***
!
!
! *** IPFIX ***
!
!
! *** System Logging ***
!
!
! *** STACK ***
!
!
! *** Default Command Interface ***
!
!
! *** Custom Banner ***
!
!
! *** STP (Phase 1) ***
!
spanning-tree port-mode auto
!
! *** VLAN ***
!
vlan create 5,999 type port 1
vlan name 5 "data1"
vlan name 999 "mgtm"
vlan ports 1-2,13-14 tagging tagAll filter-untagged-frame enable
vlan configcontrol flexible
vlan members 1 NONE
vlan members 5 1-3
vlan ports 3 pvid 5
vlan configcontrol strict
!
! *** IGMP ***
!
!
! *** EAP Guest VLAN ***
!
!
! *** EAP Fail Open VLAN ***
!
!
! *** EAP Voip VLAN ***
!
!
! *** Port Mirroring ***
!
!
! *** QOS ***
!
!
! *** RMON ***
!
!
! *** Interface ***
!
!
! *** MLT (Phase 1) ***
!
mlt 1 name "core_1" enable member 1-2
!
! *** MAC-Based Security ***
!
!
! *** LACP ***
!
!
! *** ADAC ***
!
!
! *** STP (Phase 2) ***
!
spanning-tree port-mode normal
interface FastEthernet ALL
spanning-tree port 1-3 learning disable
exit
!
! *** VLAN Phase 2***
!
vlan mgmt 5
!
! *** MLT (Phase 2) ***
!
mlt spanning-tree 1 stp 1 learning disable
!
! *** PoE ***
!
!
! *** RTC ***
!
! clock set 00:30:42 07 January 2005
!
! *** Avaya Energy Saver ***
!
!
! *** AUR ***
!
!
! *** AAUR ***
!
!
! *** L3 ***
!

! --- ECMP ---


! No license for ECMP.
! Contact [email protected] to update Software license.
!
! *** IPV6 ***
!
!
! *** VLACP ***
!
!
! *** Brouter Port ***
!
!
! *** DHCP Relay ***
!
!
! *** 802.1ab ***
!

!
! *** 802.1AB MED Voice Network Policies ***
!
!
! *** L3 Protocols ***
!

! --- Proxy ARP ---


! --- UDP Broadcast Forwarding ---


! --- VRRP ---


! --- Route Policies ---


! --- OSPF ---


! --- RIP ---

!
! *** DHCP SNOOPING ***
!
!
! *** ARP INSPECTION ***
!
!
! *** IP SOURCE GUARD ***
!
!
! *** STACK MONITOR ***
!
!
! *** SMLT ***
!
!
! *** SLPP ***
!
!
! *** PIM ***
!
!


THANK YOUU

[krausm]

Hi,
your IST misconfigured.
The ist peer addr must be the ip of the ist-vlan of the other switch NOT the own.

with
show mlt

and
show smlt

you can see if the IST is working or not