Recipe Environment

In this recipe, TNSR uses the WAN-side VR address (203.0.113.228) for outbound NAT from the internal private subnet 10.28.0.0/24. Clients will use the LAN-side VR address (10.28.0.1) as their gateway.

Interface tracking is included in the example to protect against a single failure of either WAN or LAN.

The configuration commands in this recipe apply the settings from these sections to each node. Some additional settings in the commands are omitted, but the recipe commands include them with default values for emphasis.

Cluster Environment

These tables contain all information necessary to configure the cluster.

The information in this first table is related to the cluster environment in general, not a specific node.

Example Basic VRRP Configuration Environment

Item

Value

Upstream Gateway

203.0.113.1

Shared WAN VR Address

203.0.113.228

NAT Address

203.0.113.228

Shared LAN VR Address

10.2.0.1

LAN Client Gateway

10.2.0.1

Primary Node (R1) Environment

This information is for the primary node, which in this example is called R1.

Example Basic VRRP Configuration for R1

Item

Value

R1 WAN Interface

0000:06:13.0

R1 WAN IP Address

203.0.113.28/24

R1 WAN VR ID

228

R1 WAN VR Priority

254

R1 LAN Interface

0000:06:14.0

R1 LAN IP Address

10.28.0.2/24

R1 LAN VR ID

28

R1 LAN VR Priority

254

R1 Priority Decrease

240 (14)

R1 SYNC Interface

0000:06:15.0

R1 SYNC IP Address

10.28.1.1/30

Secondary Node (R2) Environment

This information is for the secondary node, which in this example is called R2. Note that the interface addresses are different from R1, but the same VR address is used.

Example Basic VRRP Configuration for R2

Item

Value

R2 WAN Interface

0000:06:00.0

R2 WAN IP Address

203.0.113.29/24

R2 WAN VR ID

228

R2 WAN VR Priority

100

R2 LAN Interface

0000:06:00.1

R2 LAN IP Address

10.28.0.3/24

R2 LAN VR ID

28

R2 LAN VR Priority

100

R2 Priority Decrease

90 (10)

R2 SYNC Interface

0000:06:15.0

R2 SYNC IP Address

10.28.2.1/30