VRRP Example¶

This example is a basic two-node VRRP cluster with one node as the owner of an internal and external VR address, and the other as a backup. This is a routed configuration with a statically routed subnet used for the internal LAN.

In this example, the upstream ISP will deliver a routed subnet (198.51.100.0/24) to the WAN-side VR address (203.0.113.2), and internal clients will use the LAN-side VR address (198.51.100.1) as their gateway.

Interface tracking is included in the example to protect against a single failure of either WAN or LAN.

Diagram¶

VRRP Example Diagram¶

Required Information¶

These tables contain all required information to configure the cluster.

The information in this first table is related to the setup in general, not a specific cluster node.

Example Basic VRRP Configuration Related Information¶
Item	Value
Upstream Gateway	203.0.113.1
Routed Subnet	198.51.100.0/24
LAN Client Gateway	198.51.100.1

This information is for the primary node, which in this example is called R1.

Example Basic VRRP Configuration for R1¶
Item	Value
R1 WAN Interface	0000:06:00.0
R1 WAN IP Address	203.0.113.2/24
R1 WAN VR ID	220
R1 WAN VR Address	203.0.113.2
R1 WAN VR Priority	255 (Owner)
R1 LAN Interface	0000:06:00.1
R1 LAN IP Address	198.51.100.1/24
R1 LAN VR ID	210
R1 LAN VR Address	198.51.100.1
R1 LAN VR Priority	255 (Owner)
R1 Priority Decrease	240 (15)

This information is for the secondary node, which in this example is called R2. Note that the interface addresses are different from R1, but the same VR address is used.

Example Basic VRRP Configuration for R2¶
Item	Value
R2 WAN Interface	0000:06:00.0
R2 WAN IP Address	203.0.113.3/24
R2 WAN VR ID	220
R2 WAN VR Address	203.0.113.2
R2 WAN VR Priority	100
R2 LAN Interface	0000:06:00.1
R2 LAN IP Address	198.51.100.2/24
R2 LAN VR ID	210
R2 LAN VR Address	198.51.100.1
R2 LAN VR Priority	100
R2 Priority Decrease	90 (10)

Example Configuration¶

The configuration commands in this section show how the settings from the table above are applied to each node. Some additional VRRP settings are shown in the commands but not the tables, but they are using the default values, shown for emphasis.

First, set the R1 interface names:

r1 tnsr(config)# dataplane dpdk dev 0000:06:00.0 network name WAN
r1 tnsr(config)# dataplane dpdk dev 0000:06:00.1 network name LAN
r1 tnsr(config)# service dataplane restart

Next, configure the R1 WAN interface:

r1 tnsr(config)# interface WAN
r1 tnsr(config-interface)# ip address 203.0.113.2/24
r1 tnsr(config-interface)# ip vrrp-virtual-router 220
r1 tnsr(config-vrrp4)# preempt true
r1 tnsr(config-vrrp4)# v3-advertisement-interval 100
r1 tnsr(config-vrrp4)# priority 255
r1 tnsr(config-vrrp4)# track-interface LAN priority-decrement 240
r1 tnsr(config-vrrp4)# virtual-address 203.0.113.2
r1 tnsr(config-vrrp4)# exit
r1 tnsr(config-interface)# exit
r1 tnsr(config)#

Next, configure the R1 LAN interface:

r1 tnsr(config)# interface LAN
r1 tnsr(config-interface)# ip address 198.51.100.1/24
r1 tnsr(config-interface)# ip vrrp-virtual-router 210
r1 tnsr(config-vrrp4)# preempt true
r1 tnsr(config-vrrp4)# v3-advertisement-interval 100
r1 tnsr(config-vrrp4)# priority 255
r1 tnsr(config-vrrp4)# track-interface WAN priority-decrement 240
r1 tnsr(config-vrrp4)# virtual-address 198.51.100.1
r1 tnsr(config-vrrp4)# exit
r1 tnsr(config-interface)# exit
r1 tnsr(config)#

R1 is now complete.

Set the R2 interface names:

r2 tnsr(config)# dataplane dpdk dev 0000:06:00.0 network name WAN
r2 tnsr(config)# dataplane dpdk dev 0000:06:00.1 network name LAN
r2 tnsr(config)# service dataplane restart

Configure the R2 WAN interface:

r2 tnsr(config)# interface WAN
r2 tnsr(config-interface)# ip address 203.0.113.3/24
r2 tnsr(config-interface)# ip vrrp-virtual-router 220
r2 tnsr(config-vrrp4)# preempt true
r2 tnsr(config-vrrp4)# accept-mode true
r2 tnsr(config-vrrp4)# v3-advertisement-interval 100
r2 tnsr(config-vrrp4)# priority 100
r2 tnsr(config-vrrp4)# track-interface LAN priority-decrement 90
r2 tnsr(config-vrrp4)# virtual-address 203.0.113.2
r2 tnsr(config-vrrp4)# exit
r2 tnsr(config-interface)# exit
r2 tnsr(config)#

Finally, configure the R2 LAN interface:

r2 tnsr(config)# interface LAN
r2 tnsr(config-interface)# ip address 198.51.100.2/24
r2 tnsr(config-interface)# ip vrrp-virtual-router 210
r2 tnsr(config-vrrp4)# preempt true
r2 tnsr(config-vrrp4)# accept-mode true
r2 tnsr(config-vrrp4)# v3-advertisement-interval 100
r2 tnsr(config-vrrp4)# priority 100
r2 tnsr(config-vrrp4)# track-interface WAN priority-decrement 90
r2 tnsr(config-vrrp4)# virtual-address 198.51.100.1
r2 tnsr(config-vrrp4)# exit
r2 tnsr(config-interface)# exit
r2 tnsr(config)#

At this point, the interface and VRRP configuration is complete for both nodes.

LAN clients in 198.51.100.0/24 can use the LAN VR address of 198.51.100.1 as their default gateway.

VRRP Example with NAT¶

As mentioned in VRRP Compatibility, the example above cannot be used in combination with dataplane NAT because r1 has a priority of 255 on its VR addresses. To use VRRP with dataplane NAT, an additional address not used by either node is required by TNSR for use as the VRRP virtual address. This example could be used with VPF NAT.

An example for this configuration is covered in VRRP with VPF Filtering and Outside NAT. Though that example uses VPF NAT, it can also be used in combination with dataplane NAT.