I’m working on a VRRP lab - it’s a real world scenario. Topology show in following image.
I have existing 3750 switch (stack).
We are adding 2 x catalyst 9500 switches to the network. Due to license limitation I have to opt for VRRP for redundancy.
9500 switches have connectivity via SFPs only, so existing connections from 3750 can’t be moved over to new switches. As a result, I have to leave the 3750 there which connects to the firewall for internet.
I’m trying to simulate this scenario. CSW1 and CSW2 are connected to 3750 via etherchannels on their interfaces E2/0-1 9Po1).
And CSW1 and CSW2 are connected via etherchannel on their interfaces E2/2-3 (Po2).
- Etherchannels successfully formed.
- Able to access internet
- configured VRRP on SVI Vlan10 (IP: 10.100.10.254)
Result: I can’t ping the VRRP virtual IP, but I can ping Vlan10 SVIs on both CSWs. I can reach internet from both CSWs (Note: Internet connectivity is via 3750)
Config below. Please help me find out why I can’t ping the gateway.
interface Vlan10 description LAB-MGMT ip address 10.100.10.252 255.255.255.0 no ip route-cache vrrp 10 ip 10.100.10.254 vrrp 10 priority 254 end Vlan10 - Group 10 State is Master Virtual IP address is 10.100.10.254 Virtual MAC address is 0000.5e00.010a Advertisement interval is 1.000 sec Preemption enabled Priority is 254 Master Router is 10.100.10.252 (local), priority is 254 Master Advertisement interval is 1.000 sec Master Down interval is 3.007 sec
interface Vlan10 ip address 10.100.10.253 255.255.255.0 vrrp 10 ip 10.100.10.254 end Vlan10 - Group 10 State is Backup Virtual IP address is 10.100.10.254 Virtual MAC address is 0000.5e00.010a Advertisement interval is 1.000 sec Preemption enabled Priority is 100 Master Router is 10.100.10.252, priority is 254 Master Advertisement interval is 1.000 sec Master Down interval is 3.609 sec (expires in 3.540 sec)
interface Vlan10 ip address 10.100.10.250 255.255.255.0 end SX-RIVCORE-SWH3750X#show run | i default-gateway ip default-gateway 10.100.10.254 SX-RIVCORE-SWH3750X#sh ip int br | e unass Interface IP-Address OK? Method Status Protocol Vlan10 10.100.10.250 YES manual up up SX-RIVCORE-SWH3750X#ping 10.100.10.252 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.100.10.252, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/5/16 ms SX-RIVCORE-SWH3750X#ping 10.100.10.253 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.100.10.253, timeout is 2 seconds: .!!!! Success rate is 80 percent (4/5), round-trip min/avg/max = 1/1/3 ms SX-RIVCORE-SWH3750X#ping 10.100.10.254 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.100.10.254, timeout is 2 seconds: ..... Success rate is 0 percent (0/5)