Feedback
Contents
VRRP Commands
This document describes the Cisco IOS XR software commands used to configure and monitor the Virtual Router Redundancy Protocol (VRRP) on Cisco ASR 9000 Series Aggregation Services Routers .
For detailed information about VRRP concepts, configuration tasks, and examples, see the Cisco ASR 9000 Series Aggregation Services Router IP Addresses and Services Configuration Guide.
- clear vrrp statistics
- interface (VRRP)
- router vrrp
- show vrrp
- snmp-server traps vrrp events
- vrrp
- vrrp assume-ownership disable
- vrrp bfd fast-detect
- vrrp bfd minimum-interval
- vrrp bfd multiplier
- vrrp delay
- vrrp ipv4
- vrrp preempt
- vrrp priority
- vrrp text-authentication
- vrrp timer
- vrrp track interface
clear vrrp statistics
To reset the Virtual Router Redundancy Protocol (VRRP) statistics (to zero or default value), use the clear vrrp statistics command in EXEC mode.
Syntax Description
Command History
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
If no interface is specified, the statistics for all virtual routers on all interfaces are cleared.
If no value for vrid is specified, the statistics for all virtual routers on the specified interface are cleared.
Task ID
Examples
The following example shows how to clear vrrp statistics:
RP/0/RSP0/CPU0:router# clear vrrp statisticsinterface (VRRP)
To enable VRRP interface configuration mode, use the interface (VRRP) command in VRRP configuration mode. To terminate VRRP interface configuration mode, use the no form of this command.
Syntax Description
type
Interface type. For more information, use the question mark (?) online help function.
interface-path-id
Physical interface or virtual interface.
Note Use the show interfaces command to see a list of all interfaces currently configured on the router.
For more information about the syntax for the router, use the question mark (?) online help function.
Command History
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Use the interface (VRRP) command to enter VRRP interface configuration mode.
You must configure all VRRP configuration commands in VRRP interface configuration mode.
Task ID
router vrrp
To configure Virtual Router Redundancy Protocol (VRRP), use the router vrrp command in global configuration mode. To remove the VRRP configuration, use the no form of this command.
Command History
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Use the router vrrp command to enter VRRP configuration mode.
You must configure all VRRP configuration commands in VRRP interface configuration mode.
Task ID
show vrrp
To display a brief or detailed status of one or all Virtual Router Redundancy Protocol (VRRP) virtual routers, use the show vrrp command in EXEC mode.
Syntax Description
interface
(Optional) Displays the status of the virtual router interface.
type
(Optional) Interface type. For more information, use the question mark (?) online help function.
interface-path-id
Physical interface or virtual interface.
Note Use the show interfaces command to see a list of all interfaces currently configured on the router.
For more information about the syntax for the router, use the question mark (?) online help function.
vrid
(Optional) Virtual router identifier, which is the number identifying the virtual router for which status is displayed.
The virtual router identifier is configured with the vrrp ipv4 command. Range is 1 to 255.
brief
(Optional) Provides a summary view of the virtual router information.
detail
(Optional) Displays detailed running state information.
statistics
(Optional) Displays total statistics.
all
(Optional) Displays statistics for each virtual router.
Command History
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
If no interface is specified, all virtual routers on all interfaces are displayed. If no vrid is specified, all vrids on the given interface are displayed.
Task ID
Examples
The following sample output is from the show vrrp command:
RP/0/RSP0/CPU0:router# show vrrp A indicates IP address owner | P indicates configured to preempt | | Interface vrID Prio A P State Master addr VRouter addr Te0/3/0/0 1 100 P Init unknown 10.0.1.20 Te0/3/0/2 7 100 P Init unknown 10.1.13.0
This table describes the significant fields shown in the display.
Table 1 show vrrp Command Field DescriptionsField
Description
Interface
Interface of the virtual router.
vrID
ID of the virtual router.
Prio
Priority of the virtual router.
A
Indicates whether the VRRP router is the IP address owner.
P
Indicates whether the VRRP router is configured to preempt (default).
State
State of the virtual router.
Master addr
IP address of the master router.
VRouter addr
Virtual router IP address of the virtual router.
The following sample output is from the show vrrp command with the detail keyword:
RP/0/RSP0/CPU0:router# show vrrp detail GigabitEthernet0/5/0/0 - vrID 1 State is Master 2 state changes, last state change 00:00:28 Virtual IP address is 4.0.0.100 Virtual MAC address is 0000.5E00.0101 Master router is local Advertise time 1 secs Master Down Timer 3.609 (3 x 1 + 156/256) Minimum delay 1 sec, reload delay 5 sec Current priority 100 Configured priority 100, may preempt minimum delay 0 secs TenGigE0/3/0/0 - vrID 1 State is Init 0 state changes, last state change never Virtual IP address is 10.0.1.20 Virtual MAC address is 0000.5E00.0101 Master router is unknown Advertise time 1 secs Master Down Timer 3.609 (3 x 1 + 156/256) Current priority 100 Configured priority 100, may preempt minimum delay 0 secs TenGigE0/3/0/2 - vrID 7 State is Init 0 state changes, last state change never Virtual IP address is 10.1.13.0 Virtual MAC address is 0000.5E00.0107 Master router is unknown Advertise time 1 secs Master Down Timer 3.609 (3 x 1 + 156/256) Current priority 100 Configured priority 100, may preempt minimum delay 0 secs TenGigE0/2/0/4 - vrID 2 State is Master 16 state changes, last state change 00:04:55 Virtual IP address is 7.7.7.123 Virtual MAC address is 0000.5E00.0101 Master router is local Advertise time 1 secs Master Down Timer 3.609 (3 x 1 + 156/256) Current priority 80 Configured priority 100, may preempt minimum delay 0 secs Tracked items: 1/3 up: 20 decrement Priority Interface State Decrement GigabitEthernet0 /1 /0/2 Down 10 GigabitEthernet0 /1 /0/1 Down 10 TenGigE0/3/0/3 Up 10
This table describes the significant fields shown in the displays.
Table 2 show vrrp detail Command Field DescriptionsField
Description
TenGigE0/3/0/0 - vrID 1
Interface type and number, and VRRP group number.
State is
Role this interface plays within VRRP (master or backup).
Virtual IP address is
Virtual IP address for this virtual router.
Virtual MAC address is
Virtual MAC address for this virtual router.
Master router is
Location of the master router.
Advertise time
Interval (in seconds) at which the router sends VRRP advertisements when it is the master virtual router. This value is configured with the vrrp timer command.
Master Down Timer
Time the backup router waits for the master router advertisements before assuming the role of master router.
Minimum delay
Time that the state machine start-up is delayed when an interface comes up, giving the network time to settle. The minimum delay is the delay that is applied after any subsequent interface up event (if the interface flaps) and the reload delay is the delay applied after the first interface up event.
Current priority
Priority of the virtual router.
Configured priority
Priority configured on the virtual router.
may preempt
Indication of whether preemption is enabled or disabled.
minimum delay
Delay time before preemption (default) occurs.
Tracked items
Section indicating the items being tracked by the VRRP router.
Interface
Interface being tracked.
State
State of the tracked interface.
Priority Decrement
Priority to decrement from the VRRP priority when the interface is down.
The following sample output is from the show vrrp command with the interface keyword for 10-Gigabit Ethernet interface 0/3/0/0:
RP/0/RSP0/CPU0:router# show vrrp interface TenGigE 0/3/0/0 A indicates IP address owner | P indicates configured to preempt | | Interface vrID Prio A P State Master addr VRouter addr Te0/3/0/0 1 100 P Init unknown 10.0.1.20 Te0/3/0/2 7 100 P Init unknown 10.1.13.0snmp-server traps vrrp events
To enable the Simple Network Management Protocol (SNMP) server notifications (traps) available for VRRP, use the snmp-server traps vrrp events command in global configuration mode. To disable all available VRRP SNMP notifications, use the no form of this command.
Syntax Description
Command History
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Task ID
vrrp
To enable Virtual Router Redundancy Protocol (VRRP) virtual router mode, use the vrrp command in address-family mode. To terminate VRRP virtual router mode, use the no form of this command.
Syntax Description
vrid (Optional) Virtual router identifier, which is the number identifying the virtual router for which status is displayed. The virtual router identifier is configured with the vrrp ipv4 command. Range is 1 to 255.
version version-no The VRRP version number. Range is 2-3.
Note The version keyword is available only for the ipv4 address family. By default, version is set to 3 for IPv6 address families.
Command History
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Task ID
Examples
The following example shows how to enable VRRP virtual router mode:
RP/0/RSP0/CPU0:router# config RP/0/RSP0/CPU0:router(config)# router vrrp RP/0/RSP0/CPU0:router(config-vrrp)# interface tenGigE 0/4/0/4 RP/0/RSP0/CPU0:router(config-vrrp-if)# address-family ipv4 RP/0/RSP0/CPU0:router(config-vrrp-address-family)# vrrp 3 version 2 RP/0/RSP0/CPU0:router(config-vrrp-virtual-router)#vrrp assume-ownership disable
To disable the default configuration that causes a VRRP router to assume ownership of the virtual IP address when in the master state , use the vrrp assume- ownership command in VRRP interface configuration mode. To restore the default setting (assumed ownership), use the no form of this command.
Syntax Description
vrid
Virtual router identifier, which is the number identifying the virtual router for which virtual IP address ownership is being configured.
disable
Does not accept VRRP packets.
Command History
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
By default, the router assumes ownership of the virtual IP address if it is the master router regardless of whether it is the IP address owner, which means that it accepts packets sent to that IP address during verification of network configuration. If the vrrp assume-ownership default is in effect, a router that is not the IP address owner, but is the master router for another IP address, accepts and responds to pings and accepts a Telnet to that router. Accepting packets sent to the other IP address is a useful tool during verification of network configuration.
This command is ignored (irrelevant) when the router is the IP address owner (section 6.4.3 of RFC 2338, Virtual Router Redundancy Protocol).
Task ID
Examples
The following example shows how the configuration disables the vrrp assume-ownership command on 10-Gigabit Ethernet interface 0/3/0/0:
RP/0/RSP0/CPU0:router(config)# router vrrp RP/0/RSP0/CPU0:router(config-vrrp)# interface TenGigE 0/3/0/0 RP/0/RSP0/CPU0:router(config-vrrp-if)# vrrp 1 ipv4 10.0.0.101 RP/0/RSP0/CPU0:router(config-vrrp-if)# vrrp 1 assume-ownership disablevrrp bfd fast-detect
To enable bidirectional forwarding detection (BFD) fast detection on a VRRP interface, use the vrrp bfd fast-detect command in the interface configuration mode. This creates a BFD session between the Virtual Router Redundancy Protocol (VRRP) router and its peer, and if the session goes down while the VRRP is in the backup state, a VRRP failover is initiated. To disable BFD fast-detection, use the no form of this command.
Syntax Description
vrid
Virtual Router Identifier.
peer
VRRP peer for BFD monitoring.
ipv4 address
IPv4 address of the BFD peer interface.
Command History
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
BFD is supported only on systems with exactly two redundant VRRP routers.
Task ID
Examples
The following example shows how to enable bfd fast-detect for an IPv4 address:
RP/0/RSP0/CPU0:router# config RP/0/RSP0/CPU0:router(config)# router vrrp RP/0/RSP0/CPU0:router(config-vrrp)# interface gig 0/1/1/0 RP/0/RSP0/CPU0:router(config-vrrp-if)# vrrp 1 bfd fast-detect peer ipv4 10.1.1.1vrrp bfd minimum-interval
To configure the BFD minimum interval to be used for all VRRP BFD sessions on a given interface, use the vrrp bfd minimum-interval command in the interface configuration mode. To remove the configured minimum-interval period and set the minimum-interval period to the default period, use the no form of this command.
Syntax Description
Command History
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Minimum interval determines the frequency of sending BFD packets to BFD peers. It is the time between successive BFD packets sent for the session. Minimum interval is defined in milliseconds. The configured minimum interval applies to all BFD sessions on the interface.
Task ID
vrrp bfd multiplier
To set the BFD multiplier value, use the vrrp bfd multiplier command in the interface configuration mode. To remove the configured multiplier value and set the multiplier to the default value, use the no form of this command.
Syntax Description
Command History
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
The multiplier value specifies the number of consecutive BFD packets that, if not received as expected, cause a BFD session to go down. The BFD multiplier applies to all configured BFD sessions on the interface.
Task ID
vrrp delay
To configure the activation delay for a VRRP router, use the vrrp delay command in VRRP interface configuration mode. To delete the activation delay, use the no form of this command.
Syntax Description
minimum value
Sets the minimum delay in seconds for every interface up event. Range is 0 to 10000.
reload value
Sets the reload delay in seconds for first interface up event. Range is 0 to 10000.
Command History
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
The vrrp delay command delays the start of the VRRP finite state machine (FSM) on an interface up event to ensure that the interface is ready to pass traffic. This ensures that there are no mistaken state changes due to loss of hello packets. The minimum delay is applied on all interface up events and the reload delay is applied on the first interface up event.
The values of zero must be explicitly configured to turn this feature off.
Task ID
Examples
The following example shows how to configure a minimum delay of 10 seconds with a reload delay of 100 seconds:
RP/0/RSP0/CPU0:router(config)# router vrrp RP/0/RSP0/CPU0:router(config-vrrp)# interface mgmtEth 0/RSP0/CPU0/0 RP/0/RSP0/CPU0:router(config-vrrp-if)# vrrp delay minimum 10 reload 100vrrp ipv4
To enable the Virtual Router Redundancy Protocol (VRRP) on an interface and specify the IP address of the virtual router, use the vrrp ipv4 command in VRRP interface configuration mode. To disable VRRP on the interface and remove the IP address of the virtual router, use the no form of this command.
Syntax Description
vrid
Virtual router identifier, which is the number identifying the virtual router. Range is 1 to 255.
ip-address
IP address of the virtual router.
secondary
(Optional) Indicates additional IP addresses supported by this group.
Command History
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Configure the vrrp ipv4 command once without the secondary keyword to indicate the virtual router IP address. If you want to indicate additional IP addresses supported by the virtual router, include the secondary keyword.
Removing the VRRP configuration from the IP address owner and leaving the IP address of the interface active is considered a misconfiguration because this results in duplicate IP addresses on the LAN.
Task ID
Examples
The following example shows how to enable VRRP on 10-Gigabit Ethernet interface 0/3/0/0. The VRRP virtual router identifier is 1, and 10.0.1.10 is the IP address of the virtual router. The secondary IP address is 10.0.1.20.
RP/0/RSP0/CPU0:router(config)# router vrrp RP/0/RSP0/CPU0:router(config-vrrp)# interface TenGigE 0/3/0/0 RP/0/RSP0/CPU0:router(config-vrrp-if)# vrrp 1 ipv4 10.0.1.20 secondary RP/0/RSP0/CPU0:router(config-vrrp-if)# vrrp ipv4 10.0.1.0vrrp preempt
VRRP preempt is enabled by default. This means, a VRRP router with higher priority than the master VRRP router will take over as master router. To disable this feature, use the preempt disable command. To delay preemption, so that the higher priority router waits for a period of time before taking over, use the preempt delay command. To restore the default behavior (preempt enabled with no delay), use the no form of the command.
Syntax Description
delay seconds
Specifies the number of seconds the router delays before issuing an advertisement claiming virtual IP address ownership to be the master router. Range is 1 to 3600 seconds (1 hour).
disable
Disables preemption.
Command History
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
By default , the router being configured with this command takes over as master router for the virtual router if it has a higher priority than the current master router. You can configure a delay, which causes the VRRP router to wait the specified number of seconds before issuing an advertisement claiming virtual IP address ownership to be the master router.
Note
The router that is the virtual IP address owner preempts, regardless of the setting of this command.
Task ID
Examples
The following example shows how to configure the router to preempt the current master router when its priority of 200 is higher than that of the current master router. If the router preempts the current master router, it waits 15 seconds before issuing an advertisement claiming that it is the master router.
RP/0/RSP0/CPU0:router(config)# router vrrp RP/0/RSP0/CPU0:router(config-vrrp)# interface TenGigE 0/3/0/0 RP/0/RSP0/CPU0:router(config-vrrp-if)# vrrp 1 RP/0/RSP0/CPU0:router(config-vrrp-virtual-router)# preempt delay 15 RP/0/RSP0/CPU0:router(config-vrrp-if)# priority 200vrrp priority
To set the priority of the virtual router, use the priority command in VRRP vritual router submode. To remove the priority of the virtual router, use the no form of this command.
Syntax Description
Command History
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Use this command to control which router becomes the master router. This command is ignored while the router is the virtual IP address owner.
Task ID
Examples
The following example shows how to configure the router with a priority of 254:
RP/0/RSP0/CPU0:router(config)# router vrrp RP/0/RSP0/CPU0:router(config-vrrp)# interface TenGigE 0/3/0/0 RP/0/RSP0/CPU0:router(config-vrrp-if)# vrrp 1 RP/0/RSP0/CPU0:router(config-vrrp-vritual-router)#priority 254vrrp text-authentication
To configure the simple text authentication used for Virtual Router Redundancy Protocol (VRRP) packets received from other routers running VRRP, use the text-authentication command in VRRP virtual router submode. To disable VRRP authentication, use the no form of this command.
Syntax Description
string
Authentication string (up to eight alphanumeric characters) used to validate incoming VRRP packets.
Command History
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
When a VRRP packet arrives from another router in the VRRP group, its authentication string is compared to the string configured on the local system. If the strings match, the message is accepted. If they do not match, the packet is discarded.
All routers within the group must be configured with the same authentication string.
Note
Plain text authentication is not meant to be used for security. It simply provides a way to prevent a misconfigured router from participating in VRRP.
Task ID
Examples
The following example shows how to configure an authentication string of x30dn78k:
RP/0/RSP0/CPU0:router(config)# router vrrp RP/0/RSP0/CPU0:router(config-vrrp)# interface TenGigE 0/3/0/0 RP/0/RSP0/CPU0:router(config-vrrp-if)# vrrp 1 RP/0/RSP0/CPU0:router(config-vrrp-if)# text-authentication x30dn78kvrrp timer
To configure the interval between successive advertisements by the master router in a Virtual Router Redundancy Protocol (VRRP) virtual router, use the timer command in VRRP virtual router submode. To restore the default value, use the no form of this command.
Syntax Description
msec
(Optional) Changes the unit of the advertisement time from seconds to milliseconds. Without this keyword, the advertisement interval is in seconds. Range is 20 to 3000 milliseconds.
interval
Time interval between successive advertisements by the master router. The unit of the interval is in seconds, unless the msec keyword is specified. Range is 1 to 255 seconds.
force
(Optional) Forces the configured value to be used. This keyword is required if milliseconds is specified.
Command History
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
Task ID
Examples
The following example shows how to configure the master router to send advertisements every 4 seconds:
RP/0/RSP0/CPU0:router(config)# router vrrp RP/0/RSP0/CPU0:router(config-vrrp)# interface TenGigE 0/3/0/0 RP/0/RSP0/CPU0:router(config-vrrp-if)# vrrp 1 RP/0/RSP0/CPU0:router(config-vrrp-virtual-router)# timer 4vrrp track interface
To configure the Virtual Router Redundancy Protocol (VRRP) to track an interface, use the track interface command in VRRP virtual router submode. To disable the tracking, use the no form of this command.
track interface type interface-path-id [priority-decrement]
no track interface type interface-path-id [priority-decrement]
Syntax Description
vrid
Virtual router identifier, which is the number identifying the virtual router to which tracking applies.
type
Interface type. For more information, use the question mark (?) online help function.
interface-path-id
Physical interface or virtual interface.
Note Use the show interfaces command to see a list of all interfaces currently configured on the router.
For more information about the syntax for the router, use the question mark (?) online help function.
priority-decrement
(Optional) Amount by which the priority for the router is decremented (or incremented) when the tracked interface goes down (or comes back up). Decrements can be set to any value between 1 and 254. Default value is 10.
Command History
Command History
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator for assistance.
The vrrp track interface command ties the priority of the router to the availability of its interfaces. It is useful for tracking interfaces that are not configured for VRRP. Only IP interfaces are tracked. A tracked interface is up if IP on that interface is up. Otherwise, the tracked interface is down.
You can configure VRRP to track an interface that can alter the priority level of a virtual router for a VRRP virtual router. When the IP protocol state of an interface goes down or the interface has been removed from the router, the priority of the backup virtual router is decremented by the value specified in the priority-decrement argument. When the IP protocol state on the interface returns to the up state, the priority is restored.
Task ID
Examples
In the following example, 10-Gigabit Ethernet interface 0/3/0/0 tracks interface 0/3/0/3 and 0/3/0/2. If one or both of these two interfaces go down, the priority of the router decreases by 10 (default priority decrement) for each interface. The default priority decrement is changed using the priority-decrement argument. In this example, because the default priority of the virtual router is 100, the priority becomes 90 when one of the tracked interfaces goes down and the priority becomes 80 when both go down. See the priority command for details on setting the priority of the virtual router.
RP/0/RSP0/CPU0:router(config)# router vrrp RP/0/RSP0/CPU0:router(config-vrrp)# interface TenGigE 0/3/0/0 RP/0/RSP0/CPU0:router(config-vrrp-if)# vrrp 1 RP/0/RSP0/CPU0:router(config-vrrp-virtual-router)# track interface TenGigE 0/3/0/3 RP/0/RSP0/CPU0:router(config-vrrp-virtual-router)# track interface TenGigE 0/3/0/2
