Wireless Access

Reply
MVP
Posts: 1,401
Registered: ‎05-28-2008

6.3.1.15 master redudency not working :(

6.3.1.15 master redudency not working :(

Everytime we configure master redudency - connectiviy between both controller on same vlan/segment is gone...

Disabling the VRRP master redudency making to ICMP to be back and work as needed.

 

any advise?

 

Standby:

master-redundancy

  master-vrrp 100

  peer-ip-address 10.101.205.22 ipsec e5f06e6f176fec6396ec8c4f384fc904

!

vrrp 100

  priority 110

  ip address 10.101.205.20

  vlan 205

  preempt delay 0

  tracking master-up-time 30 add 20

  no shutdown

!

 

 

Master:

master-redundancy
  master-vrrp 100
  peer-ip-address 10.101.205.21 ipsec aec369f929c79374d424ef9b301a552b
!
vrrp 100
  priority 115
  ip address 10.101.205.20
  vlan 205
  preempt delay 0
  tracking master-up-time 30 add 20
  no shutdown
!

 

Please advise.

 

Both controller can ICMP/ping each other on VLAN205...until i set the master redudency setting. :(

*****************2Plus Wireless Solutions****************************
Aruba Airheads - Powered By community for empower the community
************ Don't Forget to Kudos + me,If i helped you******************
Guru Elite
Posts: 8,328
Registered: ‎09-08-2010

Re: 6.3.1.15 master redudency not working :(

What state is spanning-tree in when you enable VRRP? 


Thanks, 
Tim

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
MVP
Posts: 1,401
Registered: ‎05-28-2008

Re: 6.3.1.15 master redudency not working :(

[ Edited ]

Sapnning - tree is off on all interfaces/both controllers. y?

The funny thing is that when master-redudency is enabled both controllers cannot icmp each other from same vlan/segment...but i can ping them from another computer on same VLAN .... both of them...

when i disable the master redudency - both controllers again able to ping each other (both of them showing on each other ARP table)

 

*****************2Plus Wireless Solutions****************************
Aruba Airheads - Powered By community for empower the community
************ Don't Forget to Kudos + me,If i helped you******************
MVP
Posts: 1,418
Registered: ‎10-25-2011

Re: 6.3.1.15 master redudency not working :(

enable spanning tree for the vlan only. try that
Pasquale Monardo | Senior Network Solutions Consultant
ACDX #420 | ACMP
[If you found my post helpful, please give kudos!]
MVP
Posts: 1,401
Registered: ‎05-28-2008

Re: 6.3.1.15 master redudency not working :(

  • On both controllers?
  • Even due that on the backbone switches both controllers are connected two STP is enabled?
  • Even due all othe vlans and even the vlan of the vrrp dont got any issue connecting from extranl pc on same vlan ? (until i enable the master redudency ?..and then the icmp/connecitivy between controllers on same vlan is lost)

 

 

*****************2Plus Wireless Solutions****************************
Aruba Airheads - Powered By community for empower the community
************ Don't Forget to Kudos + me,If i helped you******************
MVP
Posts: 1,418
Registered: ‎10-25-2011

Re: 6.3.1.15 master redudency not working :(

i had an issue with VRRP where the backup wouldn't becoy the master unless I enabled spanning tree for the vlan. it was enabled globally but wouldn't work. its a bug in the code that is fixed in a newer release
Pasquale Monardo | Senior Network Solutions Consultant
ACDX #420 | ACMP
[If you found my post helpful, please give kudos!]
Valued Contributor II
Posts: 804
Registered: ‎12-01-2014

Re: 6.3.1.15 master redudency not working :(

Hi,

 

Check the status of the IPSec tunnel between master and standby. if possible share the output of "show ip route" and "show switches"

 

Please feel free for any further help on this.

Cheers,
Venu Puduchery,
[Is my post helped you ? Give Kudos :) ]
MVP
Posts: 330
Registered: ‎04-25-2013

Re: 6.3.1.15 master redudency not working :(

Please check this post

http://community.arubanetworks.com/t5/Unified-Wired-Wireless-Access/VRRP-Pinging-and-syncronisation-issue/m-p/219593

in the past i got the same issue and it was because i was using nat inside the VRRP Master VLAN, the VRRP as you know use IPSEC , and ipsec does not support nat.

Regards

Raouf CHAHBOUNE
ICT Network & Security Engineer
CCNP R/S | CCNA Security | ACMP|ACDX



[If my post is helpful please give kudos, or mark as solved if it answers your post.]
MVP
Posts: 330
Registered: ‎04-25-2013

Re: 6.3.1.15 master redudency not working :(

Please check this post

http://community.arubanetworks.com/t5/Unified-Wired-Wireless-Access/VRRP-Pinging-and-syncronisation-issue/m-p/219593

in the past i got the same issue and it was because i was using nat inside the VRRP Master VLAN, the VRRP as you know use IPSEC , and ipsec does not support nat.

Regards

Raouf CHAHBOUNE
ICT Network & Security Engineer
CCNP R/S | CCNA Security | ACMP|ACDX



[If my post is helpful please give kudos, or mark as solved if it answers your post.]
MVP
Posts: 1,401
Registered: ‎05-28-2008

Re: 6.3.1.15 master redudency not working :(

Thanks AirHeads.

Problem solved by carefuly recondigured everything.

(Thanks for the tip for not doing route-src-nat on any vlan you establishing the ipsec between the controllers in)

*****************2Plus Wireless Solutions****************************
Aruba Airheads - Powered By community for empower the community
************ Don't Forget to Kudos + me,If i helped you******************
Search Airheads
Showing results for 
Search instead for 
Did you mean: