Wireless Access

Hi

 Our controller detected vrrp transition trap, but it didin't takeover actually in show vrrp and the rest of syslog. But syslog message displyes three hellos were dropped. So it should have taken over(the threshold is three, right?). I hope old standby changed to new master and remain there in preempt disabled after three hellos ware dropped. Do anyone have any idea if it didn’t take over in spite of three heartbeat misses?

<syslog>
17x.2x.2.248 Jul  1 09:34:11 2012 [17x.2x.2.247] fpapps[1547]: <313333> <ALRT> |fpapps|  VRRP: vrid "100"(Master) - Received VRRP Advertisement with LOWER PRIORITY (100) from 17x.2x.2.250, ignoring.
17x.2x.2.250 Jul  1 09:34:11 2012 [17x.2x.2.249] fpapps[1548]: <313328> <WARN> |fpapps|  vrrp: vrid "100" - VRRP state transitioned from BACKUP to MASTER
17x.2x.2.250 Jul  1 09:34:11 2012 [17x.2x.2.249] fpapps[1548]: <306502> <INFO> |fpapps|  Publish service 'VRRP_STATE', object len 20
17x.2x.2.250 Jul  1 09:34:11 2012 [17x.2x.2.249] fpapps[1548]: <313330> <INFO> |fpapps| Sending Role change event to CFGM

17x.2x.2.248 Jul  1 09:34:11 2012 [17x.2x.2.247] cfgm[1368]: <399815> <INFO> |cfgm|  Connection went down withlocal 17x.2x.2.249 socketID: 14, errno_str:Success
17x.2x.2.248 Jul  1 09:34:11 2012 [17x.2x.2.247] cfgm[1368]: <399815> <INFO> |cfgm|  Closing Socket 14 Connection with Local 17x.2x.2.249, master-local transport type 4
17x.2x.2.248 Jul  1 09:34:11 2012 [17x.2x.2.247] cfgm[1368]: <399815> <INFO> |cfgm|  Switch 17x.2x.2.247 role master, Resetting Socket 14 connection for 17x.2x.2.249 transport type TCP cfgUpdateState UPDATE SUCCESSFUL
17x.2x.2.250 Jul  1 09:34:11 2012 [17x.2x.2.249] fpapps[1447]: <399815> <INFO> |fpapps|  fpappsCB: msgPvtPart 0x129c4c00 err 0 MsgCode 11000 DestPtNm 8378 DestIp 127.0.0.1 PckTy 1
17x.2x.2.250 Jul  1 09:34:11 2012 [17x.2x.2.249] cfgm[1369]: <399815> <INFO> |cfgm|  Switch 17x.2x.2.249 Role master will reset all local connection, may be due to VRRP rolechange
17x.2x.2.250 Jul  1 09:34:11 2012 [17x.2x.2.249] fpapps[1548]: <313331> <WARN> |fpapps|  VRRP: vrid "100" - Missed 3 Hello Advertisements from VRRP Master 17x.2x.2.250
17x.2x.2.250 Jul  1 09:34:11 2012 [17x.2x.2.249] cfgm[1369]: <307218> <INFO> |cfgm|  CFGM IPSEC   src_net:0.0.0.0:0.0.0.0 dst_net:0.0.0.0:0.0.0.0 vlan:0
17x.2x.2.250 Jul  1 09:34:11 2012 [17x.2x.2.249] cfgm[1369]: <399815> <INFO> |cfgm|  Switch 17x.2x.2.249 role master config state UPDATE SUCCESSFUL, Closing Socket 13 connection
17x.2x.2.250 Jul  1 09:34:11 2012 [17x.2x.2.249] fpapps[1548]: <313328> <WARN> |fpapps|  vrrp: vrid "100" - VRRP state transitioned from MASTER to BACKUP
17x.2x.2.250 Jul  1 09:34:11 2012 [17x.2x.2.249] fpapps[1548]: <306502> <INFO> |fpapps|  Publish service 'VRRP_STATE', object len 20
17x.2x.2.250 Jul  1 09:34:11 2012 [17x.2x.2.249] fpapps[1548]: <313330> <INFO> |fpapps| Sending Role change event to CFGM

17x.2x.2.250 Jul  1 09:34:12 2012 [17x.2x.2.249] localdb[1475]: <133072> <INFO> |localdb|  Received master IP response 17x.2x.2.251, switch role 2. Old IP 17x.2x.2.251, old switch role 4
17x.2x.2.250 Jul  1 09:34:12 2012 [17x.2x.2.249] authmgr[1473]: <399815> <INFO> |authmgr|  Set MASTER IP to 17x.2x.2.251
17x.2x.2.250 Jul  1 09:34:12 2012 [17x.2x.2.249] localdb[1475]: <133113> <INFO> |localdb| Querying local switch list
17x.2x.2.250 Jul  1 09:34:12 2012 [17x.2x.2.249] authmgr[1473]: <399815> <INFO> |authmgr|  Set Switch Role to master
17x.2x.2.250 Jul  1 09:34:12 2012 [17x.2x.2.249] fpapps[1548]: <313332> <WARN> |fpapps|  VRRP: vrid "100"(Master) -  Received VRRP Advertisement with HIGHER PRIORITY (110) from 17x.2x.2.248
17x.2x.2.250 Jul  1 09:34:12 2012 [17x.2x.2.249] fpapps[1447]: <399815> <INFO> |fpapps|  fpappsCB: msgPvtPart 0x129c5c00 err 0 MsgCode 7005 DestPtNm 8224 DestIp 127.0.0.1 PckTy 1
17x.2x.2.250 Jul  1 09:34:12 2012 [17x.2x.2.249] cfgm[1369]: <399815> <INFO> |cfgm|  Switch 17x.2x.2.249 Role standby will reset all local connection, may be due to VRRP rolechange

<master>
master-redundancy
  master-vrrp 100
  peer-ip-address 17x.2x.2.249 ipsec xx
!
vrrp 100
  priority 110
  ip address 17x.2x.2.251
  vlan 3002
  no shutdown

<backup>
master-redundancy
  master-vrrp 100
  peer-ip-address 17x.2x.2.247 ipsec xx
!
vrrp 100
  ip address 17x.2x.2.251
  vlan 3002
  no shutdown

- 5.0.3.3

Regards

Saimon

What is the priority of the backup?

How are the controllers physically connected to your infrastructure?  Are they connected via trunk?  Do you use spanning tree?

What is the output of "show vrrp 100 statistics" on both sides?

Hi Cjoseph

What is the priority of the backup? -> Master 110 and Backup 100

How are the controllers physically connected to your infrastructure?  ->Both are connected to same L3 switch.

Are they connected via trunk?  -> It is trunk ports.

Do you use spanning tree? -> No

What is the output of "show vrrp 100 statistics" on both sides?

(Primary) #show vrrp 100 statistics

Virtual Router 100:

   Admin State UP, VR State MASTER

   Advertisements:
   Sent:                         28837523   Received:                       867
   Zero priority sent:                  3   Zero priority received:           0
   Lower IP address received            0   Lower Priority received         867
   Tracking priority overflow:          0
   Advertisements received errors:
      Interval mismatch                 0   Invalid TTL                       0
      Invalid packet type               0   Authentication failure            0
      Invalid auth type                 0   Mismatch auth type                0
      Invalid VRRP IP address           0   Invalid packet length             0
   VRRP Up timestamp:                       Fri Aug 12 16:56:52 2011
   Master Up timestamp:                     Fri Aug 12 16:56:56 2011
   Last advertisement sent timestamp:       Thu Jul  5 11:28:11 2012
   Last advertisement received timestamp:   Fri Aug 12 16:56:56 2011
   Current time:                            Thu Jul  5 11:28:11 2012
   Number times became VRRP Master:         4

(Backup) #show vrrp 100 statistics

Virtual Router 100:

   Admin State UP, VR State BACKUP

   Advertisements:
   Sent:                           142506   Received:                  28844313
   Zero priority sent:                  5   Zero priority received:           0
   Lower IP address received     28844313   Lower Priority received           0
   Tracking priority overflow:          0
   Advertisements received errors:
      Interval mismatch                 0   Invalid TTL                       0
      Invalid packet type               0   Authentication failure            0
      Invalid auth type                 0   Mismatch auth type                0
      Invalid VRRP IP address           0   Invalid packet length             0
   VRRP Up timestamp:                       Fri Aug 12 17:14:38 2011
   Master Up timestamp:                     N/A, not MASTER
   Last advertisement sent timestamp:       Fri Aug 12 16:58:26 2011
   Last advertisement received timestamp:   Thu Jul  5 11:29:19 2012
   Current time:                            Thu Jul  5 11:29:19 2012
   Number times became VRRP Master:     

Any comment is appreciated.

Regards

Simon

the "Number of Times it became master" is cut off from the backup.  In addition, it looks like the backup thinks it was the master for a great deal of time.

You might want to open a case so they can troubleshoot the backup's inability to see the master controller....

Cjoseph

I am sorry the number of times was cut off.  It was 9.

   Number times became VRRP Master:         9

Anyway, I come to understand the condition gradually, so I can explain why trap was sent.

No need to open case for this.

Regards

Simon