VRRP (Virtual Router Redundancy Protocol)

Scenario:

Internet traffic is becoming more and more important since the company you are working for is focused on e-commerce. Every minute that their webservers running webshops are unavailable is causing profit loss. The company decided need a scalable solution and get rid of the single router (NewJersey), so there is no single point of failure anymore. Up to you to start configuring!

Goal:

  • All IP addresses have been preconfigured as following:NewYork: F0/0: 192.168.1.1 /24
    NewYork: F0/1: 192.168.2.1 /24NewJersey: F0/0: 192.168.1.2 /24
    NewJersey F0/1: 192.168.2.2 /24

    L.A.: F0/0: 192.168.1.3 /24
    L.A.: F0/1: 192.168.2.3 /24

    HOST: F0/0: 192.168.1.200 /24

    IPS: F0/0: 192.168.2.254 /24

  • The ISP router has the following loopback interfaces, these are used to simulate the Internet.Loopback0: 172.16.1.1 /24
    Loopback1: 172.16.2.1 /24
    Loopback2: 172.16.3.1 /24
  • The host router has been configured with “no ip routing” which will turn it into an ordinary host.
  • OSPF has been configured on all routers except the host router for full connectivity.
  • Configure NewYork, Newjersey and L.A. for VRRP, use the group number “1”.
  • The virtual IP Address should be 192.168.1.254 /24 .
  • Newjersey should be the master router, when it fails L.A. should take over.
  • Hello packets should be sent every 7 seconds.
  • Make sure the router with highest priority will always be the Master router.
  • Configure authentication for VRRP, use password “vault”.
  • When the HSRP active router’s F0/1 interface goes down, make sure it’s no longer the master VRRP router.
  • Configure the virtual IP address of VRRP as default gateway on the Host Router.
  • Ensure you can ping the loopbacks of the ISP router from the Host router.
  • Ensure that whenever 2 out of 3 routers are down, the Host router still has connectivity to the ISP.

It took me 1000s of hours reading books and doing labs, making mistakes over and over again until I mastered all the routing protocols for CCNP.

Would you like to be a master of routing too? In a short time without having to read 900 page books or google the answers to your questions and browsing through forums?

I collected all my knowledge and created a single ebook for you that has everything you need to know to become a master of routing.

You will learn all the secrets about VRRP, gateway redundancy and more.

Does this sound interesting to you? Take a look here and let me show you how to Master CCNP ROUTE

IOS:

c3725-adventerprisek9-mz.124-15.T7.bin

Topology:

Virtual Router Redundancy Protocol (VRRP)

Video Solution:

Configuration Files

You need to register to download the GNS3 topology file. (Registration is free!)

Once you are logged in you will find the configuration files right here.

Opt In Image
Do you want your CCNA or CCNP Certificate?

The How to Master series helps you to understand complex topics like spanning-tree, VLANs, trunks, OSPF, EIGRP, BGP and more.

Written by René Molenaar - CCIE #41726

You May Also Like

About the Author: Rene Molenaar

René - CCIE #41726 is the creator of GNS3Vault.com where he shares CCNA, CCNP and CCIE R&S labs. He also blogs about networking on http://networklessons.com

24 Comments

  1. Hi!

    One precision concerning this lab… Do i understand correct that to configure VRRP on CISCO firstly we should configure HSRP?

    1. I’ve configured VRRP and i can ping ISP with 192.168.2.254, but can’t ping with loopback ip addresses, is it normal?

      1. If you are able to ping the 192.168.2.254 IP address but not from a loopback you have some routing issues. See if the ISP router knows about the destination network where you are sending the ping from. If not you’ll have to add some static routes or additional network commands for OSPF.

        1. I think the command "ip ospf network point-to-point" should be issued on the loopbacks so that ospf will consider them as normal interface to be advertised with the exact subnet. it worked for me and ospf domain saw them as /24 networks.

    2. HSRP and VRRP are similar but two different protocols, You’ll choose one of the two if you want a virtual gateway. HSRP is a Cisco proprietary protocol and VRRP is a standard. They are 90% similar but there are a couple of differences between them…

  2. Very good lab.Thanks Rene
    But may I make a suggestion. If you want to see the host’s pings fail as the master router’s priority decrements and the backup takes over that role, then you should ensure that interface fa0/0 on New York, New jersey and LA are not forming adjacencies on those interfaces.In other words make them passive. I think this is a nice way to see how long it will take for the routers to fail over from the host’s point of view.

  3. This lab is not right no more.. something probably happened. I am doing troubleshooting and then VRRP. I wasn’t expecting that.. found so many misplaced configuration and neighboring with routers that don’t even are in the topology.

    1. There is an error on the host config. Interface fa01/ has the IP address on but FA0/0 is connected to the switch.

  4. If you ping from Host to ISP when you have shut both LA and New Jersey you get some U.U.U responses before New York router becomes a full Active route.

  5. Hello Rene,

    Did you mean to include the initial configurations/topology files on this page? It sounds like it based on the wording of the instructions.

    Thanks!

  6. When i ping the Loopback address from the Host to the ISP i receive U.U.U responseThere is any idea how to solve this issue.Thanks

  7. hi rene,
    I am trying to open this vrrp lab. can anyone plz help me with my gns3.

  8. Me too. Can’t open the vrrp lab. There is no gns3 topology to open.

  9. Plz, in Topology as you write a interfaces of routers and switches, i request you to write IP address to so that we can understand much better !

  10. Plz, in Topology as you write a interfaces of routers and switches, i request you to write IP address too so that we can understand much better

  11. i found the solution no need for remote server i just accepted GNS3 from the antivirus ..it works ^_^

  12. When the HSRP active router’s F0/1 interface goes down, make sure it’s no longer the master VRRP router.

    Typo error “HSRP” 😀

Comments are closed.