Watch Group Monitoring; Physical Interface And Physical Ip Address Change On A Vrrp Router - Enterasys Security Router X-PeditionTM User Manual

When the actual IP address owner of the Virtual IP address releases the master state of the VR, it
will no longer be able to receive any IP packet destined for that address even though the actual
interface is still up.
This may cause routing packets to not reach this interface and cause this interface to be considered
down by other routers. To avoid this situation when using Interface Monitoring, be sure that you
configure Virtual IP addresses different than the actual IP addresses of the interfaces.

Watch Group Monitoring

This feature, entered by the
Dialer, Fast/GigabitEthernet, Multilink or Serial interfaces or sub-interfaces. It also allows the
tracking of one or more routes as configured by the
are particularly useful for monitoring Dialer backup lines.
Watch group monitoring is very similar to interface monitoring. The VR configured with the
dialer watch-group
dialer watch-list instead of the interface. If all routes are not available, the VR will lower its
priority to 0 and let the other router to take over as master for that VR. Usually, dialer watch-
group monitoring should be configured on the XSR which has a very high likelihood of being the
master for that VR.
The VR will lower its priority to 0 when the XSR meets all of the following conditions:
• All active routes configured under the corresponding dialer watch-list went down.
• The connect or route check timer has expired. Those timers can be configured under that dialer
watch list. The default value for the connect timer is 5 seconds, and 30 seconds for the route
check. For more timer details, refer to the XSR CLI Reference Guide.
The VR will increase its priority back to the original value, and may become the master VR again if
preemption is enabled, when the XSR meets one of the following conditions:
• At least one of the routes configured under monitoring watch-group came up and the
disconnect timer has expired. The disconnect timer can be configured under that dialer watch
list with a default value of five seconds.
• You have removed the watch-list. The watch-list behaves differently on an interface:
removing an interface indicates the interface is down and cannot pass traffic, but removing
the watch-list indicates you do not want to monitor those routes; it does not indicate the
routes configured under that watch-list are down.
When the actual IP address owner of the Virtual IP address releases mastery of the VR, it can no
longer receive any IP packet destined for that address even though the actual interface is still up.
This may cause routing packets to not reach this interface and cause it to be considered down by
other routers. To avoid this situation, when dialer watch-group Monitoring is enabled, the Virtual
IP address configured should be different from the actual IP addresses of the interfaces.

Physical Interface and Physical IP Address Change on a VRRP Router

The VR will change to the initialize state regardless of the interface state, if you configure a VR
before configuring the physical IP address, and there will be a conflict between the physical IP and
VR IP address.
vrrp <group> track <watch-group>
command will monitor the routes configured under the corresponding
command, permits tracking of
dialer watch-list command. Watch lists
IP Routing Protocols
XSR User's Guide 5-33