Vrrp Troubleshooting - H3C SecPath F1800-A Operation Manual

Operation Manual - Reliability
H3C SecPath F1800-A Firewall

1.7 VRRP Troubleshooting

During the VRRP management group troubleshooting, using the debugging
vrrp-group command, you can debug VRRP management group to search for
system faults and causes.
Fault1: VRRP management group cannot work normally after configuration.
Troubleshooting:
Do as follows.
Use the display vrrp-group command to check the state of the VRRP
management group, to make sure it has been enabled.
Fault2: The VRRP management group cannot work normally after it is enabled.
Troubleshooting:
Do as follows.
Use the display interface command to check whether the interface is in Down
state. If it is, activate it.
Fault3: After VRRP management group is enabled, VRRP state and VGMP state
switch over and over.
As a group management protocol, VGMP is used to assure state consistency of
members in the group. If an unstable member exits, it will disturb the stability of VGMP
and all VRRP members.
Troubleshooting:
Do as follows.
Check hardware connection lines and use the display interface command to
check whether the state of an interface is unstable.
Check VRRP backup group configuration. The state confusion might be caused
by a VRRP backup group that you forgot to add to the VRRP management group
and the priority of the backup group is higher than that of backup groups in the
VRRP management group.
Check VRRP management group configuration whether components in VRRP
management groups on two firewalls are different.
Make sure that:
Priorities of backup groups in VRRP management groups are higher than those
of unjoined backup groups.
The virtual IP address cannot be the real IP address of the interface.
In addition, check the accuracy and consistency of VRRP management groups before
enabling it.
Chapter 1 Route Redundancy Backup
8-37