Are there some tricks to achieve redundancy without wasting two extra public IP addresses with VRRP? (Gateway needs to be on USG)
I've tried to trick VRRP by assigning interface IP address from private IP address pool and public service IP address as VRRP virtual IP address.
While that actually may work, the problem is that the route is not propagated into OSPF no matter what I do (I tried to define NULL route for that subnet).
Other vendors have the ability to define only VRRP virtual IP address without interface IP address. Does Huawei USG have anything similar?
197.92.144.0/30 is only example, not realted public ip address space.
Here is experimental configuration (that doesn't propagate the interface subnet route to OSPF process) - OSPF is working well for every other "normally configured" subnet.
interface Eth-Trunk0.5
vlan-type dot1q 500
alias vlan500
ip address 10.255.144.1 255.255.255.252
vrrp vrid 5 virtual-ip 197.92.144.1 255.255.255.252 active
ip route-static 197.92.144.0 255.255.255.252 NULL 0
ospf 1 router-id 10.200.0.21import-route static cost 1 type 2
bandwidth-reference 80000
.. output ommited ..
network 197.92.144.0 0.0.0.3
Topology:
