Problem and solution when the firewall cannot ping the virtual IP address of the VRRP group

54

Possible causes are as follows:
A VRID conflict occurs.
The virtual IP address ping function is disabled. According to RFC3768, the ping command cannot be used to detect the virtual IP address connectivity. Huawei provides the virtual IP address ping function for the convenience of monitoring. This function is enabled by default. If it is disabled, you can run the vrrp virtual-ip ping enable command to enable it.

Other related questions:
Why cannot the virtual IP address of a VRRP group be pinged
Check whether the vrrp virtual-ip ping disable or undo vrrp virtual-ip ping enable command is configured on an S series switch. If so, run the vrrp virtual-ip ping enable command to allow the master device to respond to ping packets sent to the virtual IP address.

Why does the ping to the virtual IP address of the VRRP group fail
Possible causes are as follows: -VRIDs conflict. -Pinging virtual IP addresses is disabled. Huawei firewalls enable you to ping virtual IP addresses by default. If ping virtual IP address is disabled, run the vrrp virtual-ip ping enable command.

Whether S series switches support ping to the virtual IP address of the VRRP group
S series switches (S1700 excluded) allow user devices to ping a virtual IP address to serve the following purposes: - Monitors the operating status of the master in a VRRP group. Monitors communication between a user device and a network connected by a default gateway using the virtual IP address. Run the vrrp virtual-ip ping enable command to enable the ping to the virtual IP address.

Configuring OSPF to advertise virtual IP addresses of VRRP groups on the USG
In the OSPF zone, run the network command to advertise virtual addresses.

Configuring virtual IP addresses of VRRP groups on the USG6000
Configuring virtual IP addresses of VRRP groups on the USG6000 sys //Access the system view. [USG6600-1] int g1/0/9 //Access the Layer 3 interface. [USG6600-1-GigabitEthernet1/0/9]ip add 1.1.1.1 24 //Configure the interface IP address. [USG6600-1-GigabitEthernet1/0/9]vrrp vrid 1 virtual-ip 1.1.1.254 active (virtual IP address of the VRRP group) //Configure the virtual IP address of the VRRP group.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top