For an S series switch, can the virtual IP address of the VRRP group and the secondary interface IP address be on the same network segment

1

For S series switches (S1700 excluded), the secondary IP address and the VRRP virtual IP address can be on the same network segment.

Other related questions:
Does the AR support difference of network segments between an interface IP address and a virtual IP address of VRRP
The AR does not support difference of network segments between an interface IP address and a virtual IP address of VRRP. The IP addresses must be set to the same network segment.

Can an AR allocate IP addresses based on secondary IP addresses
All AR models allocate IP addresses based on the primary IP address, regardless of whether the interface or global address pool is used. The AR cannot allocate IP addresses based on the secondary IP address, that is, user terminals cannot obtain IP addresses on the same network segment as the secondary IP address.

Whether the firewall supports the VRRP group virtual IP address and interface address that are on different network segments
Can actual interface IP addresses reside on the same network segment as virtual IP addresses in hot standby? 1. You must assign IP addresses to a physical interface before you set the virtual IP address of the VRRP group on the interface. 2. When you configure VRRP groups, ensure that the virtual IP addresses is not the IP address of any physical interface. 3. Invalid address, such as broadcast address, multicast address, or loopback address, cannot be used as the VRRP virtual IP address. 4. If the virtual IP address and the IP address of the physical interface reside on different subnets, you need to specify the subnet mask of the virtual IP address. 5. The VRID of the VRRP group cannot be the same as that configured on any other device in the same VLAN. 6. The VRIDs and virtual IP addresses of VRRP groups configured for the same interfaces on the active and standby USGs shall be the same. Configuration on the USG6000 [USG6600-1]int vlani2 [USG6600-1-Vlanif2]ip add 172.16.1.1 24 [USG6600-1-Vlanif2]vrrp vrid 1 virtual-ip 10.1.1.1 24 active [USG6600-1-Vlanif2]dis thi interface Vlanif2 ip address 172.16.1.1 255.255.255.0 vrrp vrid 1 virtual-ip 10.1.1.1 255.255.255.0 active Configuration on the USG2000&5000 [USG5500]int vlanif10 [USG5500-Vlanif10]ip add 172.16.1.1 24 [USG5500-Vlanif10]vrrp vrid 1 virtual-ip 10.10.1.1 24 master [USG5500-Vlanif10]dis this interface Vlanif10 alias vlanif 10 ip address 172.16.1.1 255.255.255.0 vrrp vrid 1 virtual-ip 10.10.1.1 255.255.255.0 master #

Whether CE series switches' VLANIF IP addresses and virtual VRRP IP addresses can be on different network segments
No.

Relationship between a secondary IP address and an OSPF IP address
They are actually the same address. A secondary address is usually referred to as an OSFP IP address on the NMS.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top