Hi,
In this post, I'd like to show you how to troubleshoot the Pinging a VRRP Interface Address Fails. Please follow the steps outlined below.
Symptom of a Fault
On the network shown in Figure 1, VRRP backup group 1, functioning as the gateway of a service server, is configured on GE-1/0/0 of Router A and GE-1/0/0 of Router B. Router A functions as a master device and Router B functions as a backup device. After the configurations, the service server fails to ping GE-1/0/0 of Router A, as shown in figure 1 networking diagram of a failure in pinging the IP address of a VRRP interface.
Figure 1
Note: Save the results of each troubleshooting step. If your troubleshooting fails to correct the fault,
you will have a record of your actions to provide Huawei technical support personnel.
Fault Analysis
First of all we need to check whether the configurations of the VRRP backup group on two Routers [Router A and Router B] match.
Run the display arp all command on Router A to check the MAC ADDRESS field. Router A has learned the MAC address of the service server. It indicates that the problem is not caused by a link failure.
Run the display vrrp command on Router A and Router B to check the State field. The state of Router A is Master and the state of Router B is Backup, indicating that the VRRP backup group has been successfully created.
Configure STP on Router A, Router B, and the switch to eliminate loops on the network. After the configuration, the service server still fails to ping GE-1/0/0 of Router A. It indicates that the problem is not caused by the loop on the network.
Information about the ARP packet sent by Router A is as follows:
ARP/7/arp_send:Slot=1;Send an ARP Packet, operation : 1, sender_eth_addr :,sender_ip_addr : 10.0.0.11, ta
rget_eth_addr : 0000-0000-0000, target_ip_addr : 10.0.0.22
Information about the ARP packet received by Router A is as follows:
ARP/7/arp_rcv:Slot=4;Receive an ARP Packet, operation : 2, sender_eth_addr : sender_ip_addr : 10.0.0.22,
target_eth_addr : 00xx-2477-2dbe, target_ip_addr : 10.0.0.11
After running the ping command on the service server to ping GE-1/0/0 of Router A, run the debug arp packet command to get an ARP packet in the user view on Router A.
The preceding packet information shows that the ARP packet is sent by the interface board in slot 1 and received by the interface board in slot 4. Run the display current-configuration command. The command output shows that the arp learning strict command has been configured on Router A, causing the service server to fail to ping GE-1/0/0 of Router A. In this case, run the arp learning strict force-disable command to disable the strict MAC address learning function on GE-1/0/0 of Router A. The fault is then cleared.
Procedure
Run the system-view command to enter the system view.
Run the interface interface-type, interface-numbe,r command to enter the interface view.
Run the arp learning strict force-disable command to disable the strict MAC address learning function.
Summary
The strict MAC address learning function may cause a ping operation to fail. Therefore, configure this function with caution.
References
https://forum.huawei.com/enterprise/en/ne-router-troubleshooting-how-to-solve-the-double-master-devices-exist-in-a-vrrp-backup-group/thread/703443-861#pid3812773
https://forum.huawei.com/enterprise/en/ne-router-troubleshooting-how-to-solve-the-vrrp-status-of-the-backup-device-flaps/thread/703679-861
https://forum.huawei.com/enterprise/en/ne-router-troubleshooting-the-vrrp-non-preemption-mode-does-not-take-effect/thread/713185-861
https://support.huawei.com/enterprise/en/doc/EDOC1000177634
I hope this trouble case is useful to you!
