VRRP Backup does not Take Effect on AC
Network Topology
Physical Network Topology
Figure1 VRRP
Fault Description
The VRRP hot backup is configured. After the primary AC1 is power off, the AP does not switch traffic to AC2 immediately. It causes services interruption.
Configuration File
l AC1
#
sysname AC1
#
vrrp recover-delay 60
#
vlan batch 100 to 102
#
dhcp enable
#
dhcp server database enable
dhcp server database recover
#
interface Vlanif100
ip address 10.23.100.1 255.255.255.0
vrrp vrid 1 virtual-ip 10.23.100.3
admin-vrrp vrid 1
vrrp vrid 1 priority 120
vrrp vrid 1 preempt-mode timer delay 1800
dhcp select interface
dhcp server excluded-ip-address 10.23.100.2
#
interface Vlanif101
ip address 10.23.101.1 255.255.255.0
vrrp vrid 2 virtual-ip 10.23.101.3
vrrp vrid 2 preempt-mode timer delay 1800
vrrp vrid 2 track admin-vrrp interface Vlanif100 vrid 1 unflowdown
dhcp select interface
dhcp server excluded-ip-address 10.23.101.2
#
interface Vlanif102
ip address 10.23.102.1 255.255.255.0
#
interface GigabitEthernet0/0/1
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 100 to 101
#
interface GigabitEthernet0/0/2
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 102
#
capwap source interface Vlanif100
#
hsb-service 0
service-ip-port local-ip 10.23.102.1 peer-ip 10.23.102.2 local-data-port
10241 peer-data-port 10241
service-keep-alive detect retransmit 3 interval 6
#
hsb-group 0
track vrrp vrid 1 interface Vlanif100
bind-service 0
hsb enable
#
hsb-service-type access-user hsb-group 0
#
hsb-service-type dhcp hsb-group 0
#
hsb-service-type ap hsb-group 0
#
wlan
security-profile name wlan-net
security wpa-wpa2 psk pass-phrase
%^%#G.D***jG./fvyr*oM)KMgc*sR}!GUWLa"%G_E.^B%^%# aes
ssid-profile name wlan-net
ssid wlan-net
vap-profile name wlan-net
service-vlan vlan-id 101
ssid-profile wlan-net
security-profile wlan-net
regulatory-domain-profile name default
ap-group name ap-group1
radio 0
vap-profile wlan-net wlan 1
radio 1
vap-profile wlan-net wlan 1
ap-id 0 type-id 35 ap-mac 60de-4476-e360 ap-sn 210235554710CB000042
ap-name area_1
ap-group ap-group1
#
return
l AC2
#
sysname AC2
#
vrrp recover-delay 60
#
vlan batch 100 to 102
#
dhcp enable
#
dhcp server database enable
dhcp server database recover
#
interface Vlanif100
ip address 10.23.100.2 255.255.255.0
vrrp vrid 1 virtual-ip 10.23.100.3
admin-vrrp vrid 1
dhcp select interface
#
interface Vlanif101
ip address 10.23.101.2 255.255.255.0
vrrp vrid 2 virtual-ip 10.23.101.3
vrrp vrid 2 track admin-vrrp interface Vlanif100 vrid 1 unflowdown
dhcp select interface
#
interface Vlanif102
ip address 10.23.102.2 255.255.255.0
#
interface GigabitEthernet0/0/1
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 100 to 101
#
interface GigabitEthernet0/0/2
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 102
#
capwap source interface Vlanif100
#
hsb-service 0
service-ip-port local-ip 10.23.102.2 peer-ip 10.23.102.1 local-data-port
10241 peer-data-port 10241
service-keep-alive detect retransmit 3 interval 6
#
hsb-group 0
track vrrp vrid 1 interface Vlanif100
bind-service 0
hsb enable
#
hsb-service-type access-user hsb-group 0
#
hsb-service-type dhcp hsb-group 0
#
hsb-service-type ap hsb-group 0
#
wlan
security-profile name wlan-net
security wpa-wpa2 psk pass-phrase
%^%#G.D***jG./fvyr*oM)KMgc*sR}!GUWLa"%G_E.^B%^%# aes
ssid-profile name wlan-net
ssid wlan-net
vap-profile name wlan-net
service-vlan vlan-id 101
ssid-profile wlan-net
security-profile wlan-net
regulatory-domain-profile name default
ap-group name ap-group1
radio 0
vap-profile wlan-net wlan 1
radio 1
vap-profile wlan-net wlan 1
ap-id 0 type-id 35 ap-mac 60de-4476-e360 ap-sn 210235554710CB000042
ap-name area_1
ap-group ap-group1
#
return
Troubleshooting Location
Troubleshooting Procedure
Step 1 Run display vrrp command to check whether the VRRP configured by the customer is correct.
Check whether the VRRP status of the device is normal.
Step 2 Run display hsb-group command to check whether the HSB backup group of the device is created.
Check the group status at both ends, whether one is master and the other is backup role.
Step 3 Run display hsb-service command to check whether the information about the primary and backup services of the HSB is normal.
Check whether the display of the Service State item is connected?
Step 4 After all the status check is complete, if it is normal, check the CAPWAP source address configured by capwap source.
Normally, the CAPWAP source address should be configured as a VRRP virtual address.
In this case, the source address of the capwap configured on the AC is not the VRRP virtual address. So, the AP cannot be switched to the standby AC in time.
Step 5 Modify the capwap source address to the VRRP virtual address on the active and standby ACs.
----End
Root Cause
The CAPWAP source address configured on the active and standby ACs is not the virtual address of VRRP.
