• September 24, 2020, 12:36:22 AM
Welcome, Guest. Please login or register. Registration is free.
Did you miss your activation email?

Author Topic: VRRP Transitions 8600  (Read 7751 times)

0 Members and 1 Guest are viewing this topic.

Offline MathewShell

  • Rookie
  • **
  • Posts: 7
VRRP Transitions 8600
« on: October 22, 2013, 05:03:45 AM »
Hi,
I am seeing a lot of SNMP INFO VRRP State Transition Traps, in one of my core switch logs. They have occurred before too, but i usually just ignore them. these have been unusually long and more frequent.
I have two ERS-8010, software: 4.1.7.1, one each 8648GTR, 8630GBR and 8692SF modules.
The core switches are connected with SMLT's to around 20 5520 edge stacks which are on BOSS 5.1.

CPU6 [10/22/13 08:29:15] SNMP INFO Vrrp State Transition Trap(Port/Vlan=21, Type=2, Cause=2, VrId=21, VrIpAddr=10.21.0.1, Addr=10.21.0.220)
CPU6 [10/22/13 08:29:15] SNMP INFO Vrrp State Transition Trap(Port/Vlan=21, Type=8, Cause=15, VrId=21, VrIpAddr=10.21.0.1, Addr=10.21.0.220)
CPU6 [10/22/13 08:29:15] SNMP INFO Vrrp State Transition Trap(Port/Vlan=17, Type=2, Cause=2, VrId=17, VrIpAddr=10.17.0.1, Addr=10.17.0.220)
CPU6 [10/22/13 08:29:15] SNMP INFO Vrrp State Transition Trap(Port/Vlan=17, Type=8, Cause=15, VrId=17, VrIpAddr=10.17.0.1, Addr=10.17.0.220)
CPU6 [10/22/13 08:29:15] SNMP INFO Vrrp State Transition Trap(Port/Vlan=16, Type=2, Cause=2, VrId=16, VrIpAddr=10.16.0.1, Addr=10.16.0.220)
CPU6 [10/22/13 08:29:15] SNMP INFO Vrrp State Transition Trap(Port/Vlan=16, Type=8, Cause=15, VrId=16, VrIpAddr=10.16.0.1, Addr=10.16.0.220)
CPU6 [10/22/13 08:29:15] SNMP INFO Vrrp State Transition Trap(Port/Vlan=15, Type=2, Cause=2, VrId=15, VrIpAddr=10.15.0.1, Addr=10.15.0.220)
CPU6 [10/22/13 08:29:15] SNMP INFO Vrrp State Transition Trap(Port/Vlan=15, Type=8, Cause=15, VrId=15, VrIpAddr=10.15.0.1, Addr=10.15.0.220)
CPU6 [10/22/13 08:29:15] SNMP INFO Vrrp State Transition Trap(Port/Vlan=15, Type=3, Cause=5, VrId=15, VrIpAddr=10.15.0.1, Addr=10.15.0.220)
CPU6 [10/22/13 08:29:15] SNMP INFO Vrrp State Transition Trap(Port/Vlan=21, Type=3, Cause=5, VrId=21, VrIpAddr=10.21.0.1, Addr=10.21.0.220)
CPU6 [10/22/13 08:29:15] SNMP INFO Vrrp State Transition Trap(Port/Vlan=17, Type=3, Cause=5, VrId=17, VrIpAddr=10.17.0.1, Addr=10.17.0.220)
CPU6 [10/22/13 08:29:14] SNMP INFO Vrrp State Transition Trap(Port/Vlan=16, Type=3, Cause=5, VrId=16, VrIpAddr=10.16.0.1, Addr=10.16.0.220)
CPU6 [10/22/13 08:25:28] SW INFO Closed telnet connection from 10.0.1.36, user rwa rcmd -2

CPU6 [10/22/13 08:07:55] SW INFO user rwa connected from 10.0.1.36 via telnet
CPU6 [10/22/13 08:07:53] SW WARNING  Code=0x1ff0009 Blocked unauthorized cli access
CPU6 [10/22/13 07:47:55] SNMP INFO Vrrp State Transition Trap(Port/Vlan=21, Type=2, Cause=2, VrId=21, VrIpAddr=10.21.0.1, Addr=10.21.0.220)
CPU6 [10/22/13 07:47:55] SNMP INFO Vrrp State Transition Trap(Port/Vlan=21, Type=8, Cause=15, VrId=21, VrIpAddr=10.21.0.1, Addr=10.21.0.220)
CPU6 [10/22/13 07:47:55] SNMP INFO Vrrp State Transition Trap(Port/Vlan=17, Type=2, Cause=2, VrId=17, VrIpAddr=10.17.0.1, Addr=10.17.0.220)
CPU6 [10/22/13 07:47:55] SNMP INFO Vrrp State Transition Trap(Port/Vlan=17, Type=8, Cause=15, VrId=17, VrIpAddr=10.17.0.1, Addr=10.17.0.220)
CPU6 [10/22/13 07:47:55] SNMP INFO Vrrp State Transition Trap(Port/Vlan=16, Type=2, Cause=2, VrId=16, VrIpAddr=10.16.0.1, Addr=10.16.0.220)
CPU6 [10/22/13 07:47:55] SNMP INFO Vrrp State Transition Trap(Port/Vlan=16, Type=8, Cause=15, VrId=16, VrIpAddr=10.16.0.1, Addr=10.16.0.220)
CPU6 [10/22/13 07:47:55] SNMP INFO Vrrp State Transition Trap(Port/Vlan=15, Type=2, Cause=2, VrId=15, VrIpAddr=10.15.0.1, Addr=10.15.0.220)
CPU6 [10/22/13 07:47:55] SNMP INFO Vrrp State Transition Trap(Port/Vlan=15, Type=8, Cause=15, VrId=15, VrIpAddr=10.15.0.1, Addr=10.15.0.220)
CPU6 [10/22/13 07:47:55] SNMP INFO Vrrp State Transition Trap(Port/Vlan=21, Type=3, Cause=5, VrId=21, VrIpAddr=10.21.0.1, Addr=10.21.0.220)
CPU6 [10/22/13 07:47:55] SNMP INFO Vrrp State Transition Trap(Port/Vlan=17, Type=3, Cause=5, VrId=17, VrIpAddr=10.17.0.1, Addr=10.17.0.220)
CPU6 [10/22/13 07:47:55] SNMP INFO Vrrp State Transition Trap(Port/Vlan=16, Type=3, Cause=5, VrId=16, VrIpAddr=10.16.0.1, Addr=10.16.0.220)
CPU6 [10/22/13 07:47:54] SNMP INFO Vrrp State Transition Trap(Port/Vlan=15, Type=3, Cause=5, VrId=15, VrIpAddr=10.15.0.1, Addr=10.15.0.220)
CPU6 [10/22/13 07:06:27] SNMP INFO Vrrp State Transition Trap(Port/Vlan=21, Type=2, Cause=2, VrId=21, VrIpAddr=10.21.0.1, Addr=10.21.0.220)
CPU6 [10/22/13 07:06:27] SNMP INFO Vrrp State Transition Trap(Port/Vlan=21, Type=8, Cause=15, VrId=21, VrIpAddr=10.21.0.1, Addr=10.21.0.220)
CPU6 [10/22/13 07:06:27] SNMP INFO Vrrp State Transition Trap(Port/Vlan=17, Type=2, Cause=2, VrId=17, VrIpAddr=10.17.0.1, Addr=10.17.0.220)

Do I need to be concerned? The network was configured 8 years back, and except for some minor changes nothing major has been changed.
Would appreciate any help. thanks. Regards.
 


Offline TankII

  • Hero Member
  • *****
  • Posts: 556
Re: VRRP Transitions 8600
« Reply #1 on: October 22, 2013, 11:04:17 AM »
Change one router's VRRP priority to 255.  Change the other to 100.

This usually happens when the priorities are identical between peers.

TankII

Offline MathewShell

  • Rookie
  • **
  • Posts: 7
Re: VRRP Transitions 8600
« Reply #2 on: October 23, 2013, 02:00:56 AM »
Hi Tank,
thanks for the reply. the master switch is set to priority 200 and the backup at priority 100. do i need to change the master priority? fast advert. is disabled for both. please let me know if you need to look at the config.
Thanks. Regards.

Offline MatzeKS

  • Sr. Member
  • ****
  • Posts: 311
    • matzeks
    • Controlware GmbH - Germany
Re: VRRP Transitions 8600
« Reply #3 on: October 23, 2013, 08:08:24 AM »
...
This usually happens when the priorities are identical between peers.
...
TankII
... or if the vlan interface IP address is equal to VRRP-Address  :D

don't forget to enable Backup-Master Feature on all affected interfaces/devices
------------------------------------------------------
ACE-Fx #00050

Offline MathewShell

  • Rookie
  • **
  • Posts: 7
Re: VRRP Transitions 8600
« Reply #4 on: October 23, 2013, 08:20:25 AM »
thanks matzek,
but the VRRP IP is not the interface IP and backup master is enabled on all the interfaces involved in VRRP.

Offline TankII

  • Hero Member
  • *****
  • Posts: 556
Re: VRRP Transitions 8600
« Reply #5 on: October 23, 2013, 04:27:46 PM »
We leave everything default except the priority settings and backup-master enabled.
However....
Thinking about this a bit, what are the IST stats?  Any errors?
Is there a port that's tagged with the IST VLAN other than the IST ports on each side?  That can lead to issues.

Or..

Are all the VLANs tagged properly on both sides of the IST?  If not, the problem will be the VLAN traffic will not be managed properly as the VRRP advertisements will have to traverse the edge switches in order to see the other side.  If an MLT is misconfigured or for some reason an edge switch's MLT is disabled, the communication between the two 8600's will be disrupted.  Some older versions of ERS 5XXX code disabled MLT's on stacks either during a GBIC replacement or if a stacking error occurred.
And, make sure all the VLAN tagging and filtering are the same on both the SLT/SMLT side (8600) as well as ERS5520 side.  Drop untagged frames if a tagged link, make sure untag PVID is not in use on either side. make sure VLACP is enabled properly or completely disabled, etc.

TankII

Offline Michael McNamara

  • Administrator
  • Hero Member
  • *****
  • Posts: 3842
    • michaelfmcnamara
    • Michael McNamara
Re: VRRP Transitions 8600
« Reply #6 on: October 23, 2013, 07:29:25 PM »
I would follow what @TankII said...

It's usually an indication of a problem in the network if you have random VRRP transitions.

Issue a show sys perf when you see the problem.

The recommendation from Avaya is to implement RSMLT in place of VRRP when deploying in large installations (50+ VLANs).

Cheers!
We've been helping network engineers, system administrators and technology professionals since June 2009.
If you've found this site useful or helpful, please help me spread the word. Link to us in your blog or homepage - Thanks!

Offline MathewShell

  • Rookie
  • **
  • Posts: 7
Re: VRRP Transitions 8600
« Reply #7 on: October 24, 2013, 01:48:39 AM »
Thanks TankII, Michael
I just checked the IST port settings on the core switches, and the switch giving the errors has the default vlan as 1 and DiscardUntaggedFrames false set, while the other switch has the default vlan as 1900 (the IST vlan) and DiscardUntaggedFrames true. I'll change the default vid to 1900 and set the DiscardUntaggedFrames to true. could this be what is causing the errors?
We have only 17 vlans, would i still need to enable vlacp and rsmlt? Also, the mlt ports on the cores and the edge switches are set to DiscardUntaggedFrames false. i'll change those to true.
I'll update the post after the changes. Please let me know if I need to make any other changes.
Thanks.

Offline figunet

  • Rookie
  • **
  • Posts: 16
Re: VRRP Transitions 8600
« Reply #8 on: October 24, 2013, 03:40:26 AM »
Hello,

First, my english isn't good that i good like, sorry.

I have a similar problem that you explain. After i analyse it i saw one diferent in my two vrid proccess. In the configuration of vrrp I had one with fast interval enable and other one disable. I saw that proccess that i had with enable had problem. I put the vrid that fail with fast interval disable and the problem stopped.


Offline Dominik

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 1564
    • Networkautobahn
Re: VRRP Transitions 8600
« Reply #9 on: October 24, 2013, 05:27:44 AM »
In general there can be 2 reasons for you VRRP problem.
1: a missconfiguration on the VRRP parameters
2: a problem on the connection between the two VRRP enabled ERS devices.

As mentioned earlier check that VRRP is configured with the same settings on both sides.
I would also recommand to use RSMLT instead of VRRP. With VRRP you have always the VRRP hello packets on the IST connection. RSMLT is much simpler to configure and works very stable.
Another best practice recommandation is to use the normal AdvertisementInterval, I had several problems with FastAdvertisment Interval.

If the VRRP config is equal in both sides check if you have any errors or drops on the connection between the two ERS8k.

Good Luck
Itīs always the networks fault!
networkautobahn.com

Offline Paul L

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 754
    • paulaleroux
    • Paul's Networking blog
Re: VRRP Transitions 8600
« Reply #10 on: October 24, 2013, 10:40:06 PM »
RSMLT is the way to go in an all AVaya/Nortel environment.  Easier to implement than VRRP and works extremely well.

just some advice about your switches.....
with that hardware you have I would seriously consider a Firmware and softare re-fresh.  Your equipment is still good, but its running very old code

for your 8600 I would consider moving to v5.1.8.3. That is the last v5.1 release that you can go to.
But if you have the supermezz for your 8692, go to v7.2.

For your ERS5520 v6.3.2 is now available. 

ACSS- Avaya Enterprise Routing Switch  #8

Offline MathewShell

  • Rookie
  • **
  • Posts: 7
Re: VRRP Transitions 8600
« Reply #11 on: October 25, 2013, 08:59:11 AM »
hi,
I've set the default vid to 1900 and  the DiscardUntaggedFrames to true, but the SNMP messages continue in the logs, every hour. i rebooted both switches, but it hasnt helped.
Fast advt is disabled and untag default vlan is false. both switches sit next to each other, with 4 fiber link connections as the IST. VRRP settings all are similar in both switches. I am considering a firmware update, but will that fix the issue? Could the GBIC's be faulty? There are no errors or info out of the ordinary on the other switch.
Appreciate the help. Regards.

Offline Dominik

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 1564
    • Networkautobahn
Re: VRRP Transitions 8600
« Reply #12 on: October 25, 2013, 09:05:34 AM »
To make sure you have no connection problem between the two ERS8k switches I would test with only 2 of your 4 direct links. When the VRRP massages are still in the logs switch to the other two fibre connections.

Itīs always the networks fault!
networkautobahn.com

Offline MathewShell

  • Rookie
  • **
  • Posts: 7
Re: VRRP Transitions 8600
« Reply #13 on: November 10, 2013, 03:03:45 AM »
hi,
I was only recently able to check the links. i tried disconnecting two links at a time, leaving only two active at any time but i continue to have the errors. anything else i could try?
thanks. regards.

Offline MathewShell

  • Rookie
  • **
  • Posts: 7
Re: VRRP Transitions 8600
« Reply #14 on: November 20, 2013, 02:57:24 AM »
Hi,
Well, we recently had a power failure and a stack of edge switches were turned off. these were all connected over a single MLT to the core switch. Well, since it came up, the errors have stopped appearing on the core. leads me to believe that the MLT config to that stack is causing the errors.
thanks.