Virtual Router Redundancy Protocol is the industry standard FHRP protocol which enables two or more routers to provide first-hop redundancy services for IP traffic.
- In VRRP one router is Master and all other are in backup state.
- Master router is responsible for ARP resolution and forwarding all traffic.
- All the routers/switch participating in Master for a Single VLAN must be in same group.
- You can configure 255 groups at maximum in VRRP.
- The Master router has virtual IP address which in turn has Virtual MAC address for ARP resolution or it can use same Physical IP of interface.
- If Master router fails then second best backup router will resume the Master state with same Virtual MAC address.
- There is preemption enabled by default.
- VRRP hello packets are used to elect the Master router, those who has Highest Priority will become Master router on multicast address 188.8.131.52.
- Hello Timer is 1 Sec and Hold down Timer is 3 sec.
- Default Priority of router is 100 and if all router has same priority then Highest IP address of device will be used to elect the Master.
- In Nexus VRRP is enabled by enabling feature command.
- In VRRP, VRRP packets can also be secured by HSRP authentication method.
- VRRP uses plain-text method to secure its packets.
Configure VRRP as per following topology.
- Configure Po100 as trunk between N7K1 and N7K2
- Configure VLAN 200 with VIP 184.108.40.206 and use any IP for Physical interface SVI.
- On N7K1 configure Priority 200 and VRRP group 200 for VLAN 200
- On N7K2 configure Priority 100 and VRRP group 100 for VLAN 200
- Use Authentication method Plain Text and key CCIE.