CCNA 200-301 - Lab-23 VRRP v1.0
CCNA 200-301 - Lab-23 VRRP v1.0
CCNA 200-301 - Lab-23 VRRP v1.0
[email protected]
Task
1. Configure routers with IP address as shown in topology and configure enable
password as ccna. (Refer Lab-22 for task-1 to task-5)
2. Configure VPCs with IP address and default gateway of 192.168.1.3 (VRRP
Virtual IP)
3. Configure default route on R1 & R2 pointing to ISP
4. Configure OSPF on ISP-1, ISP-2 and Internet router.
5. Configure NAT overload (PAT) on R1 & R2
6. Configure VRRP with virtual IP 192.168.1.3 such that R1 will be Master and
R2 will be Backup. Enable clear text authentication with secret key Ratan
7. Configure IP SLA to detect indirect ISP link failure on R1.
1 Page
www.rsatechforum.in
+91 8551802268
CCNA Labs by Ratan
Task-6: Configure VRRP with virtual IP 192.168.1.3 such that R1 will be Master
and R2 will be Backup. Enable clear text authentication with secret key Ratan
R1 Configuration:
R1#config t
R1(config)#int fa0/0
R1(config-if)#vrrp 1 ip 192.168.1.3
R1(config-if)#vrrp 1 priority 105
R1(config-if)#vrrp 1 authentication text Ratan
R1(config-if)#exit
R1(config)#exit
R1#
R2 Configuration:
R2#config t
R2(config)#int fa0/0
We Make Learning Simplified..
R2(config-if)#vrrp 1 ip 192.168.1.3
R2(config-if)#vrrp 1 authentication text Ratan
R2(config-if)#exit
R2(config)#exit
R2#
R1#sh vrrp
FastEthernet0/0 - Group 1
State is Master
Virtual IP address is 192.168.1.3
Virtual MAC address is 0000.5e00.0101
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 105
Authentication text, string "Ratan"
Master Router is 192.168.1.1 (local), priority is 105
Master Advertisement interval is 1.000 sec
Master Down interval is 3.589 sec
R1#
R2#sh vrrp
FastEthernet0/0 - Group 1
State is Backup
Virtual IP address is 192.168.1.3
2
[email protected]
PC2> ping 192.168.1.3
84 bytes from 192.168.1.3 icmp_seq=1 ttl=255 time=9.682 ms
84 bytes from 192.168.1.3 icmp_seq=2 ttl=255 time=6.478 ms
84 bytes from 192.168.1.3 icmp_seq=3 ttl=255 time=4.274 ms
84 bytes from 192.168.1.3 icmp_seq=4 ttl=255 time=3.403 ms
84 bytes from 192.168.1.3 icmp_seq=5 ttl=255 time=10.435 ms
www.rsatechforum.in
+91 8551802268
CCNA Labs by Ratan
PC3> ping 8.8.8.8
84 bytes from 8.8.8.8 icmp_seq=1 ttl=253 time=53.142 ms
84 bytes from 8.8.8.8 icmp_seq=2 ttl=253 time=55.309 ms
84 bytes from 8.8.8.8 icmp_seq=3 ttl=253 time=55.278 ms
84 bytes from 8.8.8.8 icmp_seq=4 ttl=253 time=52.222 ms
84 bytes from 8.8.8.8 icmp_seq=5 ttl=253 time=51.272 ms
R1#sh arp
Protocol Address Age (min) Hardware Addr Type Interface
4
www.rsatechforum.in
+91 8551802268
CCNA - 200-301 VRRP
Internet 192.168.1.1 - ca01.25e0.0008 ARPA FastEthernet0/0
Internet 192.168.1.3 - 0000.5e00.0101 ARPA FastEthernet0/0
Internet 192.168.1.10 0 0050.7966.6800 ARPA FastEthernet0/0
Internet 192.168.1.11 2 0050.7966.6801 ARPA FastEthernet0/0
Internet 192.168.1.12 2 0050.7966.6802 ARPA FastEthernet0/0
R1#
Test – From PC1 start the PING for 8.8.8.8 and simulate link failure by shutting
down the R1’s LAN interface.
R1#config t
R1(config)#int fa0/0
R1(config-if)#shut
R1(config)#exit
R1#
[email protected]
84 bytes from 8.8.8.8 icmp_seq=4 ttl=253 time=52.327 ms
84 bytes from 8.8.8.8 icmp_seq=5 ttl=253 time=53.306 ms
8.8.8.8 icmp_seq=6 timeout
84 bytes from 8.8.8.8 icmp_seq=7 ttl=253 time=111.094 ms
84 bytes from 8.8.8.8 icmp_seq=8 ttl=253 time=47.391 ms
84 bytes from 8.8.8.8 icmp_seq=9 ttl=253 time=47.530 ms
84 bytes from 8.8.8.8 icmp_seq=10 ttl=253 time=53.324 ms
84 bytes from 8.8.8.8 icmp_seq=11 ttl=253 time=49.415 ms
84 bytes from 8.8.8.8 icmp_seq=12 ttl=253 time=47.463 ms
84 bytes from 8.8.8.8 icmp_seq=13 ttl=253 time=50.636 ms
84 bytes from 8.8.8.8 icmp_seq=14 ttl=253 time=55.437 ms
84 bytes from 8.8.8.8 icmp_seq=15 ttl=253 time=49.037 ms
84 bytes from 8.8.8.8 icmp_seq=16 ttl=253 time=52.429 ms
84 bytes from 8.8.8.8 icmp_seq=17 ttl=253 time=47.437 ms
84 bytes from 8.8.8.8 icmp_seq=18 ttl=253 time=52.178 ms
84 bytes from 8.8.8.8 icmp_seq=19 ttl=253 time=43.888 ms
84 bytes from 8.8.8.8 icmp_seq=20 ttl=253 time=53.244 ms
R1#
*Nov 21 19:35:45.079: %VRRP-6-STATECHANGE: Fa0/0 Grp 1 state Master -> Init
R1#
R2#
*Nov 21 19:35:35.539: %VRRP-6-STATECHANGE: Fa0/0 Grp 1 state Backup -> Master
R2#
R1#sh vrrp
FastEthernet0/0 - Group 1
State is Init
5 Page
www.rsatechforum.in
+91 8551802268
CCNA Labs by Ratan
Virtual MAC address is 0000.5e00.0101
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 105
Authentication text, string "Ratan"
Master Router is unknown, priority is unknown
Master Advertisement interval is unknown
Master Down interval is unknown
R2#sh vrrp
FastEthernet0/0 - Group 1
State is Master
Virtual IP address is 192.168.1.3
Virtual MAC address is 0000.5e00.0101
We Make Learning Simplified..
www.rsatechforum.in
+91 8551802268
CCNA - 200-301 VRRP
PC2> trace 8.8.8.8
trace to 8.8.8.8, 8 hops max, press Ctrl+C to stop
1 192.168.1.2 7.703 ms 9.603 ms 10.647 ms
2 200.200.200.2 30.302 ms 30.413 ms 30.420 ms
3 *210.210.210.1 53.249 ms (ICMP type:3, code:3, Destination port unreachable)
[email protected]
R1#config t
R1(config)#int fa0/0
R1(config-if)#no shut
R1(config-if)#exit
R1(config)#exit
R1#
R1#
*Nov 21 19:45:02.283: %VRRP-6-STATECHANGE: Fa0/0 Grp 1 state Backup -> Master
R1#
R2#
*Nov 21 19:44:52.155: %VRRP-6-STATECHANGE: Fa0/0 Grp 1 state Master -> Backup
R2#
R1#sh vrrp
FastEthernet0/0 - Group 1
State is Master
Virtual IP address is 192.168.1.3
Virtual MAC address is 0000.5e00.0101
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 105
Authentication text, string "Ratan"
Master Router is 192.168.1.1 (local), priority is 105
Master Advertisement interval is 1.000 sec
Master Down interval is 3.589 sec
R1#
7 Page
www.rsatechforum.in
+91 8551802268
CCNA Labs by Ratan
R2#sh vrrp
FastEthernet0/0 - Group 1
State is Backup
Virtual IP address is 192.168.1.3
Virtual MAC address is 0000.5e00.0101
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 100
Authentication text, string "Ratan"
Master Router is 192.168.1.1, priority is 105
Master Advertisement interval is 1.000 sec
Master Down interval is 3.609 sec (expires in 3.589 sec)
R1#config t
R1(config)#ip sla 1
We Make Learning Simplified..
R1(config-ip-sla)#icmp-echo 8.8.8.8
R1(config-ip-sla-echo)#exit
R1(config)#ip sla schedule 1 start-time now life forever
R1(config)#track 1 ip sla 1 reachability
R1(config-track)#exit
R1(config)#int fa0/0
R1(config-if)#vrrp 1 track 1 decrement 20
R1(config-if)#exit
R1(config)#exit
R1#
R1#sh track
Track 1
IP SLA 1 reachability
Reachability is Up
2 changes, last change 00:01:37
Latest operation return code: OK
Latest RTT (millisecs) 32
Tracked by:
VRRP FastEthernet0/0 1
R1#
-----------------------------------------------------------------------
Page
Test – From PC1 start the PING for 8.8.8.8 and simulate link failure by shutting
down the ISP-1 fa0/1 interface (indirect interface).
ISP-1#config t
ISP-1(config)#int fa0/1
ISP-1(config-if)#shut
ISP-1(config-if)#exit
ISP-1#
[email protected]
8.8.8.8 icmp_seq=5 timeout
84 bytes from 8.8.8.8 icmp_seq=12 ttl=253 time=60.189 ms
84 bytes from 8.8.8.8 icmp_seq=13 ttl=253 time=57.280 ms
84 bytes from 8.8.8.8 icmp_seq=14 ttl=253 time=54.396 ms
84 bytes from 8.8.8.8 icmp_seq=15 ttl=253 time=54.323 ms
84 bytes from 8.8.8.8 icmp_seq=16 ttl=253 time=50.390 ms
84 bytes from 8.8.8.8 icmp_seq=17 ttl=253 time=54.430 ms
84 bytes from 8.8.8.8 icmp_seq=18 ttl=253 time=52.111 ms
84 bytes from 8.8.8.8 icmp_seq=19 ttl=253 time=51.234 ms
84 bytes from 8.8.8.8 icmp_seq=20 ttl=253 time=49.664 ms
R1#
*Nov 21 20:10:45.087: %TRACKING-5-STATE: 1 ip sla 1 reachability Up->Down
*Nov 21 20:10:48.623: %VRRP-6-STATECHANGE: Fa0/0 Grp 1 state Master -> Backup
R1#
R2#
*Nov 21 20:10:38.427: %VRRP-6-STATECHANGE: Fa0/0 Grp 1 state Backup -> Master
R2#
R1#sh vrrp
FastEthernet0/0 - Group 1
State is Backup
Virtual IP address is 192.168.1.3
Virtual MAC address is 0000.5e00.0101
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 85 (cfgd 105)
Track object 1 state Down decrement 20
9 Page
www.rsatechforum.in
+91 8551802268
CCNA Labs by Ratan
Master Router is 192.168.1.2, priority is 100
Master Advertisement interval is 1.000 sec
Master Down interval is 3.589 sec (expires in 3.141 sec)
R1#
R2#sh vrrp
FastEthernet0/0 - Group 1
State is Master
Virtual IP address is 192.168.1.3
Virtual MAC address is 0000.5e00.0101
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 100
Authentication text, string "Ratan"
Master Router is 192.168.1.2 (local), priority is 100
Master Advertisement interval is 1.000 sec
Master Down interval is 3.609 sec
R2#
We Make Learning Simplified..
R1#sh track
Track 1
IP SLA 1 reachability
Reachability is Down
3 changes, last change 00:03:07
Latest operation return code: Timeout
Tracked by:
VRRP FastEthernet0/0 1
R1#
R2#sh arp
Protocol Address Age (min) Hardware Addr Type Interface
Internet 192.168.1.2 - ca02.02b4.0008 ARPA FastEthernet0/0
Internet 192.168.1.3 - 0000.5e00.0101 ARPA FastEthernet0/0
Internet 192.168.1.10 0 0050.7966.6800 ARPA FastEthernet0/0
Internet 192.168.1.11 0 0050.7966.6801 ARPA FastEthernet0/0
Internet 192.168.1.12 0 0050.7966.6802 ARPA FastEthernet0/0
Internet 200.200.200.1 - ca02.02b4.0006 ARPA FastEthernet0/1
Internet 200.200.200.2 71 ca04.1438.0008 ARPA FastEthernet0/1
R2#
10 Page
www.rsatechforum.in
+91 8551802268
CCNA - 200-301 VRRP
Test – Simulate link recovery by making ISP-1 fa0/1 interface up.
ISP-1#config t
ISP-1(config)#int fa0/1
ISP-1(config-if)#no shut
ISP-1(config-if)#exit
ISP-1#
R1#
*Nov 21 20:16:45.091: %TRACKING-5-STATE: 1 ip sla 1 reachability Down->Up
*Nov 21 20:16:47.703: %VRRP-6-STATECHANGE: Fa0/0 Grp 1 state Backup -> Master
R1#
R2#
*Nov 21 20:16:37.619: %VRRP-6-STATECHANGE: Fa0/0 Grp 1 state Master -> Backup
R2#
R1#sh vrrp
FastEthernet0/0 - Group 1
State is Master
Virtual IP address is 192.168.1.3
[email protected]
Virtual MAC address is 0000.5e00.0101
Advertisement interval is 1.000 sec
Preemption enabled
Priority is 105
Track object 1 state Up decrement 20
Authentication text, string "Ratan"
Master Router is 192.168.1.1 (local), priority is 105
Master Advertisement interval is 1.000 sec
Master Down interval is 3.589 sec
R1#sh track
Track 1
IP SLA 1 reachability
Reachability is Up
4 changes, last change 00:01:15
Latest operation return code: OK
Latest RTT (millisecs) 72
Tracked by:
VRRP FastEthernet0/0 1
R1#
R2#sh vrrp
FastEthernet0/0 - Group 1
State is Backup
Virtual IP address is 192.168.1.3
Virtual MAC address is 0000.5e00.0101
Advertisement interval is 1.000 sec
Preemption enabled
11
Priority is 100
Authentication text, string "Ratan"
Page
www.rsatechforum.in
+91 8551802268
CCNA Labs by Ratan
Master Router is 192.168.1.1, priority is 105
Master Advertisement interval is 1.000 sec
Master Down interval is 3.609 sec (expires in 3.325 sec)
R2#
On R2 router:
R2#config t
R2(config)#int fa0/0
R2(config-if)#no vrrp 1
R2(config-if)#exit
R2(config)#exit
R2#
*Nov 21 20:19:59.363: %VRRP-6-STATECHANGE: Fa0/0 Grp 1 state Master -> Disable
R2#
12 Page
www.rsatechforum.in
+91 8551802268
CCNA - 200-301 VRRP
Important Commands:
sh ip int brief | exclude unassign
sh ip route static
sh ip route ospf
sh vrrp
sh vrrp brief
sh ip nat translations
sh arp
[email protected]
13 Page
www.rsatechforum.in
+91 8551802268