Start a Conversation

Unsolved

F

4 Posts

899

August 3rd, 2018 09:00

VRRP behavior

Hello!

Here's the setup, we have 2 sites with a fiber between the 2.

On one side we have a Firewall with a N4000 switch and on the other side, another Firewall with 2xS5000 switches.

OSPF is configured on all core switches and firewalls.

S5000 are in VLT

 

VRRP is configured on some VLANs that are spanning between all core switches (N4000 in single and the S5000 in VLT)

The thing is, when VRRP master is moved to the N4000 and a device is still in the S5000 site, the S5000 still answer as a gateway. 

 

Which we don't want cause we need to route to it's own firewall.

 

How can we change that behavior?

 

Thanks!

 

 

Moderator

 • 

8.5K Posts

August 3rd, 2018 11:00

Hi,

Where do the devices point to for their default gateway? Are they getting DHCP from the switches?

4 Posts

August 6th, 2018 13:00

a

4 Posts

August 8th, 2018 07:00

They are all static, they are servers

4 Posts

August 8th, 2018 07:00

I found out that the Force10 switches keeps the MAC of the VRRP IP in it's CAM table, even if the master has been moved away. 

Problem is, we don't want the force10 to route the trafic from certain VLANs, once the VRRP IP is not ont those switches because we want them to use the the gateway of last resort local to the VRRP IP.

 

 

No Events found!

Top