Feinor
1 Copper

VRRP behavior

Hello!

Here's the setup, we have 2 sites with a fiber between the 2.

On one side we have a Firewall with a N4000 switch and on the other side, another Firewall with 2xS5000 switches.

OSPF is configured on all core switches and firewalls.

S5000 are in VLT

 

VRRP is configured on some VLANs that are spanning between all core switches (N4000 in single and the S5000 in VLT)

The thing is, when VRRP master is moved to the N4000 and a device is still in the S5000 site, the S5000 still answer as a gateway. 

 

Which we don't want cause we need to route to it's own firewall.

 

How can we change that behavior?

 

Thanks!

 

 

0 Kudos
4 Replies
Moderator
Moderator

Re: VRRP behavior

Hi,

Where do the devices point to for their default gateway? Are they getting DHCP from the switches?

Thanks,
Josh Craig
Dell EMC Enterprise Support Services
Get support on Twitter @DellCaresPRO
0 Kudos
Feinor
1 Copper

Re: VRRP behavior

a

0 Kudos
Feinor
1 Copper

Re: VRRP behavior

I found out that the Force10 switches keeps the MAC of the VRRP IP in it's CAM table, even if the master has been moved away. 

Problem is, we don't want the force10 to route the trafic from certain VLANs, once the VRRP IP is not ont those switches because we want them to use the the gateway of last resort local to the VRRP IP.

 

 

0 Kudos
Feinor
1 Copper

Re: VRRP behavior

They are all static, they are servers

0 Kudos