Category     

Cradlepoint VRRP Configuration

« Go Back

Information

 
Content

Cradlepoint VRRP configuration

Products Supported: AER2100. IBR11x0, IBR6x0 and MBR1400v2. Click here to identify your router.

Firmware Version: 5.0.0 or newer. This article was written utilizing version 5.4.1 - for information on upgrading firmware, click here.

Enabling the VRRP feature requires NCM Prime.  To learn more about NCM Prime, including setting up a demo, please visit Network Management & Applications​
Firmware version 6.0 has been released and introduces a vastly improved GUI for all current Series 3 routers.  Cradlepoint has created new Knowledge Base articles with updated screen shots and instructions for the new GUI layout.  As a result, this article has received its final update.  To view the version of this Knowledge Base article for Firmware 6.0 and Later please click here.


Quick Links

Summary

Topology

Configuration

Validation

Troubleshooting

Related Articles


Summary

This document provides a configuration and design example for configuring the Virtual Router Redundancy Protocol (VRRP) on a Cradlepoint router. This design provides redundant WAN connections, redundant LAN gateways and router hardware redundancy. VRRP is a layer 3 protocol that provides automatic default gateway selections on an IP network.

In this example we will use a simple network configuration with two factory default AER2100s; Both are configured with one Primary LAN (Guest LAN has been removed). The Cradlepoints are directly connected via LAN ports on the routers. This configuration can also be used connecting both routers to any layer 2 switch.

At the bottom of this article you will find a link to a pdf for an advanced VRRP set up guide using multiple VLANs.


Topology

                                                     User-added image


Configuration

Configuration Difficulty: Intermediate

Router A (Master) Configuration

  • Step 1: Log into the router's Setup Page. For help with logging in please click here.
  • Step 2: Select Network Settings, then WiFi/Local Networks.
  • Step 3: Check the box next to Primary LAN and click Edit
    User-added image
  • Step 4: Click on the IPv4 Settings tab and change the IP address to Router A's assigned IP address, 192.168.0.2. Leave the Netmask and Routing Mode as default.
  • Step 5: Click on the VRRP tab and check the box to enable VRRP - Note: If you do not have a Feature License for Router A VRRP, it will be indicated on this screen.
  • Step 6: Set the Virtual Router IP (VIP) to 192.168.0.1
    • This is the shared (floating) virtual IP address between the two VRRP routers.
  • Step 7: Set the Virtual Router ID (VRID) to 10.
    • VRID for each subnet must match on both routers.
  • Step 8: Set the Router Priority to 110. This will ensure that Router A is the VRRP master and will win the election when online.
  • Step 9: Leave the WAN Fault Priority as the default setting (none). The default value facilitates a VRRP failover to the standby router when no WAN connection is available on the master router. If you set the value to match the Router Priority of 110, then VRRP will not failover when the WAN connection is down.
  • Step 10: Set the Initial Virtual Router State to Master, this will set Router A to become master by default unless it loses the VRRP election process to a higher priority VRRP router.
  • Step 11: Set the Authentication Mode to Simple.
  • Step 12: Set the Password to whatever is desired. The password must match on both Router's VRRP Primary LAN configurations.
  • Step 13: Check the box to Provide Virtual IP in DHCP leases. This ensure that all DHCP issued IP addresses have the VIP as the gateway and will failover between routers without having to request a new DHCP lease.
  • Step 14: Click Submit.
    User-added image

 

Router B (Backup) Configuration

  • Step 1: Log into the router's Setup Page. For help with logging in please click here.
  • Step 2: Select Network Settings, then WiFi/Local Networks.
  • Step 3: Check the box next to Primary LAN and click Edit
    User-added image
  • Step 4: Click on the IPv4 Settings tab and change the IP address to Router B's assigned IP address, 192.168.0.3. Leave the Netmask and Routing Mode as default.
  • Step 5: Click on the VRRP tab and check the box to enable VRRP - Note: If you do not have a Feature License for Router A VRRP, it will be indicated on this screen.
  • Step 6: Set the Virtual Router IP (VIP) to 192.168.0.1
    • This is the shared (floating) virtual IP address between the two VRRP routers.
  • Step 7: Set the Virtual Router ID (VRID) to 10.
    • VRID for each subnet must match on both routers.
  • Step 8: Leave the default Router Priority at 100, this will make sure that Router B is the VRRP backup when there is an election and both VRRP routers are online.
  • Step 9: Leave the WAN Fault Priority as the default setting (none). The default value facilitates a VRRP failover to the standby router when no WAN connection is available on the master router. If you set the value to match the Router Priority of 100, then VRRP will not failover when the WAN connection is down.
  • Step 10: Set the Initial Virtual Router State to Backup, this will set Router B to Backup by default.
  • Step 11: Set the Authentication Mode to Simple.
  • Step 12: Set the Password to whatever is desired. The password must match on both Router's VRRP Primary LAN configurations.
  • Step 13: Check the box to Provide Virtual IP in DHCP leases. This ensure that all DHCP issued IP addresses have the VIP as the gateway and will failover between routers without having to request a new DHCP lease.
  • Step 14: Click Submit.
    User-added image

Validation

  • Log into Router A's web interface, http://192.168.0.2
  • Navigate to Network Settings > WiFi / Local Networks
  • The VRRP Failover State should show as Master for the Primary LAN.
    User-added image
  • Log into Router B's web interface, http://192.168.0.3
  • Navigate to Network Settings > WiFi / Local Networks
  • The VRRP Failover State on Router B should show as Backup for the Primary LAN
    User-added image
VRRP Failover State when a WAN link is down
  • When a WAN link goes down on the Master of any VRRP network The VRRP Failover State will switch to Fault and relinquish Master status until WAN connectivity is restored. This is true for only the VRRP routers that are currently a Master when a WAN link fails.
  • When WAN connectivity is restored the VRRP election process is initiated and a new Master is elected if it has the highest VRRP router priority.
  • It’s recommended to configure Advanced Failure Check on WAN links to ensure proper detection of a down WAN link. The following knowledge base article explains how to configure this feature. http://knowledgebase.cradlepoint.com/articles/Support/Setting-Advanced-Failure-Check-in-your-Series-3-router
  • Below is an example of the Master VRRP router in the Fault state.
    User-added image

Troubleshooting

Issue: The VRRP routers do not negotiate a Master and Backup state correctly.
Solution: Validate the All IP address information, VRRP passwords, and Virtual Router IDs are set correctly.

Issue: The VRRP Master does not fail over when the WAN link is down.
Solution: Verify that the WAN fault priority is set to none (blank) and that Advanced Failure check is configured correctly. If advanced failure check is not configured and the WAN interface still has an active link then it will not failover. Refer to the following knowledge base article for instructions for configuring this feature. http://knowledgebase.cradlepoint.com/articles/Support/Setting-Advanced-Failure-Check-in-your-Series-3-router


Related Articles


Published Date: 08/04/2015

This article not have what you need?  Not find what you were looking for?  Think this article can be improved?  Please let us know at suggestions@cradlepoint.com


 
Knowledge Home | Product