4430 VRRP design question

[Anonymous]

I am working on a design for a customer who is looking for high availability on a pair of 4430's at their data center (single isp) . They are building a private WAN for about 30 sites that will be L2, so i can control the outside ip addressing.   They will receive a 100mb Ethernet hand off from the carrier and i would run VRRP on the inside ethernet connections.  Would i also want to run a second instance of VRRP on the outside ethernet interfaces?  I would need to check with the carrier and verify the handoff ( use the carrier switch? or provide our own outside switch for both 4430 connections).

I have read the AOS documentation and it doesn't specifically talk about running vrrp on  both inside and outside at the same time.

I would also be running OSPF in the netvanta's for routing to additional sites on the WAN. Would there be considerations with the routing metrics on both routers to verify my return traffic is coming back into the same router it was sourced from?

Thanks

[Anonymous]

- Thanks for posting your question on the forum!

Before addressing your questions, I was wondering how you planned on addressing the WAN interfaces of the 4430? The reason I ask is, generally, we rarely see VRRP run on the WAN interfaces. In this case, I am leaning towards the same conclusion. However, depending on how you plan to address the WAN interfaces, there may be a couple of ways you would be able to provide failover on the WAN interfaces as well.

Please do not hesitate to let us know if you have any questions.

Thanks,

Noor

[Anonymous]

if i understand the question correctly i will assign ip addresses to the physical interfaces on each router and use a 3rd ip address for the virtual interface between the 2 routers.

Thanks

Frank

[Anonymous · Accepted solution]

- Thanks for getting back to me with that information. I just wanted to confirm that you planned on having two different IP addresses assigned to the 4430 WAN interfaces. Since this is the case, I would probably only set up VRRP on the LAN. Setting up VRRP on the WAN would only add a failover scenario should the WAN interface (itself)  of either 4430 or the switchport it was connecting to went down. If the WAN connection, itself, was the cause, then VRRP on the WAN does not provide any backup.

If you prefer to have this failover option available, you could still get around having to setup VRRP since you will be configuring OSPF. OSPF should be able to change routes accordingly depending on whether the link is up or not. However, you will probably need to set up network monitoring to switch the VRRP master on the LAN should the path through one 4430's WAN goes down. A similar setup is explained in Example #3 in the VRRP guide: Configuring VRRP in AOS

Please do not hesitate to let us know if you have any further questions.

Thanks,

Noor

[Anonymous]

- Do you have any further questions or are in need of assistance regarding this subject?

Thanks,

Noor

[Anonymous]

:

I went ahead and flagged the "Correct Answer" on this post to make it more visible and help other members of the community find solutions more easily. If you don't feel like the answer I marked was correct, feel free to come back to this post and unmark it and select another in its place with the applicable buttons.  If you still need assistance, we would be more than happy to continue working with you on this - just let us know in a reply.

Thanks,

Levi