Activating XRRP on 3400cl causes IP conflicts

[vve]

We have two 3400cl switches on which we tried to activate XRRP. Both switches have been configured according to the manual afaik, but we must have overlooked something obvious.

Firmware: M.10.06

Each (untagged) VLAN consists of 2 ports, and one port is connected to an L2 switch (7 in total). This is also the case with the second 3400, so that every L2 switch connects to both 3400s.

VLAN configuration switch 1 (primary):

vlan 1
name "DEFAULT_VLAN"
untagged 15-24
ip address 10.1.0.1 255.255.255.0
no untagged 1-14
exit
vlan 2
untagged 1-2
ip address 10.150.30.250 255.255.255.0
exit
vlan 3
untagged 3-4
ip address 10.150.31.250 255.255.255.0
exit
vlan 4
untagged 5-6
ip address 10.150.32.250 255.255.255.0
vlan 5
untagged 7-8
ip address 10.150.34.250 255.255.255.0
exit
vlan 6
untagged 9-10
ip address 10.150.35.250 255.255.255.0
exit
vlan 7
untagged 11-12
ip address 10.150.36.250 255.255.255.0
exit
vlan 8
untagged 13-14
ip address 10.150.33.250 255.255.255.0
exit

VLAN configuration switch 2 (backup):

vlan 1
name "DEFAULT_VLAN"
untagged 15-24
ip address 10.1.0.2 255.255.255.0
no untagged 1-14
exit
vlan 2
untagged 1-2
ip address 10.150.30.251 255.255.255.0
exit
vlan 3
untagged 3-4
ip address 10.150.31.251 255.255.255.0
exit
vlan 4
untagged 5-6
ip address 10.150.32.251 255.255.255.0
exit
vlan 5
untagged 7-8
ip address 10.150.34.251 255.255.255.0
exit
vlan 6
untagged 9-10
ip address 10.150.35.251 255.255.255.0
exit
vlan 7
untagged 11-12
ip address 10.150.36.251 255.255.255.0
exit
vlan 8
untagged 13-14
ip address 10.150.33.251 255.255.255.0
exit

XRRP configuration switch 1:

xrrp router 1
xrrp instance 1 2
xrrp instance 1 3
xrrp instance 1 4
xrrp instance 1 5
xrrp instance 1 6
xrrp instance 1 7
xrrp instance 1 8
xrrp instance 2 2 ip 10.150.30.251 255.255.255.0
xrrp instance 2 3 ip 10.150.31.251 255.255.255.0
xrrp instance 2 4 ip 10.150.32.251 255.255.255.0
xrrp instance 2 5 ip 10.150.34.251 255.255.255.0
xrrp instance 2 6 ip 10.150.35.251 255.255.255.0
xrrp instance 2 7 ip 10.150.36.251 255.255.255.0
xrrp instance 2 8 ip 10.150.33.251 255.255.255.0

XRRP configuration switch 2:

xrrp router 2
xrrp instance 2 2
xrrp instance 2 3
xrrp instance 2 4
xrrp instance 2 5
xrrp instance 2 6
xrrp instance 2 7
xrrp instance 2 8
xrrp instance 1 2 ip 10.150.30.250 255.255.255.0
xrrp instance 1 3 ip 10.150.31.250 255.255.255.0
xrrp instance 1 4 ip 10.150.32.250 255.255.255.0
xrrp instance 1 5 ip 10.150.34.250 255.255.255.0
xrrp instance 1 6 ip 10.150.35.250 255.255.255.0
xrrp instance 1 7 ip 10.150.36.250 255.255.255.0
xrrp instance 1 8 ip 10.150.33.250 255.255.255.0

As long as you don't activate XRRP, all is well. Here's a part of the syslog dump. Local0 is switch 1, local1 switch 2. First, I activated XRRP on switch 1, and then on switch 2:

11:17:10 Local0.Info 10.150.30.250 Mar 14 11:17:09 10.150.30.250 XRRP: Infinite failback is not active on this router.

11:17:14 Local0.Warning 10.150.30.250 Mar 14 11:17:14 10.150.30.250 XRRP: Remote rtr 2 domain 1 is miss-configured

11:17:14 Local0.Error 10.150.30.250 Mar 14 11:17:14 10.150.30.250 XRRP: PKT received on VID 6 sent on VID 1

11:18:16 Local1.Info 10.150.30.251 Mar 14 11:18:17 10.150.30.251 XRRP: Infinite failback is not active on this router.

11:18:19 Local1.Error 10.150.30.251 Mar 14 11:18:20 10.150.30.251 XRRP: Pkt rcvd with dup number of 2 in domain 1

11:18:31 Local1.Warning 10.150.30.251 Mar 14 11:18:32 10.150.30.251 XRRP: Rtr 2 has taken Primary IP address control

11:18:33 Local1.Warning 10.150.30.251 Mar 14 11:18:34 10.150.30.251 XRRP: Rtr 2 has taken Secondary IP address control

11:18:33 Local1.Error 10.150.30.251 Mar 14 11:18:34 10.150.30.251 XRRP: Duplicate IP address 10.150.31.250 detected

11:18:33 Local1.Warning 10.150.30.251 Mar 14 11:18:34 10.150.30.251 XRRP: Rtr 2 has relinquished Secondary IP address control

11:18:48 Local1.Warning 10.150.30.251 Mar 14 11:18:48 10.150.30.251 XRRP: Rtr 2 has relinquished Primary IP address control

If someone could shed some light on this that would be great.

Thanks in advance!

[Mohieddin Kharnoub]

Hi

What i think:

- Check if you have a duplicated IP address, or an IP Address of Vlan6 subnet located somewhere in Vlan1.
- You need to read about: XRRP Router Operation in the Infinite Fail-Back Mode, and enable it:

ftp://ftp.hp.com/pub/networking/software/6400-5300-4200-3400-AdvTrafficMgmt-Oct2006-59906051-Chap12.pdf

Good Luck !!!