VSF with VRRP

[Scott_1975]

Hi, just wondering if its possible to use VSF with VRRP. What I'm contemplating is have 2x 5412R's  (in our primary data centre) configured with VSF, and be part of a two member VRRP domain when linked with a 5406 at our DR site. The aim is to have maximum redundancy at the primary site and have failover capability to our DR site which has a backup internet link with Palo Altos setup in HA, so that the DR site can operate independantly if the primary site is complete unavailable.

[Emil_G · Accepted solution]

Hello @Scott_1975 

I dont see why it should'nt be possible to have VRRP between a VSF stack and a standalone switch. The VSF switches operate as a single management and control plane so they should appear as a single switch to the 5406 zl. I have seen а customer setup with VRRP between 2 VSF stacks.

Make sure that you are running a version containing a fix for Bug ID 251203, it is related to an issue with the ping to the virtual IP when VRRP is used on a VSF stack.

Symptom: Pings to the VRRP virtual IP address fail.

Scenario: If a switch module is reloaded, added, or hot-swapped, if a VSF stack member joins the stack after a stack split event or after a switch reboot with expansion module present, the switch fails to respond to ping packets to the VRRP virtual IP address.

And of course you need tp pay attention to the other well known best practices for VRRP in order to avoid frequent flapping of the VRRP master role. Especially if the link between both sites is not reliable.

[Scott_1975]

Thanks Emil, will make sure I use the latest firmware