ELTEX ESR-3100 - Page 535

ESR series service routers.ESR-Series. User manual
535
1.
2.
3.
Main configuration steps:
Configure VRRP processes on routers. Use vrrp priority 20 for master, and vrrp priority 10 for backup.
ConfigureDHCP failover inActive-Standby mode.
Configure security zone for VRRP, UDP and TCP protocols.
Solution:
ConfigureESR-1 router (master).
First, configure IP address on interfaces anddefine belonging to the security zone.
master(config)# interface gigabitethernet 1/0/1
master(config-if-gi)# security-zone trusted
master(config-if-gi)# ip address 192.0.2.3/24
master(config-if-gi)# exit
master(config)# interface gigabitethernet 1/0/2
master(config-if-gi)# security-zone trusted
master(config-if-gi)# ip address 203.0.113.1/30
master(config-if-gi)# exit
master(config)# interface gigabitethernet 1/0/3
master(config-if-gi)# security-zone trusted
master(config-if-gi)# ip address 198.51.100.3/24
master(config-if-gi)# exit
Configure VRRP processes on interfaces. The following parameters on the router interfaces should be
configured: VRRP ID, VRRP IP address, VRRP priority, VRRP routerbelonging to a group.
After that, enable the vrrp process using the 'vrrp' command.
master(config)# interface gigabitethernet 1/0/1
master(config-if-gi)# vrrp id 1
master(config-if-gi)# vrrp ip 192.0.2.1/24
master(config-if-gi)# vrrp priority 20
master(config-if-gi)# vrrp group 1
master(config-if-gi)# vrrp
master(config-if-gi)# exit
master(config)# interface gigabitethernet 1/0/3
master(config-if-gi)# vrrp id 3
master(config-if-gi)# vrrp ip 198.51.100.1/24
master(config-if-gi)# vrrp priority 20
master(config-if-gi)# vrrp group 1
master(config-if-gi)# vrrp
master(config-if-gi)# exit
It is possible to select vrrp preempt disable operation mode instead of configuring vrrp preempt
delay. As a result, router with higher VRRP priority will not take away the master role from the router
with lower VRRP priority after returning to operation.

To ensure that the VRRP processes states on a router are synchronized (master, backup), it is
necessary to configure them to belong to the same VRRP group.
