I've been testing it out and so far been unsuccessful getting it to failover. I can get the master/backup relationship going but when I unplug one, the other is not taking over, even though it does upgrade to "master".

I'm testing on a couple office routers (450g's) using outgoing nat.

RouterA
VRRP-LAN = 192.168.1.1 on both routers tied to bridge1 (ether2-5) VRID 1 Priority 255
VRRP-WAN = 192.168.2.100 on ether1 VRID 100 Priority 255
Bridge1 IP (LAN) = 192.168.1.2
WAN IP (ether1) = 192.168.2.101

RouterB
VRRP-LAN = 192.168.1.1 on both routers tied to bridge1 (ether2-5) VRID 1 Priority 100
VRRP-WAN = 192.168.2.100 on ether1 VRID 100 Priority 100
Bridge1 IP (LAN) = 192.168.1.3
WAN IP (ether1) = 192.168.2.102

Both routers are using DHCP. When I pull the plug on Router A I can still ping the gateway and the outside interface of the RouterB's VRRP IP Address but nothing further.

Any ideas?

What is the reason for running VRRP on the outside interface?

Can you post a network diagram and the relevant configuration from the two routers: "/interface print detail", "/interface vrrp export", "/ip address print detail", "/ip route print detail", and "/ip firewall export"?

When you pull the plug you can reach router B's outside interface but can't go further. What do the ARP tables of the next hop upstream show? Does it learn the new MAC address for the virtual WAN IP?

This is to be a failover for our core router where all of our subnets are statically routed to a single IP from the outside. We are not big enough yet to start using BGP etc.

Just want to have two routers in case of a hardware failure the other will take over.

As far as the upstream arp tables in this case I can tell in the one instance I could get out it was taking the MAC of Router B oddly enough.

They work fine when both plugged in, or if Router B is off.. but it wont work when Router A is unplugged..

Oh and this is just a test in the office for the real core router later. The core doesn't use DHCP etc. Just straight routing.

Hi,

Make sure the IP's assigned to the VRRP interface have /32 mask and that the IP's assigned to the physical iface (eth1 and the bridge) have the correct mask (say /24).

Regards