Out-of-Path with PBR and VRRP Redundant Silver Peak Appliances : Configuring VRRP on A1 and A2

Configuring VRRP on A1 and A2
You’ll want to make one appliance the Master, and make the other Site A appliance (on the same subnet) the Backup.
On the Configuration - VRRP page, you’ll start to set this up by using Virtual Router Redundancy Protocol (VRRP) to assign the primary appliance a higher priority than you assign the secondary appliance.
Since this is the primary appliance, set the priority to 130. This will be higher than the secondary (backup) appliance, which remains set to the default of 128.
Using VRRP with two Silver Peaks acting as Master and Backup
n
n
Because we want our network to behave deterministically — to minimize the amount of flow redirection that is needed — we will configure A1 with a priority of 130, and A2 with a priority of 128. With A1 having the higher priority, it becomes the Master when both appliances are up.
n
Check the Preemption checkbox.
This ensures that A1 becomes Master whenever it is up because it has the higher priority.
A2, if it was acting as Master, reverts to backup when A1 assumes the role of Master.
If preemption is not enabled, then whichever appliance is Master remains Master, even if a device in that VRRP group has a higher priority. We always want A1 (which has a higher priority) to be the Master, so we enable preemption.
.
w
To configure VRRP on Appliance A1
1
On Appliance A1, go to Configuration > VRRP and click Add.
The Add VRRP area appears. Some fields display default values.
a
Assign a Group ID number. You’ll use the same number for the primary and backup devices. Here, we’re using 1.
b
Leave Interface set to wan0.
c
Leave Admin set to up.
d
Leave the Advertisement Timer set to 1.
e
In the Virtual Address field, enter the virtual IP that you’ll be using for both the primary and backup appliances. In our case, it’s 10.110.31.254.
f
Priority and Preemption work together. If two devices come up at the same time, the device with the highest priority becomes the Master, and lower priority devices are backups.
If Preemption is enabled and a device with a higher priority comes online in the VRRP group, it becomes the Master even if another device is already acting as Master. The lower priority device then reverts to being a Backup.
g
We’ll set our Priority to 130, and enable Preemption.
h
If you choose to use VRRP’s text authentication, then the Authentication String must be specified in all members of the group. In this deployment, that would include both of Site A’s appliances. Here, we’ll leave it blank.
2
Click Apply.
The summary should appear. Initially, the appliance shows up as a backup, but if it’s the first appliance in the group to come online, it assumes the role of Master.
To refresh the page, reselect Configuration > VRRP from the menu.
3
w
To configure VRRP on Appliance A2
This configuration is identical to A1’s, except the Priority on A2 is set to 128 (a lower priority) so that whenever A1 is up, A2 becomes the backup.
After you click Apply, A2’s VRRP list refreshes.

Please send comments or suggestions regarding user documentation to techpubs@silver-peak.com.