[c-nsp] HSRP to VRRP migration

[Randy]

Top posting and answering OP's original-question:

NO. A change to FHRP; regarless of FHRP protocol-used(hrspv1/v2/vrrp)will result in at_the_least packetloss(be cognizant of STP-interactions in your env)while the change is being implemented.


Hint:

vitrual-mac for hsrpv1: 00:00:0c:07:ac:xx
virtual-mac for hrsrv2: 00:00:0c:9f:f0:00-fx:xx
vrrp:00:00:5e:00:01-xx

Do this within a maintenance window.

./Randy





----- Original Message -----
From: Matt Addison <matt.addison at lists.evilgeni.us>
To: Cydon Satyr <cydonsatyr at gmail.com>
Cc: "cisco-nsp at puck.nether.net" <cisco-nsp at puck.nether.net>
Sent: Wednesday, March 11, 2015 5:43 PM
Subject: Re: [c-nsp] HSRP to VRRP migration

On Wednesday, March 11, 2015, Cydon Satyr <cydonsatyr at gmail.com> wrote:

> Hello guys. We have a bunch of redundant router Cisco pair routers, that
> are running HSRP, that needs to be migrated to VRRP.
>
> The question is, could this be down with 0 downtime?
>
> My guess is, if we replace backup HSRP router to run VRRP master, then
> gratious-arp war could start, with both routers trying to send proper mac
> address info to LAN. I guess with some filter hosts could be convinced to
> use VRRP's mac address... or something.
>
> I understand  a proper maintenance window should be ordered, but, could
> this be done with no downtime (or at least near 0, just so hosts update arp
> table)? Any ideas?
>

Assuming your platform lets you configure HSRP and VRRP simultaneously on
the same interface, change the HSRP address to a new address, then set up a
new VRRP group on a different group number for the original IP.  Any ARPs
before you get the new group established will go unanswered, but other
traffic should work as normal as the router will still receive and
route datagrams destined to the HSRP group MAC.

And like Nick said, whatever you do, lab it first.

~Matt
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/