Kaspersky SD-WAN

Creating a VRRP instance

Expand all | Collapse all

You can create a VRRP instance on an individual CPE device or on all devices that use the CPE template. Before creating a VRRP instance, you must create a network interface. To create a VRRP instance, use the following instructions:

• Creating a VRRP instance on an individual CPE device.

  To create a VRRP instance on an individual CPE device:

  1. In the menu, go to the SD-WAN section.

     By default, the CPE subsection is displayed with a table of CPE devices.

  2. Click the CPE device.

     The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button .

  3. Select the VRRP tab.

     A table of VRPP instances is displayed.

  4. Select the Override check box to ignore the applied CPE template and make the settings in the selected tab editable. This check box is cleared by default.
  5. Click + VRRP instance.
  6. This opens a window; in that window, in the Name field, enter the name of the VRRP instance. Maximum length: 16 characters.
  7. In the VRID field, enter the Virtual Router Identifier for the CPE device. You must specify the same VRID for all devices that you want to combine into a virtual router. Range of values: 1 to 255.
  8. In the Interface drop-down list, select a previously created network interface to which you want to assign a virtual IP address.
  9. In the VIP field, enter the virtual IP address for the network interface. You must assign the same virtual IP address to the network interfaces of all CPE devices that you want to combine into a virtual router.
  10. In the State drop-down list, select the role of the CPE device:
      • Backup for a backup VRRP router. This is the default setting.
      • Master for the primary VRRP router.
  11. In the Priority field, enter the priority of the VRRP router. The higher the value in this field, the higher the priority. When the primary VRRP router fails, it is replaced by the backup VRRP router with the highest priority. If the backup VRPP router has a higher priority than the primary router, it also becomes the primary router. Range of values: 1 to 1000. The default setting is 100.
  12. In the Advertise interval (sec.) field, enter the time interval in seconds for sending VRRP advertisements. Range of values: 1 to 60. The default setting is 5.
  13. If you do not want to change the role of the backup VRRP router that has become the primary router, even if the old primary VRRP router becomes operational again, select the Nopreempt check box. This check box is cleared by default.
  14. If necessary, configure sending VRRP advertisements as unicast messages:
      1. Select the Unicast check box. This check box is cleared by default.
      2. In the Main VRPP router IP field, enter the necessary value.
      3. In the Backup VRRP router IP field, enter the necessary value.
  15. If necessary, use a password for authenticating VRRP advertisements:
      1. Select the Authentication check box. This check box is cleared by default.
      2. Enter a password in the field that is displayed. Maximum length of the password: 16 characters. To see the entered password, you can click the show button .
  16. Click Create.

      The VRRP instance is created and displayed in the table.

  17. In the upper part of the settings area, click Save to save the configuration of the CPE device.
• Creating a VRRP instance on all devices that use the CPE template.

  To create a VRRP instance on all devices that use the CPE template:

  1. In the menu, go to the SD-WAN → CPE templates subsection.

     A table of CPE templates is displayed.

  2. Click the CPE template.

     The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand button .

  3. Select the VRRP tab.

     A table of VRPP instances is displayed.

  4. Click + VRRP instance.
  5. This opens a window; in that window, in the Name field, enter the name of the VRRP instance. Maximum length: 16 characters.
  6. In the VRID field, enter the Virtual Router Identifier for the CPE device. You must specify the same VRID for all devices that you want to combine into a virtual router. Range of values: 1 to 255.
  7. In the Interface drop-down list, select a previously created network interface to which you want to assign a virtual IP address.
  8. In the VIP field, enter the virtual IP address for the network interface. You must assign the same virtual IP address to the network interfaces of all CPE devices that you want to combine into a virtual router.
  9. In the State drop-down list, select the role of the CPE device:
     • Backup for a backup VRRP router. This is the default setting.
     • Master for the primary VRRP router.
  10. In the Priority field, enter the priority of the VRRP router. The higher the value in this field, the higher the priority. When the primary VRRP router fails, it is replaced by the backup VRRP router with the highest priority. If the backup VRPP router has a higher priority than the primary router, it also becomes the primary router. Range of values: 1 to 1000. The default setting is 100.
  11. In the Advertise interval (sec.) field, enter the time interval in seconds for sending VRRP advertisements. Range of values: 1 to 60. The default setting is 5.
  12. If you do not want to change the role of the backup VRRP router that has become the primary router, even if the old primary VRRP router becomes operational again, select the Nopreempt check box. This check box is cleared by default.
  13. If necessary, configure sending VRRP advertisements as unicast messages:
      1. Select the Unicast check box. This check box is cleared by default.
      2. In the Main VRPP router IP field, enter the necessary value.
      3. In the Backup VRRP router IP field, enter the necessary value.
  14. If necessary, use a password for authenticating VRRP advertisements:
      1. Select the Authentication check box. This check box is cleared by default.
      2. Enter a password in the field that is displayed. Maximum length of the password: 16 characters. To see the entered password, you can click the show button .
  15. Click Create.

      The VRRP instance is created and displayed in the table.

  16. In the upper part of the settings area, click Save to save the configuration of the CPE template.