http://www.dslreports.com/forum/r20394658 en Thu, 21 Aug 2008 20:30:52 EDT Thu, 21 Aug 2008 20:30:52 EDT http://www.dslreports.com/forum/remark,20394880 DocLarge : You've got two problems that requires getting "one" worked out before proceeding, ideally, getting failover (VRRP) to work first.

The reason your VRRP failover configuration may not have worked is because you most likely did not set the priority level on the first concentrator. As a side note, in the CCNP curriculum, configuring VRRP is based on routers, so that's the only frame of reference I have, so bear with me :)

By default, both routers have a priority of 100. If this happens after vrrp is enabled on both routers, then the router that has the higher ip address becomes the master. So, to counter this, you have to increase the priority on the router (or concentrator in your case) you want to be the master.

On a router interface, you'd enter this command at the global config: vrrp 1 priority 150

Because I've yet to work on a concentrator, I could't really advise you on that, but this is how you'd do it on an IOS router.

Truthfully, it may be more worth your time to post this question in the Cisco forum; look for Rolande, Aryoba, MSN, or TomS (to name a few) to respond with assistance. :)

Jay]]> http://www.dslreports.com/forum/remark,20394880 Sun, 27 Apr 2008 12:27:01 EDT http://www.dslreports.com/forum/remark,20394658 DocLarge : SEE NEXT POST]]> http://www.dslreports.com/forum/remark,20394658 Sun, 27 Apr 2008 11:24:15 EDT http://www.dslreports.com/forum/remark,20358360 wasiim : Second problem is regarding VPN Concentrator VRRP configuration. I did the configuration according to the link »www.cisco.com/warp/public/471/vrrp.html

I configure one Concentrator with IP addresses and VRRP by configuring it as master role. I copy the configuration on second concentrator by just modifying the IP addresses nothing I changed.

After rebooting the 2nd concentrator my master concentrator stops responding, no ping no browser access. I am only able to access the 2nd concentrator.

1st Master concentrator: IP 172.28.31.92/x.x.x.1
2nd Master Concentrator: IP 172.28.31.93/x.x.x.2

1. My question is on which global IP shall I make the VPN tunnel, because both are configured with master role.
2. How the configuration will replicate on unresponded concentrator,
3. In VRRP right now both devices are master, because I copy the whole configuration of 1st concentrator on 2nd by just modifying the IP addresses.
4. Where the concept of Master/backup.
5. Is this the normal behavior that one device stops responding.

]]> http://www.dslreports.com/forum/remark,20358360 Sun, 20 Apr 2008 12:19:38 EDT