S9706 VRRP+MSTP组网，两端VRRP都是Master

2026年 2月 6日交换机 SE_Gao

问题描述

S9706 VRRP+MSTP倒三角组网,两端VRRP都是Master

告警信息

Jun 21 2017 10:41:36 HX-1 %%01VRRP/4/STATEWARNINGEXTEND(l)[0]:Virtual Router state BACKUP changed to MASTER, because of protocol timer expired. (Interface=Vlanif34, VrId=34, InetType=IPv4)

Jun 21 2017 10:41:32 HX-1 %%01VRRP/4/STATEWARNINGEXTEND(l)[1]:Virtual Router state MASTER changed to BACKUP, because of priority calculation. (Interface=Vlanif34, VrId=34, InetType=IPv4)

Jun 21 2017 10:41:19 HX-1 %%01VRRP/4/STATEWARNINGEXTEND(l)[2]:Virtual Router state BACKUP changed to MASTER, because of protocol timer expired. (Interface=Vlanif2, VrId=2, InetType=IPv4)

Jun 21 2017 10:41:16 HX-1 %%01VRRP/4/STATEWARNINGEXTEND(l)[3]:Virtual Router state MASTER changed to BACKUP, because of priority calculation. (Interface=Vlanif2, VrId=2, InetType=IPv4)

#Jun 21 2017 10:43:30 HX-1 VRRP/2/VRRPV3CHANGETOMASTER:OID 1.3.6.1.2.1.207.0.1 The status of VRRP changed to master. (VrrpIfIndex=108, VrId=2, InetAddrType=1, IPAddress=10.57.4.253, ChangeReason=3)

#Jun 21 2017 10:43:30 HX-1 VRRP/2/VRRPCHANGETOMASTER:OID 1.3.6.1.2.1.68.0.1 The status of VRRP changed to master. (VrrpIfIndex=108, VrId=2, IfIndex=108, IPAddress=10.57.4.253, NodeName=HX-1, IfName=Vlanif2, ChangeReason=protocol timer expired)

#Jun 21 2017 10:43:30 HX-1 VRRP/2/VRRPV3CHANGETOMASTER:OID 1.3.6.1.2.1.207.0.1 The status of VRRP changed to master. (VrrpIfIndex=123, VrId=50, InetAddrType=1, IPAddress=172.16.50.253, ChangeReason=3)

#Jun 21 2017 10:43:30 HX-1 VRRP/2/VRRPCHANGETOMASTER:OID 1.3.6.1.2.1.68.0.1 The status of VRRP changed to master. (VrrpIfIndex=123, VrId=50, IfIndex=123, IPAddress=172.16.50.253, NodeName=HX-1, IfName=Vlanif50, ChangeReason=protocol timer expired)

#Jun 21 2017 10:43:27 HX-1 VRRP/2/VRRPMASTERDOWN:OID 1.3.6.1.4.1.2011.5.25.127.2.30.1 The state of VRRP changed from master to other state. (VrrpIfIndex=108, VrId=2, IfIndex=108, IPAddress=10.57.4.253, NodeName=HX-1, IfName=Vlanif2, CurrentState=2, ChangeReason=priority calculation)

处理过程

1.由于接入设备无法登陆，只能通过两个核心交换机排查；

查看mstp的状态，互联的心跳口都没有被阻塞，连接接入的接口也没有被阻塞都是forwarding的状态；

在主上面ping 备的实地址也是可以通的；

2.查看cpu-defend丢包计数：

display cpu-defend statistics all

--------------------------------------------------------------------------------

Packet Type Pass(Packet/Byte) Drop(Packet/Byte) Last-dropping-time

--------------------------------------------------------------------------------

……………………

vrrp 19447164 1723033161 2017-06-21 10:19:51

1322407152 117166254k

VRRP的协议报文一直被丢弃的，查看mac地址漂移记录，有VLAN4的mac地址一直在漂移，检测接入vlan4是一个监控网络，里面有环路，环路问题解决之后VRRP的状态正常；

<HX-1> dis mac-address flapping record

S : start time

E : end time

(Q) : quit vlan

(D) : error down

-------------------------------------------------------------------------------

Move-Time VLAN MAC-Address Original-Port Move-Ports MoveNum

-------------------------------------------------------------------------------

S:2017-06-20 14:39:32 4 0000-XXXX-0104 XGE2/0/13 Eth-Trunk1 65535

E:2017-06-21 10:47:44

根因

环路导致vrrp的协议报文全部cpu-defend丢弃，导致心跳超时vrrp双主；

解决方案

内网环路解决之后问题解决

作者：SE_Gao

链接：https://www.cnesa.cn/10675.html

文章版权归作者所有，未经允许请勿转载。