Question

Difficulty: MediumHigh Availability and Redundancy Concepts

During a scheduled high-availability failover test, a network administrator powers down Core Router A, which participates in a Virtual Router Redundancy Protocol (VRRP) group with Core Router B. Core Router A has a physical IP address of 10.1.10.2, Core Router B has a physical IP address of 10.1.10.3, and the VRRP virtual IP (VIP) is 10.1.10.1. Immediately following the shutdown, several workstations lose connection to remote networks. Troubleshooting reveals that these workstations have their default gateway statically configured as 10.1.10.2. What is the root cause of the connectivity failure?

  1. The workstations were configured with the primary router's physical interface IP address rather than the VRRP virtual IP address.Answer
  2. B
    Core Router B was blocked from forwarding traffic because its Spanning Tree Protocol (STP) priority was set to a higher numerical value than Core Router A.
  3. C
    The affected workstations were assigned IP addresses that reside on a different IP subnet than the default gateway IP address.
  4. D
    VRRP preempt mode was active on Core Router B, forcing it to reject virtual router master status until Core Router A rebooted.

Answer

The workstations were configured with the primary router's physical interface IP address rather than the VRRP virtual IP address.
For First Hop Redundancy Protocols (FHRP) such as VRRP or HSRP to function properly, host devices must use the Virtual IP (VIP) as their default gateway. When hosts are configured with the physical interface IP of a specific router, high-availability mechanism is bypassed. Powering down that physical router breaks outbound routing for those hosts because the standby router only intercepts traffic addressed to the VIP.

Step-by-Step Solution

1
Analyze host default gateway configuration in relation to the VRRP setup.
Workstations have their default gateway set to 10.1.10.2, which is the physical IP address of Core Router A.
First Hop Redundancy Protocols (FHRPs) like VRRP require hosts to point to a shared Virtual IP (10.1.10.1) so that traffic is dynamically handled by whichever router holds the master role.
2
Evaluate traffic behavior when Core Router A is powered down.
Packets sent directly to 10.1.10.2 are dropped because the underlying physical interface is offline.
Core Router B only responds to packets destined for the VRRP VIP (10.1.10.1) and the VRRP virtual MAC address, not to packets sent to Core Router A's physical IP address.
3
Determine the required resolution.
Update the workstation network configuration so the default gateway points to the VRRP VIP (10.1.10.1).
This enables seamless failover to Core Router B whenever Core Router A becomes unavailable.

Key Concept

FHRP Virtual Gateway IP Configuration
Estimated Time:1m 30s
Rate this question