Hi Mike,
I'm definitely winging this since I don't use OSPF much, but would
you be able to use a combination of VRRP interface tracking and groups
to do this? i.e. -
ge-1/3/0 {
}
unit 0 {
family inet {
address 192.168.1.2/24 {
vrrp-group 1 {
virtual-address 192.168.1.1;
priority 100;
track {
interface ge-0/0/0.0 {
priority-cost 15;
apply-groups ospf-weight;
}
}
}
}
}
}
groups {
ospf-weight {
protocols {
ospf {
change-your-ospf-weighting-thing
}
}
}
}
Howard Hart
Ooma
On 09/27/2012 11:15 PM, Per Granath wrote:
Your best bet is probably to write an "event-script" that looks for VRRP
fail-over, and then changes the OSPF metric for the interface.
So, I've got 2 J6350s in full flow-mode guise on 11.4, but not a cluster.
I am trying to use VRRP for some HA though.
Because they're both "on" the same network segment they both announce
that prefix into OSPF, and that's causing me a problem.
If a TCP session arrives via J1 and J2 is the VRRP master, J2 will drop/reject
the SYN-ACK as it didn't deal with the SYN.
Now I know I could set "flow tcp-session no-syn-check" to effectively ignore
the problem, or given suitable amounts of interest/time/effort we could
probably cluster the 2 devices (different Colo providers in the same building),
or even use some creativity with static routes (urgh) to bypass OSPF entirely,
but I'm hoping there is some magic OSPF/VRRP knob I haven't been able to
find yet that will alter the OSPF metric for a logical interface based on the
VRRP state.
_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp
_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp
