The Virtual Router Redundancy Protocol (VRRP) is a LAN-side protocol that provides redundant gateway service for switches and other IP end stations. In Cisco IOS XE Catalyst SD-WAN devices, you can configure VRRP on interfaces and subinterfaces using Cisco SD-WAN Manager templates and CLI add-on templates.

For more information, see Configuring VRRP.

The VRRP state is determined based on the tunnel link status. If the tunnel or interface is down on the primary VRRP, then the traffic is directed to the secondary VRRP. The secondary VRRP router in the LAN segment becomes primary VRRP to provide gateway for the service-side traffic.

Zscaler Tunnel Use Case 1—Primary VRRP, Single Internet Provider

The primary and secondary Zscaler tunnels are connected through a single internet provider to the primary VRRP. The primary and secondary VRRP routers are connected through using TLOC extension. In this scenario, the VRRP state transition occurs if the primary and secondary tunnels go down on primary VRRP. The predetermined priority value decrements when the tracking object is down, which triggers the VRRP state transition. To avoid asymmetric routing, VRRP notifies this change to the Overlay through OMP.

Zscaler Tunnel Use Case 2—VRRP Routers in TLOC Extension, Dual Internet Providers

The primary and secondary VRRP routers are configured in TLOC extension high availability mode. The primary and secondary Zscaler tunnels are directly connected with primary and secondary VRRP routers, respectively, using dual internet providers. In this scenario too, the VRRP state transition occurs if the primary and secondary tunnels go down on primary VRRP. The predetermined priority value decrements when the tracking object is down, which triggers the VRRP state transition. VRRP notifies this change to the Overlay through OMP.

TLOC Preference

Transport Locators (TLOCs) connect an OMP route to a physical location. A TLOC is directly reachable using an entry in the routing table of the physical network, or represented by a prefix beyond a NAT device.

In Cisco IOS XE Catalyst SD-WAN devices, the TLOC change increase preference value increases based on the configured value. You can configure the TLOC change increase preference value on both the active and the backup nodes.

Use the Cisco System template to configure an object tracker.

1. From the Cisco SD-WAN Manager menu, choose Configuration > Templates.

2. Click Feature Templates.

   Note	In Cisco vManage Release 20.7.x and earlier releases, Feature Templates is titled Feature.

3. Navigate to the Cisco System template for the device.

   Note	To create a System template, see Create System Template

4. Click Tracker and choose New Object Tracker to configure the tracker parameters.

   Table 2. Tracker Parameters

   Field	Description
   Tracker Type	Choose Interface or SIG or Route to configure the object tracker.
   Object ID	Enter the object ID number.
   Interface	Choose global or device-specific tracker interface name.

5. Click Add.

6. Optionally, to create a tracker group, click Tracker, and click Tracker Groups > New Object Tracker Groups to configure the tracker parameters.

   Note	Ensure that you have created two trackers to create a track group.

   Table 3. Object Tracker Group Parameters

   Field	Description
   Group Tracker ID	Enter the name of the tracker group.
   Tracker ID	Enter the name of the object tracker that you want to group.
   Criteria	Choose AND or OR explicitly. OR ensures that the transport interface status is reported as active if either one of the associated trackers of the tracker group reports that the route is active. If you choose AND operation, the transport interface status is reported as active if both the associated trackers of the tracker group report that the route is active.

   Note	Provide information in all the mandatory fields before you save the template.

7. Click Add.

8. Click Save.

To configure VRRP for a Cisco VPN template, do the following:

1. From the Cisco SD-WAN Manager menu, choose Configuration > Templates.

2. Click Feature Templates.

   Note	In Cisco vManage Release 20.7.x and earlier releases, Feature Templates is titled Feature.

3. Navigate to the Cisco VPN Interface Ethernet template for the device.

   Note	For information about creating a new Cisco VPN Interface Ethernet template, see Configure VPN Ethernet Interface.

4. Click VRRP and choose IPv4.

5. Click New VRRP to create a new VRRP or edit the existing VRRP and configure the following parameters:

   Parameter Name	Description
   TLOC Preference Change	(Optional) Choose On or Off to set whether the TLOC preference can be changed or not.
   TLOC Preference Change Value	(Optional) Enter the TLOC preference change. Range: 1 to 4294967295.

6. Click the Add Tracking Object link, and in the Tracking Object dialog box that is displayed, click Add Tracking Object.

7. In the Tracker ID field, enter the Interface Object ID or Object Group Tracker ID.

8. From the Action drop-down list, choose Decrement and enter the Decrement Value as 1. Cisco vEdge Devices supports decrement value of 1.

   Or

   Choose Shutdown.

9. Click Add.

10. Click Add to save the VRRP details.

11. Click Save.

Interface Object Tracking Using CLI

config-transaction
  track 100 interface Tunnel123 line-protocol
   exit
 track 200 interface GigabitEthernet5 line-protocol
  exit
track 400 list boolean and
  object 100
  object 200
  exit
 
interface GigabitEthernet2
 vrf forwarding 1
 ip address 10.10.1.1 255.255.255.0
 negotiation auto
vrrp 1 address-family ipv4
  address 10.10.1.10 primary
  track 400 decrement 10
  tloc-change increase-preference 333
  exit

SIG Object Tracking Using CLI

config-transaction
  track 1 service global
  exit
  exit 
  track 2 service global
track 3 list boolean and
  object 1
  object 2
  exit
 
interface GigabitEthernet2
 vrf forwarding 1
 ip address 10.10.1.1 255.255.255.0
 negotiation auto
vrrp 1 address-family ipv4
  address 10.10.1.10 primary
  track 3 decrement 10
  tloc-change increase-preference 333
  exit

To view information about VRRP configuration:

1. From the Cisco SD-WAN Manager menu, choose Monitor > Devices.

   Cisco vManage Release 20.6.x and earlier: From the Cisco SD-WAN Manager menu, choose Monitor > Network.

2. Choose a device from the list of devices.

3. Click Real Time.

4. From the Device Options drop-down list, choose VRRP Information.

   Note	You can view the status of the VRRP configuration in Track State.