Troubleshooting Tip: FortiGate VRRP configuration with Juniper Router

VRRP can be configured between third-party network devices for traffic redundancy.

FortiGate Configuration:

config system interface
    edit "port19"
        set vdom "root"
        set ip 10.1.1.3 255.255.255.0
        set allowaccess ping https http
        set type physical
        set vrrp-virtual-mac enable
        config vrrp
            edit 10
                set version 2
                set vrgrp 10
                set vrip 10.1.1.1
                set priority 250
                set adv-interval 1
                set start-time 3
                set preempt enable
                set status enable
            next
        end

next

end

Juniper Configuration:

root@R1# edit interfaces ge-0/0/0 unit 0 family inet address 10.1.1.2/24

VRRP Group:

[edit interfaces ge-0/0/0 unit 0 family inet address 10.1.1.2/24]
root@R1# set vrrp-group 10

VRRP IP:

[edit interfaces ge-0/0/0 unit 0 family inet address 10.1.1.2/24]
root@R1# set vrrp-group 10 virtual-address 10.1.1.1

VRRP Priority:

[edit interfaces ge-0/0/0 unit 0 family inet address 10.1.1.2/24]
root@R1# set vrrp-group 10 priority 150
root@R1# set vrrp-group 10 preempt
root@Juniper-01# set vrrp-group 10 authentication-type simple

VRRP allows traffic command:

[edit interfaces ge-0/0/0 unit 0 family inet address 10.1.1.2/24]
root@R1# set vrrp-group 10 accept-data

Verification:

On Juniper:

root@R1> show vrrp
Interface     State     Group     VR state     Timer     Type     Address
ge-0/0/0       up         10       backup      A 1.052    lcl     10.1.1.2
                                                          vip     10.1.1.1

root@R1> show vrrp track detail
Tracked interface: ge-0/0/0
    State: up, Speed: 1g
    Incurred priority cost: 0
    Tracking VRRP interface: ge-0/0/0, Group: 10
        VR State: backup
        Current priority: 120, Configured priority: 250
        Priority hold-time: disabled

On FortiGate:

FortiGate # get router info vrrp
    Interface: port19, primary IP address: 10.1.1.3
    UseVMAC: 1, SoftSW: 0, BrPortIdx: 0, PromiscCount: 1
    HA mode: master (0:1)
    VRID: 10
    vrip: 10.1.1.1, priority: 250 (250,0), state: MASTER
    adv_interval: 1, preempt: 1, start_time: 3
    vrmac: 00:00:5e:00:01:03
    vrdst:
    vrgrp: 10

VRRP Debug Commands on FortiGate: