Technical Tip: FortiExtender does not respond to VRRP advertisments from 3rd Party Router

[pprince]

Description	This article describes how to resolve an issue where FortiExtender does not respond to VRRP advertisements from 3rd Party Router. Running tcpdump on the FortiExtender confirms that VRRP init packets arrive but the  FortiExtender does not seem to respond to the VRRP advertisements. #Test_EXT # execute tcpdump host 10.0.0. tcpdump: enabling -nn option tcpdump: verbose output suppressed, use -v[v]... for full protocol decode listening on eth0, link-type EN10MB (Ethernet), snapshot length 262144 bytes 08:55:50.470656 IP 10.0.0.2 > 224.0.0.18: VRRPv2, Advertisement, vrid 1, prio 200, authtype none, intvl 1s, length 20 08:55:51.350848 IP 10.0.0.2 > 224.0.0.18: VRRPv2, Advertisement, vrid 1, prio 200, authtype none, intvl 1s, length 20 08:55:52.351048 IP 10.0.0.2 > 224.0.0.18: VRRPv2, Advertisement, vrid 1, prio 200, authtype none, intvl 1s, length 20 08:55:53.271204 IP 10.0.0.2 > 224.0.0.18: VRRPv2, Advertisement, vrid 1, prio 200, authtype none, intvl 1s, length 20 08:55:54.183431 IP 10.0.0.2 > 224.0.0.18: VRRPv2, Advertisement, vrid 1, prio 200, authtype none, intvl 1s, length 20 08:55:55.003586 IP 10.0.0.2 > 224.0.0.18: VRRPv2, Advertisement, vrid 1, prio 200, authtype none, intvl 1s, length 20 ^C 6 packets captured No information is seen under the VRRP info log : #Test_EXT # get router info vrr ##Test_EXT#
Scope	FortiExtender.
Solution	Consider the below topology :   Verify the Configuration: Fortiextender/7.4.4/admin-guide FortiExtender has to be in IP -passthrough mode for VRRP to happen. config system management (management)# set discovery-type local (management) <M># config local (local)# set mode ip-passthrough #end Related article: Technical Tip: FortiGate and FortiExtender Integration with VRRP and DNS Service