When doing maintenance on VRRP cluster nodes, we need to make sure that the system is in a working state before taking part in the VRRP cluster again. The only way to control this is by setting all VRRP groups to 'disable' on the corresponding node. This can be tedious and error prone on firewalls with >20 interfaces. It would be nice to have something like a "VRRP maintenance mode" or the ability to disable the entire VRRP service by setting something in the form of set high-availability vrrp disable.
Description
Description
Details
Details
- Difficulty level
- Unknown (require assessment)
- Version
- -
- Why the issue appeared?
- Will be filled on close
- Is it a breaking change?
- Unspecified (possibly destroys the router)
- Issue type
- Unspecified (please specify)
Event Timeline
Comment Actions
We cannot disable keepalived as it is used not only for VRRP and also for virtual-server
set high-availability virtual-server xxxx
So it should be something like set high-availability disable
Or just clean the VRRP configuration with set high-availability vrrp disable
Comment Actions
PR https://github.com/vyos/vyos-1x/pull/1984
set high-availability disable set high-availability vrrp group GRP01 address 192.0.2.47/32 set high-availability vrrp group GRP01 interface 'eth1' set high-availability vrrp group GRP01 vrid '10'