MikroTik MTCRE lab 11 of 14
VRRP: a gateway that survives a router failure
Give an office LAN a gateway address shared by two routers with VRRP v3: elect a master by priority, test fail-over and pre-emption, and make the master step down when its own uplink fails, using netwatch.
Run this lab
It needs Lite: its 5 nodes are set to 5 vCPU and 2,816 MB in total. That fits the free demo too.
In your workspace: Shared, then MikroTik MTCRE RouterOS v7 guided labs, then 11 - VRRP - a gateway that survives a router failure
- Level
- Intermediate
- Time
- About 50 minutes
- Nodes need
- 5 vCPU, 2,816 MB
- Smallest plan
- Lite
The scenario
A GP surgery's single router failed during a clinic and nobody could reach the patient system for an hour. Fernvale has installed a second router, GW2, next to GW1. Both have their own uplink. The PCs point at a gateway, 192.168.1.1, that doesn't exist yet: you'll make it a virtual address that GW1 normally owns and GW2 takes over within seconds when GW1 or its uplink fails.
| Device | Interface | Address |
|---|---|---|
| GW1 | ether1 (uplink) · ether2 (LAN) | 10.0.1.1/30 · 192.168.1.2/24 |
| GW2 | ether1 (uplink) · ether2 (LAN) | 10.0.2.1/30 · 192.168.1.3/24 |
| Virtual gateway | VRRP VRID 1 | 192.168.1.1 (GW1 priority 200, GW2 priority 100) |
| Core | ether1 · ether2 · loopback | 10.0.1.2 · 10.0.2.2 · 198.51.100.10 |
| PC1 · PC2 | eth0 | 192.168.1.10 · .20, gateway 192.168.1.1 |
What you’ll practise
- Explain first-hop redundancy, VRRP master election, virtual MAC and advertisements
- Configure VRRP v3 interfaces and the virtual address on RouterOS 7
- Read master and backup state
- Test fail-over and pre-emption
- Track an uplink with netwatch and change VRRP priority from a script
The tasks
- Understand VRRP
- Configure VRRP on both gateways
- Watch fail-over and pre-emption
- Step down when the uplink fails
- Reading: more VRRP options
The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.
Topology and devices
The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.
Every link, as text
- Core
ether1to GW1ether1 - Core
ether2to GW2ether1 - GW1
ether2to Office-LAN (network) - GW2
ether2to Office-LAN (network) - PC1
eth0to Office-LAN (network) - PC2
eth0to Office-LAN (network)
| Node | Device | Image in Add Node | Set to |
|---|---|---|---|
| Core | MikroTik RouterOS | mikrotik-7.14.2 | 1 vCPU, 256 MB |
| GW1 | MikroTik RouterOS | mikrotik-7.14.2 | 1 vCPU, 256 MB |
| GW2 | MikroTik RouterOS | mikrotik-7.14.2 | 1 vCPU, 256 MB |
| PC1 | VPCS host | Built in to EVE-NG | Counted as 1 vCPU, 1,024 MB |
| PC2 | VPCS host | Built in to EVE-NG | Counted as 1 vCPU, 1,024 MB |
How to open this lab
Sign in to your workspace at
lab.cloudlabbox.com.In File Manager, open Shared, then the folder
MikroTik MTCRE RouterOS v7 guided labs.Open
11 - VRRP - a gateway that survives a router failureand start its nodes, then open Lab Tasks for the scenario and the steps.
The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.
More MikroTik MTCRE labs
Related labs in other courses
CloudLabBox is independent of MikroTik. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.