VRRP-MIB

All MIBs › VRRP-MIB

Organization: IETF VRRP Working Group

Last Updated: 2000-03-03

Category: Routing Protocols

Description: Defines managed objects for configuring, monitoring, and controlling routers that employ the Virtual Router Redundancy Protocol (VRRP) for gateway failover.

IPNetwork Monitor uses several OIDs from this MIB in network discovery and polling the applicable devices. Start monitoring VRRP-MIB with a free 30-day trial of IPNetwork Monitor.

What Is VRRP-MIB?

VRRP-MIB is a vendor-neutral IETF standards MIB (based on RFC 2787/3768) defining managed objects for configuring, monitoring, and controlling routers that participate in the Virtual Router Redundancy Protocol, which provides transparent default-gateway failover between a group of routers sharing a virtual IP/MAC address. It exposes per-virtual-router operational state including administrative and operational status, priority, the virtual MAC address, the count and identity of associated IP addresses, and which router currently holds the master and primary IP roles, along with protocol version and notification-control settings. Its monitoring value is centrally about software/control-plane status and high-availability health: confirming which router is currently Master versus Backup, detecting unexpected master/backup role flips (which indicate a failover event or a flapping VRRP instance), and verifying priority and admin-state settings are as configured. It explicitly depends on the base IF-MIB for interface association and the standard SNMPv2-SMI/CONF conventions for its statistics and compliance groups, and is a self-contained protocol MIB rather than depending on other vendor-specific modules. It is deployed on any vendor's router or Layer 3 switch pair (or group) configured for gateway redundancy in enterprise and service-provider networks, and administrators researching the IETF VRRP standard will find this MIB to be its primary SNMP management interface.

IPNetwork Monitor allows you to monitor SNMP objects defined in VRRP-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

vendor-neutral, standards-based MIB, not tied to a specific manufacturer
router or Layer 3 switch supporting VRRP gateway redundancy

Monitoring Examples

An admin would poll vrrpOperTable/vrrpOperEntry -- keyed by vrrpOperVrId -- to check vrrpOperState and vrrpOperAdminState, confirming whether a given router is currently acting as Master or Backup for that virtual router instance; an unexpected transition from Master to Backup (or a state stuck at 'initialize') would reveal a failover event or a misconfigured/flapping VRRP group. Watching vrrpOperMasterIpAddr alongside vrrpOperPriority helps confirm the intended router (the one with highest priority) is indeed holding the master role, while vrrpOperIpAddrCount and vrrpOperPrimaryIpAddr validate the virtual IP address configuration matches expectations. The vrrpNodeVersion scalar confirms which VRRP protocol version the device implements, important when troubleshooting interoperability between routers from different vendors in the same VRRP group.

What Can Be Monitored

VRRP master/backup operational state
administrative state per virtual router
configured priority
virtual MAC address
master/primary IP address
VRRP protocol version

Imported Objects

From IF-MIB

ifIndex

OBJECT-TYPE

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
mib-2

From SNMPv2-TC

MacAddress
RowStatus
TEXTUAL-CONVENTION
TimeStamp
TruthValue

How to Use in IPNetwork Monitor

Example using vrrpOperIpAddrCount OID:

Select a device implementing VRRP-MIB as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type vrrpOperIpAddrCount into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. It reports how many IP addresses are currently associated with this virtual router (VRRP instance). On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is an Integer32-type OID, Value bounds is the most useful condition here — trigger an alert if the count changes unexpectedly, which would indicate an unplanned VRRP configuration change. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
IP vrrpAssoIpAddr	1.3.6.1.2.1.68.1.4.1.1	IpAddress	not-accessible	The assigned IP addresses that a virtual router is responsible for backing up.
vrrpAssoIpAddrEntry	1.3.6.1.2.1.68.1.4.1		not-accessible	An entry in the table contains an IP address that is associated with a virtual router. The number of rows for a given ifIndex and VrId will equal the number of IP addresses associated (e.g., backed up) by the virtual router (equivalent to 'vrrpOperIpAddrCount'). Rows in the table cannot be modified unless the value of `vrrpOperAdminState' is `disabled' and the `vrrpOperState' has transitioned to `initialize'.
ROW vrrpAssoIpAddrRowStatus	1.3.6.1.2.1.68.1.4.1.2	RowStatus	read-create	The row status variable, used according to installation and removal conventions for conceptual rows. Setting this object to active(1) or createAndGo(4) results in the addition of an associated address for a virtual router. Destroying the entry or setting it to notInService(2) removes the associated address from the virtual router. The use of other values is implementation-dependent.
vrrpAssoIpAddrTable	1.3.6.1.2.1.68.1.4		not-accessible	The table of addresses associated with this virtual router.
vrrpConformance	1.3.6.1.2.1.68.3
vrrpMIB	1.3.6.1.2.1.68			This MIB describes objects used for managing Virtual Router Redundancy Protocol (VRRP) routers.
vrrpMIBCompliance	1.3.6.1.2.1.68.3.1.1			The core compliance statement for all VRRP implementations.
vrrpMIBCompliances	1.3.6.1.2.1.68.3.1
vrrpMIBGroups	1.3.6.1.2.1.68.3.2
I32 vrrpNodeVersion	1.3.6.1.2.1.68.1.1	Integer32	read-only	This value identifies the particular version of the VRRP supported by this node.
INT vrrpNotificationCntl	1.3.6.1.2.1.68.1.2	INTEGER	read-write	Indicates whether the VRRP-enabled router will generate SNMP traps for events defined in this MIB. 'Enabled' results in SNMP traps; 'disabled', no traps are sent.
vrrpNotificationGroup	1.3.6.1.2.1.68.3.2.4			The VRRP MIB Notification Group.
vrrpNotifications	1.3.6.1.2.1.68.0
INT vrrpOperAdminState	1.3.6.1.2.1.68.1.3.1.4	INTEGER	read-create	This object will enable/disable the virtual router function. Setting the value to `up', will transition the state of the virtual router from `initialize' to `backup' or `master', depending on the value of `vrrpOperPriority'. Setting the value to `down', will transition the router from `master' or `backup' to `initialize'. State transitions may not be immediate; they sometimes depend on other factors, such as the interface (IF) state. The `vrrpOperAdminState' object must be set to `down' prior to modifying the other read-create objects in the conceptual row. The value of the `vrrpOperRowStatus' object (below) must be `active', signifying that the conceptual row is valid (i.e., the objects are correctly set), in order for this object to be set to `up'.
I32 vrrpOperAdvertisementInterval	1.3.6.1.2.1.68.1.3.1.11	Integer32	read-create	The time interval, in seconds, between sending advertisement messages. Only the master router sends VRRP advertisements.
vrrpOperations	1.3.6.1.2.1.68.1
OCT vrrpOperAuthKey	1.3.6.1.2.1.68.1.3.1.10	OCTET STRING	read-create	The Authentication Key. This object is set according to the value of the 'vrrpOperAuthType' object ('simpleTextPassword' or 'ipAuthenticationHeader'). If the length of the value is less than 16 octets, the agent will left adjust and zero fill to 16 octets. The value of this object is the same for a given ifIndex. When read, vrrpOperAuthKey always returns an Octet String of length zero.
INT vrrpOperAuthType	1.3.6.1.2.1.68.1.3.1.9	INTEGER	read-create	Authentication type used for VRRP protocol exchanges between virtual routers. This value of this object is the same for a given ifIndex. New enumerations to this list can only be added via a new RFC on the standards track.
vrrpOperEntry	1.3.6.1.2.1.68.1.3.1		not-accessible	An entry in the vrrpOperTable containing the operational characteristics of a virtual router. On a VRRP router, a given virtual router is identified by a combination of the IF index and VRID. Rows in the table cannot be modified unless the value of `vrrpOperAdminState' is `disabled' and the `vrrpOperState' has transitioned to `initialize'.
vrrpOperGroup	1.3.6.1.2.1.68.3.2.1			Conformance group for VRRP operations.
I32 vrrpOperIpAddrCountEx	1.3.6.1.2.1.68.1.3.1.6	Integer32	read-only	The number of IP addresses that are associated with this virtual router. This number is equal to the number of rows in the vrrpAssoIpAddrTable that correspond to a given IF index/VRID pair.
IP vrrpOperMasterIpAddr	1.3.6.1.2.1.68.1.3.1.7	IpAddress	read-only	The master router's real (primary) IP address. This is the IP address listed as the source in VRRP advertisement last received by this virtual router.
T/F vrrpOperPreemptMode	1.3.6.1.2.1.68.1.3.1.12	TruthValue	read-create	Controls whether a higher priority virtual router will preempt a lower priority master.
IP vrrpOperPrimaryIpAddr	1.3.6.1.2.1.68.1.3.1.8	IpAddress	read-create	In the case where there is more than one IP address for a given `ifIndex', this object is used to specify the IP address that will become the `vrrpOperMasterIpAddr', should the virtual router transition from backup to master. If this object is set to 0.0.0.0, the IP address which is numerically lowest will be selected.
I32 vrrpOperPriority	1.3.6.1.2.1.68.1.3.1.5	Integer32	read-create	This object specifies the priority to be used for the virtual router master election process. Higher values imply higher priority. A priority of '0', although not settable, is sent by the master router to indicate that this router has ceased to participate in VRRP and a backup virtual router should transition to become a new master. A priority of 255 is used for the router that owns the associated IP address(es).
INT vrrpOperProtocol	1.3.6.1.2.1.68.1.3.1.14	INTEGER	read-create	The particular protocol being controlled by this Virtual Router. New enumerations to this list can only be added via a new RFC on the standards track.
ROW vrrpOperRowStatus	1.3.6.1.2.1.68.1.3.1.15	RowStatus	read-create	The row status variable, used in accordance to installation and removal conventions for conceptual rows. The rowstatus of a currently active row in the vrrpOperTable is constrained by the operational state of the corresponding virtual router. When `vrrpOperRowStatus' is set to active(1), no other objects in the conceptual row, with the exception of `vrrpOperAdminState', can be modified. Prior to setting the `vrrpOperRowStatus' object from `active' to a different value, the `vrrpOperAdminState' object must be set to `down' and the `vrrpOperState' object be transitioned to `initialize'. To create a row in this table, a manager sets this object to either createAndGo(4) or createAndWait(5). Until instances of all corresponding columns are appropriately configured, the value of the corresponding instance of the `vrrpOperRowStatus' column will be read as notReady(3). In particular, a newly created row cannot be made active(1) until (minimally) the corresponding instance of `vrrpOperVrId' has been set and there is at least one active row in the `vrrpAssoIpAddrTable' defining an associated IP address for the virtual router.
INT vrrpOperState	1.3.6.1.2.1.68.1.3.1.3	INTEGER	read-only	The current state of the virtual router. This object has three defined values: - `initialize', which indicates that all the virtual router is waiting for a startup event. - `backup', which indicates the virtual router is monitoring the availability of the master router. - `master', which indicates that the virtual router is forwarding packets for IP addresses that are associated with this router. Setting the `vrrpOperAdminState' object (below) initiates transitions in the value of this object.
vrrpOperTable	1.3.6.1.2.1.68.1.3		not-accessible	Operations table for a VRRP router which consists of a sequence (i.e., one or more conceptual rows) of 'vrrpOperEntry' items.
MAC vrrpOperVirtualMacAddr	1.3.6.1.2.1.68.1.3.1.2	MacAddress	read-only	The virtual MAC address of the virtual router. Although this object can be derived from the 'vrrpOperVrId' object, it is defined so that it is easily obtainable by a management application and can be included in VRRP-related SNMP traps.
TIM vrrpOperVirtualRouterUpTime	1.3.6.1.2.1.68.1.3.1.13	TimeStamp	read-only	This is the value of the `sysUpTime' object when this virtual router (i.e., the `vrrpOperState') transitioned out of `initialized'.
VRI vrrpOperVrId	1.3.6.1.2.1.68.1.3.1.1	VrId	not-accessible	This object contains the Virtual Router Identifier (VRID).
C32 vrrpRouterChecksumErrors	1.3.6.1.2.1.68.2.1	Counter32	read-only	The total number of VRRP packets received with an invalid VRRP checksum value.
vrrpRouterStatsEntry	1.3.6.1.2.1.68.2.4.1		not-accessible	An entry in the table, containing statistics information about a given virtual router.
vrrpRouterStatsTable	1.3.6.1.2.1.68.2.4		not-accessible	Table of virtual router statistics.
C32 vrrpRouterVersionErrors	1.3.6.1.2.1.68.2.2	Counter32	read-only	The total number of VRRP packets received with an unknown or unsupported version number.
C32 vrrpRouterVrIdErrors	1.3.6.1.2.1.68.2.3	Counter32	read-only	The total number of VRRP packets received with an invalid VRID for this virtual router.
vrrpStatistics	1.3.6.1.2.1.68.2
C32 vrrpStatsAddressListErrors	1.3.6.1.2.1.68.2.4.1.9	Counter32	read-only	The total number of packets received for which the address list does not match the locally configured list for the virtual router.
C32 vrrpStatsAdvertiseIntervalErrors	1.3.6.1.2.1.68.2.4.1.3	Counter32	read-only	The total number of VRRP advertisement packets received for which the advertisement interval is different than the one configured for the local virtual router.
C32 vrrpStatsAdvertiseRcvd	1.3.6.1.2.1.68.2.4.1.2	Counter32	read-only	The total number of VRRP advertisements received by this virtual router.
C32 vrrpStatsAuthFailures	1.3.6.1.2.1.68.2.4.1.4	Counter32	read-only	The total number of VRRP packets received that do not pass the authentication check.
C32 vrrpStatsAuthTypeMismatch	1.3.6.1.2.1.68.2.4.1.11	Counter32	read-only	The total number of packets received with 'Auth Type' not equal to the locally configured authentication method (`vrrpOperAuthType').
C32 vrrpStatsBecomeMaster	1.3.6.1.2.1.68.2.4.1.1	Counter32	read-only	The total number of times that this virtual router's state has transitioned to MASTER.
vrrpStatsGroup	1.3.6.1.2.1.68.3.2.2			Conformance group for VRRP statistics.
C32 vrrpStatsInvalidAuthType	1.3.6.1.2.1.68.2.4.1.10	Counter32	read-only	The total number of packets received with an unknown authentication type.
C32 vrrpStatsInvalidTypePktsRcvd	1.3.6.1.2.1.68.2.4.1.8	Counter32	read-only	The number of VRRP packets received by the virtual router with an invalid value in the 'type' field.
C32 vrrpStatsIpTtlErrors	1.3.6.1.2.1.68.2.4.1.5	Counter32	read-only	The total number of VRRP packets received by the virtual router with IP TTL (Time-To-Live) not equal to 255.
C32 vrrpStatsPacketLengthErrors	1.3.6.1.2.1.68.2.4.1.12	Counter32	read-only	The total number of packets received with a packet length less than the length of the VRRP header.
C32 vrrpStatsPriorityZeroPktsRcvd	1.3.6.1.2.1.68.2.4.1.6	Counter32	read-only	The total number of VRRP packets received by the virtual router with a priority of '0'.
C32 vrrpStatsPriorityZeroPktsSent	1.3.6.1.2.1.68.2.4.1.7	Counter32	read-only	The total number of VRRP packets sent by the virtual router with a priority of '0'.
INT vrrpTrapAuthErrorType	1.3.6.1.2.1.68.1.6	INTEGER	accessible-for-notify	Potential types of configuration conflicts. Used by vrrpAuthFailure trap.
NTF vrrpTrapAuthFailure	1.3.6.1.2.1.68.0.2			A vrrpAuthFailure trap signifies that a packet has been received from a router whose authentication key or authentication type conflicts with this router's authentication key or authentication type. Implementation of this trap is optional.
vrrpTrapGroup	1.3.6.1.2.1.68.3.2.3			Conformance group for objects contained in VRRP notifications.
NTF vrrpTrapNewMaster	1.3.6.1.2.1.68.0.1			The newMaster trap indicates that the sending agent has transitioned to 'Master' state.
IP vrrpTrapPacketSrc	1.3.6.1.2.1.68.1.5	IpAddress	accessible-for-notify	The IP address of an inbound VRRP packet. Used by vrrpTrapAuthFailure trap.

RFC description

Manages Virtual Router Redundancy Protocol (VRRP) routers as defined in RFC 2787, enabling monitoring of virtual router redundancy and failover statistics.

Start monitoring vendor-neutral, standards-based MIB, router or Layer 3 switch supporting VRRP gateway redundancy (master/backup role/priority status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download VRRP-MIB