All MIBs › VRRP-MIB
Organization: IETF VRRP Working Group
Last Updated: 2000-03-03
Category: Routing Protocols
Description:
Defines managed objects for configuring, monitoring, and controlling routers that employ the Virtual Router Redundancy Protocol (VRRP) for gateway failover.
Imported Objects
From IF-MIB
| ifIndex | OBJECT-TYPE |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| NOTIFICATION-GROUP | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Counter32 | |
| Integer32 | |
| IpAddress | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| mib-2 |
From SNMPv2-TC
| MacAddress | |
| RowStatus | |
| TEXTUAL-CONVENTION | |
| TimeStamp | |
| TruthValue |
What Is VRRP-MIB?
VRRP-MIB is a vendor-neutral IETF standards MIB (based on RFC 2787/3768) defining managed objects for configuring, monitoring, and controlling routers that participate in the Virtual Router Redundancy Protocol, which provides transparent default-gateway failover between a group of routers sharing a virtual IP/MAC address. It exposes per-virtual-router operational state including administrative and operational status, priority, the virtual MAC address, the count and identity of associated IP addresses, and which router currently holds the master and primary IP roles, along with protocol version and notification-control settings. Its monitoring value is centrally about software/control-plane status and high-availability health: confirming which router is currently Master versus Backup, detecting unexpected master/backup role flips (which indicate a failover event or a flapping VRRP instance), and verifying priority and admin-state settings are as configured. It explicitly depends on the base IF-MIB for interface association and the standard SNMPv2-SMI/CONF conventions for its statistics and compliance groups, and is a self-contained protocol MIB rather than depending on other vendor-specific modules. It is deployed on any vendor's router or Layer 3 switch pair (or group) configured for gateway redundancy in enterprise and service-provider networks, and administrators researching the IETF VRRP standard will find this MIB to be its primary SNMP management interface.
IPNetwork Monitor allows you to monitor SNMP objects defined in VRRP-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
What Can Be Monitored
- VRRP master/backup operational state
- administrative state per virtual router
- configured priority
- virtual MAC address
- master/primary IP address
- VRRP protocol version
Supported Devices
- vendor-neutral, standards-based MIB, not tied to a specific manufacturer
- router or Layer 3 switch supporting VRRP gateway redundancy
Monitoring Examples
An admin would poll vrrpOperTable/vrrpOperEntry -- keyed by vrrpOperVrId -- to check vrrpOperState and vrrpOperAdminState, confirming whether a given router is currently acting as Master or Backup for that virtual router instance; an unexpected transition from Master to Backup (or a state stuck at 'initialize') would reveal a failover event or a misconfigured/flapping VRRP group. Watching vrrpOperMasterIpAddr alongside vrrpOperPriority helps confirm the intended router (the one with highest priority) is indeed holding the master role, while vrrpOperIpAddrCount and vrrpOperPrimaryIpAddr validate the virtual IP address configuration matches expectations. The vrrpNodeVersion scalar confirms which VRRP protocol version the device implements, important when troubleshooting interoperability between routers from different vendors in the same VRRP group.
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| vrrpMIB | 1.3.6.1.2.1.68 | This MIB describes objects used for managing Virtual Router Redundancy Protocol (VRRP) routers. | ||
| vrrpNotifications | 1.3.6.1.2.1.68.0 | |||
| NTF vrrpTrapNewMaster | 1.3.6.1.2.1.68.0.1 | The newMaster trap indicates that the sending agent has transitioned to 'Master' state. | ||
| NTF vrrpTrapAuthFailure | 1.3.6.1.2.1.68.0.2 | A vrrpAuthFailure trap signifies that a packet has been received from a router whose authentication key or authentication type conflicts with this router's authentication key or authentication type. Implementation of this trap is optional. | ||
| vrrpOperations | 1.3.6.1.2.1.68.1 | |||
| I32 vrrpNodeVersion | 1.3.6.1.2.1.68.1.1 | Integer32 | read-only | This value identifies the particular version of the VRRP supported by this node. |
| INT vrrpNotificationCntl | 1.3.6.1.2.1.68.1.2 | INTEGER | read-write | Indicates whether the VRRP-enabled router will generate SNMP traps for events defined in this MIB. 'Enabled' results in SNMP traps; 'disabled', no traps are sent. |
| vrrpOperTable | 1.3.6.1.2.1.68.1.3 | not-accessible | Operations table for a VRRP router which consists of a sequence (i.e., one or more conceptual rows) of 'vrrpOperEntry' items. | |
| vrrpOperEntry | 1.3.6.1.2.1.68.1.3.1 | not-accessible | An entry in the vrrpOperTable containing the operational characteristics of a virtual router. On a VRRP router, a given virtual router is identified by a combination of the IF index and VRID. Rows in the table cannot be modified unless the value of `vrrpOperAdminState' is `disabled' and the `vrrpOperState' has transitioned to `initialize'. | |
| VRI vrrpOperVrId | 1.3.6.1.2.1.68.1.3.1.1 | VrId | not-accessible | This object contains the Virtual Router Identifier (VRID). |
| MAC vrrpOperVirtualMacAddr | 1.3.6.1.2.1.68.1.3.1.2 | MacAddress | read-only | The virtual MAC address of the virtual router. Although this object can be derived from the 'vrrpOperVrId' object, it is defined so that it is easily obtainable by a management application and can be included in VRRP-related SNMP traps. |
| INT vrrpOperState | 1.3.6.1.2.1.68.1.3.1.3 | INTEGER | read-only | The current state of the virtual router. This object has three defined values: - `initialize', which indicates that all the virtual router is waiting for a startup event. - `backup', which indicates the virtual router is monitoring the availability of the master router. - `master', which indicates that the virtual router is forwarding packets for IP addresses that are associated with this router. Setting the `vrrpOperAdminState' object (below) initiates transitions in the value of this object. |
| INT vrrpOperAdminState | 1.3.6.1.2.1.68.1.3.1.4 | INTEGER | read-create | This object will enable/disable the virtual router function. Setting the value to `up', will transition the state of the virtual router from `initialize' to `backup' or `master', depending on the value of `vrrpOperPriority'. Setting the value to `down', will transition the router from `master' or `backup' to `initialize'. State transitions may not be immediate; they sometimes depend on other factors, such as the interface (IF) state. The `vrrpOperAdminState' object must be set to `down' prior to modifying the other read-create objects in the conceptual row. The value of the `vrrpOperRowStatus' object (below) must be `active', signifying that the conceptual row is valid (i.e., the objects are correctly set), in order for this object to be set to `up'. |
| I32 vrrpOperPriority | 1.3.6.1.2.1.68.1.3.1.5 | Integer32 | read-create | This object specifies the priority to be used for the virtual router master election process. Higher values imply higher priority. A priority of '0', although not settable, is sent by the master router to indicate that this router has ceased to participate in VRRP and a backup virtual router should transition to become a new master. A priority of 255 is used for the router that owns the associated IP address(es). |
| I32 vrrpOperIpAddrCount | 1.3.6.1.2.1.68.1.3.1.6 | Integer32 | read-only | The number of IP addresses that are associated with this virtual router. This number is equal to the number of rows in the vrrpAssoIpAddrTable that correspond to a given IF index/VRID pair. |
| IP vrrpOperMasterIpAddr | 1.3.6.1.2.1.68.1.3.1.7 | IpAddress | read-only | The master router's real (primary) IP address. This is the IP address listed as the source in VRRP advertisement last received by this virtual router. |
| IP vrrpOperPrimaryIpAddr | 1.3.6.1.2.1.68.1.3.1.8 | IpAddress | read-create | In the case where there is more than one IP address for a given `ifIndex', this object is used to specify the IP address that will become the `vrrpOperMasterIpAddr', should the virtual router transition from backup to master. If this object is set to 0.0.0.0, the IP address which is numerically lowest will be selected. |
| INT vrrpOperAuthType | 1.3.6.1.2.1.68.1.3.1.9 | INTEGER | read-create | Authentication type used for VRRP protocol exchanges between virtual routers. This value of this object is the same for a given ifIndex. New enumerations to this list can only be added via a new RFC on the standards track. |
| OCT vrrpOperAuthKey | 1.3.6.1.2.1.68.1.3.1.10 | OCTET STRING | read-create | The Authentication Key. This object is set according to the value of the 'vrrpOperAuthType' object ('simpleTextPassword' or 'ipAuthenticationHeader'). If the length of the value is less than 16 octets, the agent will left adjust and zero fill to 16 octets. The value of this object is the same for a given ifIndex. When read, vrrpOperAuthKey always returns an Octet String of length zero. |
| I32 vrrpOperAdvertisementInterval | 1.3.6.1.2.1.68.1.3.1.11 | Integer32 | read-create | The time interval, in seconds, between sending advertisement messages. Only the master router sends VRRP advertisements. |
| T/F vrrpOperPreemptMode | 1.3.6.1.2.1.68.1.3.1.12 | TruthValue | read-create | Controls whether a higher priority virtual router will preempt a lower priority master. |
| TIM vrrpOperVirtualRouterUpTime | 1.3.6.1.2.1.68.1.3.1.13 | TimeStamp | read-only | This is the value of the `sysUpTime' object when this virtual router (i.e., the `vrrpOperState') transitioned out of `initialized'. |
| INT vrrpOperProtocol | 1.3.6.1.2.1.68.1.3.1.14 | INTEGER | read-create | The particular protocol being controlled by this Virtual Router. New enumerations to this list can only be added via a new RFC on the standards track. |
| ROW vrrpOperRowStatus | 1.3.6.1.2.1.68.1.3.1.15 | RowStatus | read-create | The row status variable, used in accordance to installation and removal conventions for conceptual rows. The rowstatus of a currently active row in the vrrpOperTable is constrained by the operational state of the corresponding virtual router. When `vrrpOperRowStatus' is set to active(1), no other objects in the conceptual row, with the exception of `vrrpOperAdminState', can be modified. Prior to setting the `vrrpOperRowStatus' object from `active' to a different value, the `vrrpOperAdminState' object must be set to `down' and the `vrrpOperState' object be transitioned to `initialize'. To create a row in this table, a manager sets this object to either createAndGo(4) or createAndWait(5). Until instances of all corresponding columns are appropriately configured, the value of the corresponding instance of the `vrrpOperRowStatus' column will be read as notReady(3). In particular, a newly created row cannot be made active(1) until (minimally) the corresponding instance of `vrrpOperVrId' has been set and there is at least one active row in the `vrrpAssoIpAddrTable' defining an associated IP address for the virtual router. |
| vrrpAssoIpAddrTable | 1.3.6.1.2.1.68.1.4 | not-accessible | The table of addresses associated with this virtual router. | |
| vrrpAssoIpAddrEntry | 1.3.6.1.2.1.68.1.4.1 | not-accessible | An entry in the table contains an IP address that is associated with a virtual router. The number of rows for a given ifIndex and VrId will equal the number of IP addresses associated (e.g., backed up) by the virtual router (equivalent to 'vrrpOperIpAddrCount'). Rows in the table cannot be modified unless the value of `vrrpOperAdminState' is `disabled' and the `vrrpOperState' has transitioned to `initialize'. | |
| IP vrrpAssoIpAddr | 1.3.6.1.2.1.68.1.4.1.1 | IpAddress | not-accessible | The assigned IP addresses that a virtual router is responsible for backing up. |
| ROW vrrpAssoIpAddrRowStatus | 1.3.6.1.2.1.68.1.4.1.2 | RowStatus | read-create | The row status variable, used according to installation and removal conventions for conceptual rows. Setting this object to active(1) or createAndGo(4) results in the addition of an associated address for a virtual router. Destroying the entry or setting it to notInService(2) removes the associated address from the virtual router. The use of other values is implementation-dependent. |
| IP vrrpTrapPacketSrc | 1.3.6.1.2.1.68.1.5 | IpAddress | accessible-for-notify | The IP address of an inbound VRRP packet. Used by vrrpTrapAuthFailure trap. |
| INT vrrpTrapAuthErrorType | 1.3.6.1.2.1.68.1.6 | INTEGER | accessible-for-notify | Potential types of configuration conflicts. Used by vrrpAuthFailure trap. |
| vrrpStatistics | 1.3.6.1.2.1.68.2 | |||
| C32 vrrpRouterChecksumErrors | 1.3.6.1.2.1.68.2.1 | Counter32 | read-only | The total number of VRRP packets received with an invalid VRRP checksum value. |
| C32 vrrpRouterVersionErrors | 1.3.6.1.2.1.68.2.2 | Counter32 | read-only | The total number of VRRP packets received with an unknown or unsupported version number. |
| C32 vrrpRouterVrIdErrors | 1.3.6.1.2.1.68.2.3 | Counter32 | read-only | The total number of VRRP packets received with an invalid VRID for this virtual router. |
| vrrpRouterStatsTable | 1.3.6.1.2.1.68.2.4 | not-accessible | Table of virtual router statistics. | |
| vrrpRouterStatsEntry | 1.3.6.1.2.1.68.2.4.1 | not-accessible | An entry in the table, containing statistics information about a given virtual router. | |
| C32 vrrpStatsBecomeMaster | 1.3.6.1.2.1.68.2.4.1.1 | Counter32 | read-only | The total number of times that this virtual router's state has transitioned to MASTER. |
| C32 vrrpStatsAdvertiseRcvd | 1.3.6.1.2.1.68.2.4.1.2 | Counter32 | read-only | The total number of VRRP advertisements received by this virtual router. |
| C32 vrrpStatsAdvertiseIntervalErrors | 1.3.6.1.2.1.68.2.4.1.3 | Counter32 | read-only | The total number of VRRP advertisement packets received for which the advertisement interval is different than the one configured for the local virtual router. |
| C32 vrrpStatsAuthFailures | 1.3.6.1.2.1.68.2.4.1.4 | Counter32 | read-only | The total number of VRRP packets received that do not pass the authentication check. |
| C32 vrrpStatsIpTtlErrors | 1.3.6.1.2.1.68.2.4.1.5 | Counter32 | read-only | The total number of VRRP packets received by the virtual router with IP TTL (Time-To-Live) not equal to 255. |
| C32 vrrpStatsPriorityZeroPktsRcvd | 1.3.6.1.2.1.68.2.4.1.6 | Counter32 | read-only | The total number of VRRP packets received by the virtual router with a priority of '0'. |
| C32 vrrpStatsPriorityZeroPktsSent | 1.3.6.1.2.1.68.2.4.1.7 | Counter32 | read-only | The total number of VRRP packets sent by the virtual router with a priority of '0'. |
| C32 vrrpStatsInvalidTypePktsRcvd | 1.3.6.1.2.1.68.2.4.1.8 | Counter32 | read-only | The number of VRRP packets received by the virtual router with an invalid value in the 'type' field. |
| C32 vrrpStatsAddressListErrors | 1.3.6.1.2.1.68.2.4.1.9 | Counter32 | read-only | The total number of packets received for which the address list does not match the locally configured list for the virtual router. |
| C32 vrrpStatsInvalidAuthType | 1.3.6.1.2.1.68.2.4.1.10 | Counter32 | read-only | The total number of packets received with an unknown authentication type. |
| C32 vrrpStatsAuthTypeMismatch | 1.3.6.1.2.1.68.2.4.1.11 | Counter32 | read-only | The total number of packets received with 'Auth Type' not equal to the locally configured authentication method (`vrrpOperAuthType'). |
| C32 vrrpStatsPacketLengthErrors | 1.3.6.1.2.1.68.2.4.1.12 | Counter32 | read-only | The total number of packets received with a packet length less than the length of the VRRP header. |
| vrrpConformance | 1.3.6.1.2.1.68.3 | |||
| vrrpMIBCompliances | 1.3.6.1.2.1.68.3.1 | |||
| vrrpMIBCompliance | 1.3.6.1.2.1.68.3.1.1 | The core compliance statement for all VRRP implementations. | ||
| vrrpMIBGroups | 1.3.6.1.2.1.68.3.2 | |||
| vrrpOperGroup | 1.3.6.1.2.1.68.3.2.1 | Conformance group for VRRP operations. | ||
| vrrpStatsGroup | 1.3.6.1.2.1.68.3.2.2 | Conformance group for VRRP statistics. | ||
| vrrpTrapGroup | 1.3.6.1.2.1.68.3.2.3 | Conformance group for objects contained in VRRP notifications. | ||
| vrrpNotificationGroup | 1.3.6.1.2.1.68.3.2.4 | The VRRP MIB Notification Group. |
RFC description
Manages Virtual Router Redundancy Protocol (VRRP) routers as defined in RFC 2787, enabling monitoring of virtual router redundancy and failover statistics.
Start monitoring vendor-neutral, standards-based MIB, router or Layer 3 switch supporting VRRP gateway redundancy (master/backup role/priority status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.