VRRP Master Status via VMAC Address Comparison

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In Virtual Router Redundancy Protocol (VRRP) implementations, network devices may falsely determine that a VIP address is in use, leading to incorrect duplicate address detection, causing multiple devices to assume a master status simultaneously and resulting in network instability and increased resource utilization.

Innovation Solution

Network devices compare data link layer addresses with Virtual Media Access Control (VMAC) addresses to verify peer relationships within the VRRP group, allowing them to disregard duplicate address detection messages and avoid unnecessary duplicate address detection processes, thereby determining the availability of the VIP address for use without performing duplicate address detection.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If network devices perform duplicate address detection before assuming master status in VRRP, then address collision is avoided, but network convergence time increases and false positives occur

Engineering Contradiction:

Improveaddress collision avoidanceVSAvoidnetwork convergence time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary actions by comparing data link layer addresses before executing the full duplicate address detection process. This preliminary check using VMAC address comparison allows the device to quickly determine if duplicate detection is necessary, avoiding the time-consuming full DAD process when addresses are already known to be unique within the VRRP group.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The invention extracts the essential verification step from the complete duplicate address detection process. By isolating the data link layer address comparison as a separate preliminary step, the system can quickly filter out cases where full DAD is unnecessary, thereby reducing overall convergence time while maintaining reliability.

Inventive Principle:

Principle #2Taking out (Extraction)

2Reliability

If network devices perform full duplicate address detection process, then address uniqueness is verified, but network traffic increases and resource utilization increases

Engineering Contradiction:

Improveaddress uniqueness verificationVSAvoidnetwork traffic

Core Design Contradiction:

ReliabilityVSLoss of energy

Solution Approach 1:

The system applies partial action by performing only the necessary data link layer address comparison instead of the complete duplicate address detection process. This partial verification is sufficient for VRRP group members who already share the same VMAC address, thereby reducing network traffic and resource consumption while maintaining address uniqueness verification.

Inventive Principle:

Principle #16Partial or excessive action

Solution Approach 2:

The invention changes the verification parameter from full IP address duplicate detection to data link layer address comparison. This parameter change leverages the fact that VRRP group members share the same VMAC address, making the comparison more efficient and reducing the computational and network resources required for verification.

Inventive Principle:

Principle #35Parameter changes

3Productivity

If network devices assume master status quickly without duplicate address detection, then network convergence speed increases, but false master status assumptions occur

Engineering Contradiction:

Improvenetwork convergence speedVSAvoidmaster status assignment accuracy

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The system performs a preliminary data link layer address comparison before assuming master status. This preliminary verification using the shared VMAC address provides sufficient assurance of address uniqueness within the VRRP group, enabling quick master status assumption without the delays of full duplicate address detection while maintaining reliability.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

VRRP group members use their own knowledge of the shared VMAC address to perform self-verification of address uniqueness. Each device can independently determine that its address is unique within the group by comparing its data link layer address against the known VMAC, eliminating the need for external duplicate detection protocols and enabling rapid master status assumption.

Inventive Principle:

Principle #25Self-service

Data Source

PatentUS10250497B1Avoiding false duplicate network address detection in virtual router redundancy protocol (VRRP) scenarios

Publication Date: 2019.04.02 JUNIPER NETWORKS INC

AI summary

A first network device may activate the first network device as being associated with a Virtual Router Redundancy Protocol (VRRP) group. The first network device may receive, from a second network device, a duplicate address detection message. The first network device may compare a data link layer address associated with the duplicate address detection message and a Virtual Media Access Control (VMAC) address of the VRRP group. The first network device may disregard the duplicate address detection message after comparing the data link layer address and the VMAC address of the VRRP group.