Home > VRRP Questions

VRRP Questions

November 15th, 2018 in SWITCH 300-115 Go to comments

Quick VRRP overview:

+ is IETF RFC 3768 standard
+ supports maximum 255 groups
+ 1 active and some backups
+ Use multicast address
+ Tracking via objects
+ 1 sec hello timer, 3 sec hold time
+ Authentication: plaintext or MD5 authentication
+ Preemption is enabled by default
+ Virtual IP address can be the same as physical IP address (which is running VRRP)
+ Default priority is 100

Question 1


Unlike HSRP or GLBP, VRPP is an open standard.

Question 2


In VRRP, the active router is referred to as the master virtual router.

Question 3

Question 4

Question 5

Question 6

Question 7


From the output we learn that the current priority of the local device is 105 (via the “Priority is 105” line). But we need to notice that the tracking state is “Down” and the decrement is 15 (via the next line “Track object 1 state Down decrement 15”) so 105 is the priority after being deducted. Therefore the configured VRRP priority should be 105 + 15 = 120.

At the last line we see “Master Down interval is 3.531 sec”. We know that there is a common rule in which the backup devices should wait for three missed polls/keepalives before declaring something “down”. It is also true for VRRP but in fact VRRP adds an additional delay called “Skew time”. Therefore the default master down time is 3 x advertisement interval time + skew time (Down time = 3 x advertisement time + skew time). The Down time is 3.531 sec while the Advertisement time is 1.000 sec as shown in the output. So we can deduce the Skew time should be 0.531 sec (3.531 sec Down time = 3 x 1.000 sec Advertisement time + 0.531 sec Skew time).

Cisco uses this formula to calculate the Skew time: Skew time = (256-priority)/256

So you may ask “Why do we need the Skew time?”

Well, as we know only the Master sends hellos so when the Master goes offline all other devices in the VRRP group assume the master role simultaneously which causes some instability in the meantime. Therefore each device should wait for an additional time based on its priority, and it is the main role of Skew time.

Question 8


VRRP has three authentication schemes:
+ No authentication
+ Plain text authentication
+ MD5 authentication

Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipapp_fhrp/configuration/12-4/fhp-12-4-book/fhp-vrrp.html

Question 9


A VRRP router can use the same IP address of the physical interface (which is running that instance of VRRP) as the virtual IP address for the group so D is correct.

VRRP supports plaintext and MD5 authentications -> C is not correct.

Answer A is correct too, an example of configuring authentication is shown below:

Router(config)# interface Ethernet0/1
Router(config-if)# vrrp 1 ip
Router(config-if)# vrrp 1 priority 110
Router(config-if)# vrrp 1 authentication md5 key-string myVRRPKey timeout 30

So this question is a bit unclear about the number of correct answers. But answer A is not a distinguised feature of VRRP so we don’t choose it here.

Question 10

Question 11

Question 12


To minimize network traffic, only the Master for each virtual router sends periodic VRRP Advertisement messages. A Backup router will not attempt to preempt the Master unless it has higher priority. This eliminates service disruption unless a more preferred path becomes

Reference: https://tools.ietf.org/html/rfc3768

Question 13

  1. CCNP life
    August 15th, 2017

    Can someone please explain Question 3 ?

  2. cl
    August 30th, 2017

    question 3 makes no sense. The answer seems odd also

  3. BoZZ
    August 30th, 2017

    Q3 – VRRP can have multiple groups per vlan (1-255). VLAN number and VRRP Group number DOES NOT need to match.

  4. ntwkninja
    August 31st, 2017

    @BoZZ Can you explain a little more? The correct answer is the selection where the VLAN number and VRRP group number match.

  5. Lucky
    September 3rd, 2017

    Q3 – VRRP default priority is 100. Hence, between answers A and B, A is correct because there is no need to manually configure priority to 100 as shown in answer B.

  6. Hank
    October 9th, 2017

    For Q5: where is the entire diagram for premium, members?
    The answer says PC 1 and 3…but I do not see whole diagram.

  7. Mark
    October 10th, 2017

    Diagram missing, just trust it :)

  8. Rizwan
    October 11th, 2017

    where is the diagram for Q7?

  9. xjuankx
    October 12th, 2017

    Premiuns no found diagram… =(

  10. xjuankx
    October 12th, 2017

    Q3 –> vrrp Priority default 100 ( Vlan is not a bug the vlan may be different )

  11. Al
    November 3rd, 2017


    Regarding Q 9. why D not A?

    Authentication commands must be entered under the interface. can you enter it somewhere else?

    Would inserting the same ip address on both interfaces involved in the vrrp election and Virtual ip interface work?!


  12. mills
    November 7th, 2017

    Hello AI,

    With VRRP, the VIP and an interface on the L3 switch or router can share/have the same ip address. The authentication command is entered under the interface in VRRP, same for HSRP and GLBP.

    I feel D and E are both correct because they are features unique to VRRP.

  13. CCNP
    March 5th, 2018

    question 10 and 11 are missing in questions.

  14. pattap
    March 28th, 2018

    Q3 is so vague!!

    The below is from cisco website:

    Configuring VRRP Priority
    The valid priority range for a virtual router is from 1 to 254 (1 is the lowest priority and 254 is the highest).
    The default priority value for backups is 100. For devices whose interface IP address is the same as the primary virtual IP address (the master), the default value is 255.

    C. So according to the above,IP address of the int van 1 is the same as the primary virtual IP of vrrp group 1 making it the master of the party

    B. addresses are different making it backup, default is 100 – cisco doesn’t like us to repeat default config?

    A. again this is back up, default is 100 but we are trying to achieve some shenanigans here
    and decided to have it as 200

    I would probably go for A but each of the examples is valid, cisco really needs to stop this kind of questions, this is not even about knowing stuff but trying to figure what the hell they want

  15. pattap
    March 28th, 2018


    A. VRRP uses multicast address
    C. VRRP uses protocol identifier 112

    no need to explain this one

  16. lalaversa
    May 6th, 2018

    People, like Lucky comment, priority 100 is default parameter and it will be not visible in configuration, then correct answer is A (the Q is “which statement is TRUE”)

  17. lalaversa
    May 6th, 2018

    It’s impossible answer correctly without a draw of PCs connections correlate to the exhibit. The only correct answer reading the question is surely “D”…. the other answer live in fantasy world…

  18. lalaversa
    May 6th, 2018

    Answer wrong !!! Correct are B D E.
    The configuration VRRP priority of the interface is 105, correct D (track eventually decrement 15, then it’s not to be 120 like on answer A… ask actually priority doesn’t that will be).
    In exibit track object1 is in state down then tracking is starting and decrement priority to 95 asap… also B is correct togheter answer E (if another router has priority default at least).
    Pitfall Q&A because B is correct only if E is correct.

  19. lalaversa
    May 6th, 2018

    D and E are correct answers but also A is not wrong.
    This Q&A will have two or three answers ? If it will be two, E is sure…. but for A or D the choise is very hard…
    Usually black hole to make the answer wrong.

  20. lalaversa
    May 6th, 2018

    too vague, let’s trust the answer….

  21. lalaversa
    May 6th, 2018

    like Q10, too vague, let’s trust the answer….

  22. Anonymous
    May 28th, 2018

    Today I passed my exam, I was asked the questions q3 q6 q12 q13

  23. kingkong111
    May 30th, 2018

    New 100% Real CCNP Exam Questions


  24. terrance
    May 31st, 2018

    can someone explain Q5? I don’t understand it

  25. terrance
    May 31st, 2018

    Q7 also makes no sense?? how is the priority 120? it says 105, and if it is decremented by 15 it would be 90??

  26. Raito
    June 11th, 2018


    Priority is 95 AFTER it has been decremented by 15, because you can see that the interface which is tracked is already in state DOWN. So 95 + 15 = 120, which must have been manually configured.

    But I do not get why the master router cannot be preempted if some other router has a higher priority?

  27. nataliya
    June 22nd, 2018

    impossible to answer wihtout PC’s configuration, but it is missing

  28. bloke
    June 24th, 2018

    A, C, E is also correct. Priority 105 is after decrement from 120 tested on real equipment

  29. Anonymous
    July 21st, 2018

    @Raito, 95 + 15 = 120? Oh dear…

  30. BoxingSurfer
    August 17th, 2018

    C, D, and E are all valid VRRP configurations
    But C is the ‘most’ correct.
    The reason is that ‘preempt’ is enabled by default on VRRP (its off by default in HSRP)
    So with answers D and E, the presence of this command makes them less correct than C

  31. Terranova
    September 17th, 2018

    Hi 9tut, regarding question 9 in the VRRP quizes it says the right answer is “the priority of the interface is 120” but in the output it says 105. Can you check on that and let me know please. Thank ou

  32. Dany1
    September 24th, 2018

    Regarding Q9 the 9tut answers are correct. The priority of interface is 120.
    For those who post other answers, please check on real switches or GNS3.
    When track is up (on GNS3) in “show vrrrp” output is priority 120 and when track is down, GNS3 show vrrp output is 105(cfgd 120). In question 9 that part (cfg 120) is missing to verify your knowledge

  33. Thirsty Fish
    September 27th, 2018

    Hey Dany1, thanks for replying, is that a default setting when it shows 105 on GNS3? and what do you mean cfg 120 is missing?

  34. cybernet
    October 23rd, 2018

    in Q7 why answer is A (A. The configured VRRP priority of the interface is 120)

  35. Sinan Al-Shoker
    November 18th, 2018

    Answer A is correct because skew time-> (256-configured priority)/256-configured.Answer C is correct because there was priority 105 in exhibit but there was also line: Track object 1 state “down” decrement 15 -> so the configured priority is 120.Answer E is NOT correct because even though the hello interval in the exhibit is 1s (hold interval is 3x hello + skew time (0.351)) but notice that there was hold down timer 3.351 instead of 3.531.

  36. Silas
    January 23rd, 2019

    question involving VRRP using protocol number 112 / RFC 5798 (a drag and drop)

  37. Daniel
    March 7th, 2019

    Thanks god just pass SW 300-115.
    TestKing dump is valid, labs are the same as cerprepare: LACP and HSRP. Not many new questions which similar to the dumps.
    Email me for dumps: ballking242 @ gmail dot com

  38. antran
    March 7th, 2019

    @NotMyRealName Thank you for the exhibit of Q11!

  39. Kasperl
    March 12th, 2019

    Q11 must be in routing table because R1 is the VRRP Master

  40. Muhamad
    March 15th, 2019

    Pass on 13th march. My lab is HRSP and AAA dot1q. you should study them well.
    Few new questions, dump valid. Thanks Daniel for help!

    My email: muhamadawan1988(at)gmail(dot)com

  41. Anonymous
    April 13th, 2019

    From the output we learn that the current priority of the local device is 105 (via the “Priority is 105” line). But we need to notice that the tracking state is “Down” and the decrement is 15 (via the next line “Track object 1 state Down decrement 15”) so 105 is the priority after being deducted. Therefore the configured VRRP priority should be 105 + 15 = 120.

    Can anyone explaint to me please why is added and not subtracted if is a decrease?

  42. soho
    May 14th, 2019


    Note the line:
    Track object 1 state Down decrement 15

    The keyword DOWN means that the interface being tracked is DOWN currently.
    Remember this is a show output and the date provided is live data not running-config.
    Because the object is CURRENTLY “DOWN” the the decrement of 15 is now in place.
    So currently the decrement of 15 has been applied.
    This is why the output shows “Priority 105” because it is currently decremented by 15.

    If the line was:
    Track object 1 state Up decrement 15

    The interface is CURRENTLY showing as up.
    In turn the Priority line would say Priority 120.

  43. Q13
    May 29th, 2019

    I know it is nit-picky, but isn’t preemption enabled by default on vrrp?

    Also, any post that starts with “Thanks God” (They’re all over this website), don’t waste your time.

  44. Q7 answers are OK
    July 20th, 2019

    Q7 correct answers are OK. ACE.

    The same example on cisco site.

    P.S. The funny thing is that virtual MAC address in Q7 has HSRP format not VRRP but it is just cosmetic issue in case of this question :)

  45. Dmytro
    October 10th, 2019

    About Q9, I think that variants D and E are really correct.
    Variant A is not so correct because they might be mean that you can use in VRRP authentication key chain, in that case you will config not all commands in interface configuration mode. Maybe that is why variant A is not completely right… but it is only my opinion.

  46. Habib Ullah
    December 3rd, 2019

    PC1 and PC3 using and PC2 and PC4 using gateway

  47. Habib Ullah
    December 3rd, 2019

    PC1 and PC3 using and PC2 and PC4 using gateway

  1. No trackbacks yet.