Tunnel Concentrator leverages different VRRP configurations for different purposes:
Management Interface access - User Interface access for activation
Data Plane High-Availability
These functions are distinct, and should not be confused. Unique IP addresses and Router IDs are required for each function.
ExtremeCloud Edge - Self Orchestrated applications such as Tunnel Concentrator can take advantage of the native support of VRRP in the underlying Universal Compute Platform host (UCP) in order to create interface aliases. Aliases can then be bound to the application to provide a direct linkage between the alias-IP presentation and the application instance to which it is intended to map.
One key aspect when creating VRRP based IP aliases, is to ensure that the VRRP address does not overlap any other address that is allocated to the network segment. Otherwise, you end up creating a VRRP Group as an active/backup configuration, which is not what's intended in terms of using the IPs as direct 'pointers' into the address of specific application instances.
The following table summarizes the VRRP configurations that apply to Tunnel Concentrator and the requirements.
| VRRP Configured on... | Configuration Requirements |
|---|---|
| Data port of Universal Compute Platform host | Required configuration for all Tunnel Concentrator instances, irrespective of which management application you choose, or whether HA is deployed. The VRRP address provides access to the user interface, which is required for initial activation. See Install ExtremeCloud Edge-Self-Orchestration Deployment. |
| Tunnel Concentrator Service of ExtremeCloud IQ | Required only if deploying redundant HA pairs when ExtremeCloud IQ is the management application. The VRRP address provides a single address that can be used to forward traffic to whichever Tunnel Concentrator instance is active. See Redundancy with ExtremeCloud IQ. |

Note
There is also a VRRP configuration for the ICC1 interface that appears when you run the Basic Configuration wizard on Universal Compute Platform. This VRRP setting should be left disabled.