HSRP on SVI. How is incoming traffic affected?

Let's say I have two distribution routers with SVI's using HSRP. Router 5 is the active router for the SVI for VLAN 5 and Router 6 is in standby (lower priority is set). Would incoming traffic be balanced between the two routers or all go through Router 5? I heard somewhere that only outbound traffic will go through the active router but with incoming traffic it could go to either SVI on the routers. Why is this so? This is the typical hierarchical model, core -> dist -> access.

Hi,
When you deploy HSRP your PCs etc normally use the
the virtual IP adress as their default gateway.
The virtual IP address is handeled by the ACTIVE router
in your case Router 5.
Router 6 will only become ACTIVE in the event of router 5 failing.
If you want to look at load balancing you could use GLBP as you
first hop router method.
Here are a couuple of link to look at.
http://www.cisco.com/c/en/us/support/docs/ip/hot-standby-router-protocol-hsrp/10583-62.html#topic1
http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipapp_fhrp/configuration/12-4/fhp-12-4-book.html
Regards
Alex

Similar Messages

WTR54GS Incoming Traffic

I just got a WTR54GS. I am pretty happy with it. Nice little travel device. Will be very handy in hotels on the road. My goal is to firewall off my private network with the WTR54GS. This seems to work fine, except that if I look at the log I still see incoming traffic that is marked "allowed". I am not sure why that would be. I want to define that all ports on the device are closed to incoming traffic, or at least be able to define what that incoming traffic is and that it is "ok". Does anyone know how to block all incoming traffic, or if it is necessary, how I can figure out what this traffic is for? Here is a snip from the log of the device; [2000-01-01 00:38:30], From:[209.18.38.8] to port: [1880], [Allowed] [2000-01-01 00:38:03], From:[72.14.207.99] to port: [1983], [Allowed] [2000-01-01 00:38:03], From:[151.109.24.90] to port: [1404], [Allowed] [2000-01-01 00:38:03], From:[66.150.96.119] to port: [1982], [Allowed] [2000-01-01 00:38:03], From:[151.109.24.90] to port: [1403], [Allowed] [2000-01-01 00:36:50], From:[151.109.24.90] to port: [1025], [Allowed] [2000-01-01 00:36:41], From:[208.74.204.125] to port: [1979], [Allowed] [2000-01-01 00:36:40], From:[208.74.204.125] to port: [1978], [Allowed] [2000-01-01 00:36:40], From:[208.74.204.125] to port: [1977], [Allowed] [2000-01-01 00:36:30], From:[209.18.38.32] to port: [1849], [Allowed] [2000-01-01 00:36:20], From:[208.74.204.125] to port: [1976], [Allowed] [2000-01-01 00:36:19], From:[208.74.204.125] to port: [1975], [Allowed] [2000-01-01 00:36:19], From:[208.74.204.125] to port: [1974], [Allowed] [2000-01-01 00:36:19], From:[208.74.204.125] to port: [1972], [Allowed] [2000-01-01 00:36:19], From:[208.74.204.125] to port: [1973], [Allowed] [2000-01-01 00:36:19], From:[208.74.204.125] to port: [1971], [Allowed] [2000-01-01 00:36:19], From:[208.74.204.125] to port: [1970], [Allowed] [2000-01-01 00:36:19], From:[208.74.204.125] to port: [1969], [Allowed] [2000-01-01 00:36:19], From:[208.74.204.125] to port: [1968], [Allowed] [2000-01-01 00:36:19], From:[208.74.204.125] to port: [1967], [Allowed] [2000-01-01 00:36:19], From:[208.74.204.125] to port: [1966], [Allowed] [2000-01-01 00:36:19], From:[216.227.223.44] to port: [1965], [Allowed] [2000-01-01 00:36:19], From:[208.74.204.125] to port: [1964], [Allowed] [2000-01-01 00:36:19], From:[208.74.204.125] to port: [1963], [Allowed] [2000-01-01 00:36:18], From:[208.74.204.125] to port: [1962], [Allowed] [2000-01-01 00:36:08], From:[208.74.204.125] to port: [1961], [Allowed] [2000-01-01 00:36:08], From:[208.74.204.125] to port: [1960], [Allowed] [2000-01-01 00:36:08], From:[208.74.204.125] to port: [1959], [Allowed] [2000-01-01 00:36:08], From:[208.74.204.125] to port: [1958], [Allowed] [2000-01-01 00:36:08], From:[208.74.204.125] to port: [1957], [Allowed] [2000-01-01 00:36:08], From:[208.74.204.125] to port: [1956], [Allowed] [2000-01-01 00:36:08], From:[208.74.204.125] to port: [1955], [Allowed] [2000-01-01 00:36:07], From:[208.74.204.125] to port: [1954], [Allowed] [2000-01-01 00:36:07], From:[208.74.204.125] to port: [1953], [Allowed] [2000-01-01 00:36:07], From:[208.74.204.125] to port: [1952], [Allowed] [2000-01-01 00:36:05], From:[208.74.204.125] to port: [1951], [Allowed] [2000-01-01 00:36:04], From:[208.74.204.125] to port: [1950], [Allowed] [2000-01-01 00:36:04], From:[208.74.204.125] to port: [1949], [Allowed] [2000-01-01 00:36:04], From:[208.74.204.125] to port: [1948], [Allowed] [2000-01-01 00:36:04], From:[208.74.204.125] to port: [1947], [Allowed] [2000-01-01 00:36:04], From:[66.161.11.90] to port: [1867], [Allowed] [2000-01-01 00:36:04], From:[208.74.204.125] to port: [1946], [Allowed] [2000-01-01 00:36:04], From:[208.74.204.125] to port: [1945], [Allowed] [2000-01-01 00:36:03], From:[208.74.204.125] to port: [1944], [Allowed] [2000-01-01 00:36:03], From:[208.74.204.125] to port: [1943], [Allowed] [2000-01-01 00:36:03], From:[208.74.204.125] to port: [1942], [Allowed] [2000-01-01 00:36:03], From:[208.74.204.125] to port: [1941], [Allowed] [2000-01-01 00:36:03], From:[208.74.204.125] to port: [1940], [Allowed] [2000-01-01 00:36:03], From:[208.74.204.125] to port: [1939], [Allowed] [2000-01-01 00:36:03], From:[208.74.204.125] to port: [1938], [Allowed] [2000-01-01 00:36:02], From:[208.74.204.125] to port: [1937], [Allowed] [2000-01-01 00:36:02], From:[208.74.204.125] to port: [1936], [Allowed] [2000-01-01 00:36:01], From:[208.74.204.125] to port: [1935], [Allowed] [2000-01-01 00:35:45], From:[208.74.204.125] to port: [1933], [Allowed] [2000-01-01 00:35:44], From:[208.74.204.125] to port: [1932], [Allowed] [2000-01-01 00:35:43], From:[64.154.82.6] to port: [1883], [Allowed] [2000-01-01 00:35:32], From:[208.74.204.125] to port: [1931], [Allowed] [2000-01-01 00:35:28], From:[208.74.204.125] to port: [1930], [Allowed] [2000-01-01 00:35:28], From:[208.74.204.125] to port: [1930], [Allowed] [2000-01-01 00:35:12], From:[208.74.204.125] to port: [1929], [Allowed] [2000-01-01 00:35:12], From:[208.74.204.125] to port: [1928], [Allowed] [2000-01-01 00:35:00], From:[208.74.204.125] to port: [1927], [Allowed] [2000-01-01 00:35:00], From:[208.74.204.125] to port: [1926], [Allowed] [2000-01-01 00:35:00], From:[208.74.204.125] to port: [1925], [Allowed] [2000-01-01 00:35:00], From:[208.74.204.125] to port: [1924], [Allowed] [2000-01-01 00:34:59], From:[208.74.204.125] to port: [1923], [Allowed] [2000-01-01 00:34:59], From:[208.74.204.125] to port: [1922], [Allowed] [2000-01-01 00:34:59], From:[208.74.204.125] to port: [1921], [Allowed] [2000-01-01 00:34:59], From:[208.74.204.125] to port: [1920], [Allowed] [2000-01-01 00:34:59], From:[208.74.204.125] to port: [1919], [Allowed] [2000-01-01 00:34:59], From:[208.74.204.125] to port: [1918], [Allowed] [2000-01-01 00:34:59], From:[208.74.204.125] to port: [1917], [Allowed] [2000-01-01 00:34:59], From:[208.74.204.125] to port: [1916], [Allowed] [2000-01-01 00:34:59], From:[208.74.204.125] to port: [1915], [Allowed] [2000-01-01 00:34:59], From:[208.74.204.125] to port: [1914], [Allowed] [2000-01-01 00:34:59], From:[208.74.204.125] to port: [1913], [Allowed] [2000-01-01 00:34:58], From:[208.74.204.125] to port: [1912], [Allowed] [2000-01-01 00:34:58], From:[208.74.204.125] to port: [1911], [Allowed] [2000-01-01 00:34:57], From:[208.74.204.125] to port: [1910], [Allowed] [2000-01-01 00:34:54], From:[208.74.204.125] to port: [1908], [Allowed] [2000-01-01 00:34:53], From:[208.74.204.125] to port: [1907], [Allowed] [2000-01-01 00:34:50], From:[208.74.204.125] to port: [1906], [Allowed] [2000-01-01 00:34:50], From:[208.74.204.125] to port: [1905], [Allowed] [2000-01-01 00:34:50], From:[208.74.204.125] to port: [1904], [Allowed] [2000-01-01 00:34:50], From:[208.74.204.125] to port: [1903], [Allowed] [2000-01-01 00:34:50], From:[208.74.204.125] to port: [1902], [Allowed] [2000-01-01 00:34:50], From:[208.74.204.125] to port: [1901], [Allowed] [2000-01-01 00:34:50], From:[208.74.204.125] to port: [1900], [Allowed] [2000-01-01 00:34:50], From:[208.74.204.125] to port: [1899], [Allowed] [2000-01-01 00:34:49], From:[208.74.204.125] to port: [1898], [Allowed] [2000-01-01 00:34:49], From:[208.74.204.125] to port: [1897], [Allowed] [2000-01-01 00:34:49], From:[208.74.204.125] to port: [1896], [Allowed] [2000-01-01 00:34:49], From:[208.74.204.125] to port: [1895], [Allowed] [2000-01-01 00:34:42], From:[208.74.204.125] to port: [1894], [Allowed] [2000-01-01 00:34:42], From:[208.74.204.125] to port: [1893], [Allowed] [2000-01-01 00:34:40], From:[208.74.204.125] to port: [1892], [Allowed] [2000-01-01 00:34:14], From:[72.14.207.104] to port: [1891], [Allowed] [2000-01-01 00:33:42], From:[72.14.207.104] to port: [1889], [Allowed] [2000-01-01 00:33:32], From:[206.190.50.59] to port: [1888], [Allowed] [2000-01-01 00:33:31], From:[209.191.86.75] to port: [1887], [Allowed] Thanks for any and all info, tips, hints, and general knowledge. -- garskof

Thanks for the info. Yes, I know "what the boxes are" as in where they are on the network. What I do not know is why they are opening ports on the WTR54GS. I guess I should have been more specific. I do not have wireless enabled. I have a wired network in, and a wired network out to my laptop. I want to be able to protect my "private" intranet created by the WTR54GS by closing all ports, but it appears the device can not do that, which I find surprising. What am I missing? Why is this device accepting this traffic? What is it doing with the traffic? What is the traffic, what is its purpose? These are the questions I am trying to get my hands around. Any ideas anyone? Thanks -- garskof

RV-082 Router Incoming traffic allow

We are using Cisco Router RV-082
We want to allow incoming traffic ONLY to our remote office on specific port. Is it possible to configure our router to allow only traffic from specific IP address?
Please help me
Thanks in advance!

Hello,
To accomplish what you are trying to do, you will need to create two inbound rules. One denying all traffic from all sources and another one allowing all traffic from the WAN port with the source IP as the IP you want to allow.
Here is a document explaining how to create the access rules.
http://sbkb.cisco.com/CiscoSB/ukp.aspx?vw=1&docid=214b9e138807474cba39cda82212f509_Adding_Deleting_an_IPv4_access_Rule.xml&pid=2&respid=0&snid=4&dispid=0&cpage=search
I hope this helps.

How to route traffic across subnets when one NIC is a hyper-V virtual switch?

Having a bit of a problem with a hyper-V environment which does not seem to route network traffic on two different subnets between each other.
If it were a purely physical server with two NICs and a gateway set traffic would automatically be forwarded between the two different subnets.
However when one of those NICs is a hyper-V virtual switch this simple routing no-longer seems to work and no traffic gets forwarded between subnets?
Situation is:
Hyper-V server with two NICs
NIC 1 = 192.168.0/24 - main Internal company network.
NIC 2 (hyper-V virtual switch.) = 192.168.1/24 - connects to ADSL internet router
Virtualized Domain Controller.
One or two virtualiszed NICs as necessary
How then does traffic get routed between these two subnets? If RRAS has to be configured to do this where is the best place to do it, on the hyper-V host or on the virtualized domain controller?
Thanks,

Hi ,
You can create an internal virtual switch and configure an IP for it (I assume it is 192.168.1.2/24) .
After you enable RRAS in hyper-v host there will be two gateways for different subnets .
" NIC 2 (hyper-V virtual switch.) = 192.168.1/24 - connects to ADSL internet router "
The problem is here ,if these VMs need to access internet .
So , these VMs can not configure their gateway same as the IP of internal virtual switch , you may set VM's gateway as the ADSL internet router's IP meanwhile add a static route entry for every VM .
Please refer to the Syntax :
route add -p 192.168.0.0 mask 255.255.255.0 192.168.1.2
Hope this helps
Best Regards
Elton Ji
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

How does condition category affect the price procedure

Hello Gurus,
     there is a case as following:
if the condition type in the pricing analysis says in a billing document that the condition is found and set, and one is using the condition requirement number 024 (which only determines the price in billing document) yet still has to do new pricing in order to obtain the condition record, Should the condition category be blank, the system would propose the message condition is found and set but does not provide an actual condition record.
   the fault would be that the condition category on the condition type should be equal to L.
   so my question is " how does condition category affect the price procedure" ? thanks very much!

Hi Zhang,
-->Condition category is a classification of conditions according to predefined criteria.
-->These categories include packaging costs, delivery costs, output taxes and discounts.
-->The classification of conditions by condition categories can be used for analysis.
I hope it will clear for you
Regards,
Murali.

How to print traffic lights in ALV reports

hi how to print traffic lights on selection screen in alv reports

HI,
check below code
TYPE-POOLS : icon.
types: BEGIN OF ty_display,
        status     TYPE icon-id,
        bukrs      TYPE bseg-bukrs,
        gjahr      TYPE bseg-gjahr,
        monat      TYPE monat,
        work_order TYPE z_work_order,
        glaccount TYPE saknr,
        message    TYPE string,
      END OF ty_display.
data : it_display     TYPE TABLE OF ty_display,
         wa_display TYPE ty_display.
WRITE icon_led_green AS ICON TO wa_display-status.
        wa_display-gjahr = p_year.
        wa_display-bukrs = p_cc.
        wa_display-monat = p_period.
        wa_display-work_order = v_aufnr.
        wa_display-glaccount = wa_bseg-hkont.
    APPEND wa_display TO it_display.
WRITE icon_led_red AS ICON TO wa_display-status.
          wa_display-gjahr      = p_year.
          wa_display-bukrs      = p_cc.
          wa_display-monat      = p_period.
          wa_display-work_order = v_aufnr.
          wa_display-glaccount = wa_bseg-hkont.
          wa_display-message    = text-010.
          APPEND wa_display TO it_display.
change the icon color based on your requirement and append it to the internal table which you have to display in ALV.
reward points if it is helpful.
Regards,
Srilatha

How to use traffic lights concept in alv in webdynpro abap

Hai ,
How to use traffic lights concept for alv in webdynpro abap. If possible give me some code.

Hi Ravi,
You can create ICON to get traffic light.
Go through this step by step.. in this example
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/1190424a-0801-0010-84b5-ef03fd2d33d9?quicklink=index&overridelayout=true
Please go through this...
Re: Display ICON in the ALV table column
Re: Image in ALV
cheers,
Kris.

How Receiving Incoming Email works?

Hi I would like to know how receiving incoming email works? SharePoint supports incoming emails for library/calendar
list/discussion
board/announcements
list I did whole setup to receive incoming emails but what i am not still clear is , do I need to request separate email ID in AD for each type of list/library/discussion board?? I learnt we need to specify drop folder name while SMTP
configuration from there all .EML msgs will be routed to respective library/list, but my question is how that get routed. I know there is "SP incoming receiving emil" timer job which runs every minute or so and picksup .eml msg but how does
it route to respective library/list. Will it be possible to have single incoming receiving emaild ID for all resources OR do I need to have one-one mapping of email ID for each library/list. Please let me know if you aware or any article or guide.
In summary , For example if i have 10 lists to enable to receive incoming emails then do i need to have 10 email IDs created in AD&Exchange or can it be done using single emailID in AD but manipulate it either domain level or exchange level.
Perhaps I could think some segratation based on some metadata but user may not fallow the same while they send email. ( user could send mails with subject , w/o subject...otherwise i was thinking some email template as alternative but the solution i am more
interested in , will it be possible to segrate emails based exchange settings or AD settings while having single email ID for all .

Hello,
You don't need to create emails for each lists . You have required only one email id and by using that you can configure Incoming email setting in Sharepoint.
For the same you can follow below steps .
1) Open Sharepoint Central Administration.
2) Navigate to to System Sttings ->Configure incoming e-mail settings.
and do the below settings
Enable sites on this server to receive e-mail? -> Yes
Settings mode: -> Automatic
Use the SharePoint Directory Management Service to create distribution groups and contacts? -> No
E-mail server display address: -> youremailserver.domain.com, this is the default
Safe E-Mail Servers -> Accept mail from all e-mail servers
I hope this will help you to resolve your problem .
Best Regards Kuldeep Verma
Please remember to click "Mark As Answer" if a post solves your problem or "Vote As Helpful" if it was useful.

How this retirement will affect Shared review users?

How this retirement will affect Shared review users?
For example, when Acrobat servers have problem and shared review users cannot download files from email invitation, Workspaces is where the users can log in and download the files.
If without Workspaces, is there another way for shared review users to download the files?

Hi there,
Thanks for your question. Workspaces will no longer be available as a distribution option for PDF files in a Shared Review (although you can still initiate Shared Reviews using an internal server, such as a SharePoint workspace, a network folder, or a web server folder).
While Workspaces will no longer be available for posting those PDF files, Acrobat.com (http://files.acrobat.com) is an excellent alternative for uploading your files. You can make your uploaded files public, and share the file's unique URL with reviewers. For more information about uploading and sharing files with Acrobat.com, please see: http://helpx.adobe.com/acrobat-com/help/files.html
Please let us know if you need any clarification or further assistance.
Best regards,
Rebecca

How will mountain lion affect my office for mac 201111

How will mountain Lion affect my office for Mac 2011

I have been using Office for Mac 2011 for almost a year now and the issue started immediately after doing the upgrade.
When I start Outlook I can see that it takes 1 minute plus to set up the identity.
When it finally runs it is very slow and no fun to use. It seems that Outlook is using very few resources when I look at the activity monitor.
Overall it seems that my IMac has become slower than before upgrading to 10.8.
I do not have support with MSFT anymore and I do hope that somebody does report this issue to MSFT.
To me it seems to be very clear a result of the upgrade.
Hope that helps.

How to manage traffic of livestreams or youtube

Hi all,
at the moment we are discussing about how to control or limit traffic used by livestreams. At the moment there are many web pages with livestreams of the olympic winter games and customers facing very high traffic by hd videostreams.
So we are now thinking about managing this videostreams by implementing some policies on the proxies.
And we alternatively think about how to restrict traffic of videostreams or youtube video using asa.
Did not find anything in the knowledgebase. Do you have any hints how to manage this?
thank you in advance and best regards
Vincent

Just go trough Manage application and Modify application and use reindex and full process.
This normally should fix your issue.
Regards
Sorin Radulescu

How many table are affected when sales order creation(O2C)

Hi all,
HOw many table are affected when sales order creation, can any one please help ,and please give me a description indepth please please. I know some of the table affected
Thanks&Regrads,
Surya

Hi Kantur Shekar madhuri,
Would you confirm the whether in your schedule line category is activated for "Product Allocation" or not.
if not please activate and re run your scenario.
Regards
Arun

How to snoop traffic on PGW 2200 with Wireshark

How to snoop traffic between PGW 2200 & MGX 8880 with Wireshark?

I hope to have understood correctly your question.
1) enable the snoop on PGW using ./snoop_scrip in /opt/snoop/ path
2) collect the trace of the call and so stop the snoop usinf CTRL C
3) open wireshark
4) drag and drop the files generated from the snoop in wireshark
5) wireshark will ask to merge the file
P.S. PGW uses RUDP to communicate with the media gateway. Set the wireshark RUDP port (in Edit - Preferences - Protocols menu) according to PGW configuration.
Regards.

Block all incoming traffic and Active FTP

Will setting the firewall to Block all incoming traffic break Active FTP Connections?
The firewall will normally dynamically create exceptions for the Connection using the Application Layer Gateway, but will the profile override these?

Hi TribleTrouble,
Do you have any issue about FTP active mode?
If the clients are part of your domain, push the FTP firewall rules via GPO to your clients allowing FTP inbound sockets
netsh advfirewall firewall add rule name="File Transfer Program" protocol=TCP profile=domain Program=C:\Windows\System32\ftp.exe dir=in action=allow
netsh advfirewall firewall add rule name="File Transfer Program" protocol=UDP profile=domain Program=C:\Windows\System32\ftp.exe dir=in action=allow
For Windows 7, the entire networking stack was rewritten and several security measures were taken to further secure Windows.
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Allow incoming traffic through iTunes?

All of a sudden every time I open iTunes it asks if incoming traffic should be allowed. I checked my firewall settings and it is listed under allowed applications. Am I missing something? This start happening about a week ago.
Thanks.

When you installed 7.6 this started happening. The fix that I have found thanks to these forums, was to download itunes from the download site, not the software update. Once I reinstalled it stopped asking for deny/allow.

HSRP on SVI. How is incoming traffic affected?

Similar Messages

Maybe you are looking for