HSRP preempt
Hi,
I would need some advise to clarify on the following HSRP preempt concept. Please let me know if the following is correct.
1) both active and standby routers NOT configured with HSRP preempt. When active router goes down, standby will NOT take over due to NO HSRP preempt configured.
2) both active and standby routers configured with HSRP preempt. When active router goes down, standby will take over as the active. When the active goes down again, the standby will take over as active. However, there will be a short downtime during the HSRP transition states. How long is the transition state?
3) only standby router configured with HSRP preempt. When active router goes down, standby will take over to become the active. However, when the active router goes down again, the standby router will NOT take over as the active due to NO HSRP preempt configured.
Thanks
Christina
Christina
1) Not correct. If both routers do not include preempt and the active router goes down then the standby router WILL take over as the active. Preempt is not an issue here. If the currently active router goes down and if there is a standby then the standby will take over as active. In a failure situation the standby will take over without consideration of preempt.
2) I am not entirely clear what you are describing when you say the active goes down and then when the active goes down again. So let me re-phrase it in terms of rtrA and rtrB. Assume that rtrA has a higher priority and becomes active and rtrB is standby. Then rtrA goes down. rtrB then becomes active. At that point I do not follow your scenario. I am not sure whether you assume that rtrA comes back into service or if you assume that there is rtrC which became standby.
If rtrA comes into service again and it has higher priority and it has preempt then rtrA becomes active and rtrB returns to standby. This is because preempt on rtrA allows it to displace rtrB. There is some very brief period of transition. I am not sure how long but I know it is quite short.
If rtrB became active and there is rtrC who becomes standby and then rtrB fails then rtrC becomes active and there is no period of interruption.
3)I have the same problem with this description. You describe active and standby, you assume that the active fails, and then you assume that the active fails again without specifying whether the original active router came back in service again.
So let me go back to my example of rtrA and rtrB. Assume that rtrA has higher priority and becomes active and does not have preempt. Assume that rtrB has lower priority and does have preempt. Then rtrA goes down. rtrB becomes active. (Note that this really has nothing to do with preempt - rtrB takes over because the active failed.) If rtrA comes into service then it is in the HSRP group and it has higher priority but it does not become active because it does not have preempt.
Preempt really has to do with enabling a router that has higher priority but is not active to displace the current active router. Preempt is a factor when some router attempts to displace the current active router. It is not a factor when the active router fails.
Let me describe another example. Assume rtrA has priority of 105 and rtrB has priority of 100. So rtrA becomes the active router. Then assume that rtrA is tracking interface serial0/0 and the interface goes down. Now rtrA has priority 95 and rtrB has priority 100. Will rtrB become active? With preempt configured it will and without prempt configured it will not.
HTH
Rick
Similar Messages
-
I am looking for a way to efficiently move from HSRP to GLBP.
I want to move from using HSRP to GLBP and encountering issues with making it a smooth transition. I am testing my plans using GNS3
Our two external production routers are configured to use HSRP and the current traffic demands are taking a toll on the primary router. The primary HSRP router's CPU is running above 70% while the standby router is hovering in the 20's. The main reason is the firewalls are running High Availability Load Sharing (Sidewinders) so each firewall is able to transmit / receive data. Our routers are setup in a BGP multihome configuration with the ISP. The upstream routers are associated with the same AS. Each side has maximum-path 2 enabled within the BGP process. The two firewalls associate a multicast mac address with a vIP. Each router has a static arp entry for the firewall vIP multicast address allowing them to send traffic they receive from the world to the firewall pair. The firewalls then decide if they will accept the traffic or defer to the other. Unfortunately I cannot upgrade the NPE's on the external routers (NPE-400) so the next best thing is to try and distribute the load coming from the two firewalls. I hope to get both routers running in the mid 50’s which aren’t great but it's better than the current situation. I've been told money is coming but you know how that goes.
Here is my glbp scheme I want to implement
R1 (This will be my AVG)
track 20 interface g2/0 line-protocol (Gi2/0 is the external interface)
interface gi0/0 (Serves as the gateway interface for the Firewalls)
glbp 10 ip 10.1.1.1 (fictitious address)
glbp 10 timers 5 15
glbp 10 weighting 100 lower 90 upper 95
glbp 10 load-balancing host-dependent
glbp 10 authentication md5 key-string #######
glbp 10 weighting track 20 decrement 20
glbp 10 forwarder preempt delay minimum 5
R2
track 20 interface g2/0 line-protocol (Gi2/0 is the external interface)
interface gi0/0 (Serves as the gateway interface for the Firewalls)
glbp 10 ip 10.1.1.1 (fictitious address)
glbp 10 timers 5 15
glbp 10 priority 95 (the interface physical ip address on this router is greater than the one on R1)
glbp 10 weighting 100 lower 90 upper 95
glbp 10 load-balancing host-dependent
glbp 10 authentication md5 key-string #######
glbp 10 weighting track 20 decrement 20
glbp 10 forwarder preempt delay minimum 5
Initially I thought this would be simple to transition from HSRP to GLBP. I would remove the standby ip ip-address command from the interface and replace it with the glbp ip ip-address command. The interface would already be configured with the other glbp commands prior to making the change. I thought this method would also aid in the event I had to roll back to HSRP due to something I didn't account for in testing.
When I attempt to execute the above command sequence, the router reports the virtual IP address is being used by another application on the interface. I tried shutting down the interface and rerun the sequence with no success. To get around this obstacle, I remove all standby commands from the interface by entering either no standby 1 or no standby.
So here is what I am thinking. On the day of moving from HSRP to GLBP, I will have a console connection to both routers.
On R2
shutdown interface g0/0 since this router is designated as the HSRP standby router and paste the following commands into the router
track 20 interface g2/0 line-protocol
interface gi0/0
no standby 1
glbp 10 ip ip-address
glbp 10 timers 5 15
glbp 10 priority 95
glbp 10 weighting 100 lower 90 upper 95
glbp 10 load-balancing host-dependent
glbp 10 authentication md5 key-string #######
glbp 10 weighting track 20 decrement 20
glbp 10 forwarder preempt delay minimum 5
While this is occurring, on router #1 which is the primary hsrp router, paste the following commands in
track 20 interface GigabitEthernet2/0 line-protocol
interface GigabitEthernet0/0
no standby 1
glbp 10 ip ip-adddress
glbp 10 timers 5 15
glbp 10 weighting 100 lower 90 upper 95
glbp 10 load-balancing host-dependent
glbp 10 authentication md5 key-string ######
glbp 10 weighting track 20 decrement 20
glbp 10 forwarder preempt delay minimum 5
Once the commands are pasted into Router #1, enable the interface on Router #2 and monitor GLBP with the following debug commands enabled on both routers.
debug glbp events
debug glbp errors
My test runs using GNS seem to run well. I know I am going to interrupt traffic and I scheduled network downtime to perform the change. I am anticipating total downtime to be less than 5 minutes.
Does this approach sound logical or is there a better method to transition from HSRP to GLBP?
thanks in advanced.p.lagatta wrote:Jon, Thanks for the reply. The Siderwinder Firewalls associate a Multicast MAC address with the vIP. That's the reason for the static ARP entry in each router. Since our Layer II switches located between the firewalls and routers do not register the MAC with a specific port, both firewalls receive the traffic. Once the traffic reaches the firewalls, they pass information across a heartbeat interface and the selection process is based on odd / even ports. Receive traffic is already working in this configuration. Both our external routers are peered with two EBGP routers located in the same AS. The GLBP implementation will allow us to load balance the traffic each firewall is sending to the GW address.
Perhaps i'm misunderstaning.
If there is one mac-address then GLBP will assign that mac-address to one of the routers and it will keep that router for forwarding the traffic with the same mac-address. So the traffic will always be forwarded by the same router. GLBP works by assigning different source mac-addresses to different routers within the same group but it sounds like the source mac-address is always the same from the firewalls.
Jon -
Best practice for High availability design, HSRP
Hi,
I am planning to create High Availability for LAN to WAN connectivity.
But I want to know your opinion about the best way how to do this. I googled for a solution/best way how to do this, but I didn't found in my opinion right answer.
The situation:
I have 2 3945E Routers and 2 3560 switches. The design that I am planning to implement is below.
The main goal is to have redundant connection, whatever one of the devices will fail. For example, if the R1 will fail, R2 should become active, if the SW1 will fail, the SW2 will take care about reachability and vice versa. The router 1 should be preferred always, if the link to ISP isn't down, because of greater bandwidth. So why am I drown 2 connections to 2 separate switches. If the SW1 will fail, I will still have a connection to WAN using R1 router.
The Router interface should be configured with sub interfaces (preferred over secondary IP address of interface), because more than 10 subnets will be assigned to the LAN segment. The routers have 4 Gi ports.
HSRP must be enabled on LAN side, because PC's on LAN must have redundant def. getaway.
So, the question is - what is the best and preferred way to do this?
In my opinion, I should use BVI and combine R1 routers 2 interfaces in to logical one and do the same for the R2.
Next, turn the router in to L3 switch using IRB and then configure HSRP.
What would be your preferred way to do this?Hi Audrius,
I would suggest you to go with HSRP. GLBP you will use where you want load balance.
I think the connectivity between your Routers (3945) and switches (3560) is gigabit connection which is high speed. So keep one physical link from your switches to each router and do HSRP on those router physical interfaces.
In this way you will have high availability like if R1 fails then R2 will take over.
Regarding the config see the below which I have for one of my Customer DC.
ACTIVE:
track 1 interface GigabitEthernet0/0 line-protocol
track 2 interface GigabitEthernet0/0 line-protocol
interface GigabitEthernet0/1
ip address 10.10.10.12 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex full
speed 100
standby use-bia scope interface
standby 0 ip 10.10.10.10
standby 0 priority 110
standby 0 preempt
standby 0 authentication peter2mo
standby 0 track 1 decrement 30
standby 0 track 2 decrement 30
STANDBY:
track 1 interface GigabitEthernet0/0 line-protocol
interface GigabitEthernet0/1
ip address 10.10.10.11 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex full
speed 100
standby use-bia scope interface
standby 0 ip 10.10.10.10
standby 0 priority 90
standby 0 authentication peter2mo
standby 0 track 1 decrement 30
Please rate the helpfull posts.
Regards,
Naidu. -
Hsrp problem....hsrp address not responding
Hi
I'm hoping I can get some opinions on this. I have 2 7200 routers with 2 gig interfaces each. Each gig interface is connected to 2 stacked 3750 switches. I have sub interfaces configured on both the gig interfaces so they are essentially dot1q to the 3750 switches. I have specified a hsrp group for each subinterface on the 7200s. My problem is that when I have 1 of the 7200 routers acting as hsrp active for some groups and the other 7200 acting as hsrp active for other groups hosts lose connectivity to their hsrp address for one of the routers. i.e no response to pings yet correct mac address in arp table.All works well when I make either one of the routers the hsrp active for all of the groups. Any ideas?
r1----3750----hosts
\/ | <--stack
/\ |
r2----3750----hostsconfig for one router is below.The other router is the same apart from the track command and the priority is 155. The 2 3750s have the vlans configured and dot1q trunks to both of the routers 2 gig ports.
the show standby at the moment shows the correct info ie the correct router is active for all the groups...
thanks
interface GigabitEthernet0/1
description *** Primary link to Switch 1 ***
no ip address
no ip proxy-arp
duplex auto
speed auto
media-type sfp
negotiation auto
interface GigabitEthernet0/1.10
encapsulation dot1Q 10
ip address x.x.x.x 255.255.255.224
no ip proxy-arp
no snmp trap link-status
standby 10 ip x.x.x.x
standby 10 priority 160
standby 10 preempt delay minimum 60
standby 10 track GigabitEthernet1/0
interface GigabitEthernet0/1.30
encapsulation dot1Q 30
ip address x.x.x.x 255.255.255.192
no ip proxy-arp
no snmp trap link-status
standby 30 ip x.x.x.x
standby 30 priority 160
standby 30 preempt delay minimum 60
standby 30 track GigabitEthernet1/0
interface GigabitEthernet0/1.70
encapsulation dot1Q 70
ip address x.x.x.x 255.255.255.252
no ip proxy-arp
no snmp trap link-status
interface FastEthernet0/2
no ip address
shutdown
duplex auto
speed auto
interface GigabitEthernet0/2
description **** secondary link to switch 2 ***
no ip address
no ip proxy-arp
duplex auto
speed auto
media-type sfp
negotiation auto
interface GigabitEthernet0/2.20
encapsulation dot1Q 20
ip address x.x.x.x 255.255.255.224
no ip proxy-arp
ip ospf network broadcast
no snmp trap link-status
standby 20 ip x.x.x.x
standby 20 priority 160
standby 20 preempt delay minimum 60
standby 20 track GigabitEthernet1/0
interface GigabitEthernet0/2.40
description *** N2 Web Farm ***
encapsulation dot1Q 40
ip address x.x.x.x 255.255.255.192
no ip proxy-arp
no snmp trap link-status
standby 40 ip x.x.x.x
standby 40 priority 160
standby 40 preempt delay minimum 60
standby 40 track GigabitEthernet1/0
interface GigabitEthernet0/2.50
encapsulation dot1Q 50
ip address x.x.x.x 255.255.255.240
no ip proxy-arp
no snmp trap link-status
standby 50 ip x.x.x.x
standby 50 priority 160
standby 50 preempt delay minimum 60
standby 50 track GigabitEthernet1/0
interface GigabitEthernet0/2.80
encapsulation dot1Q 80
ip address x.x.x.x 255.255.255.252
no ip proxy-arp
ip ospf network broadcast
no snmp trap link-status -
HSRP- How to monitoring Interfaces
Hi,
I still learning and I have a few questions,
I'm trying to prepare the infrastructure:
2x Router – 2911
2x Switch – 2960G
I configured HSRP, router R1 is active and R2 is the standby.
Everything works and and when I do shoutdown interface Gi0 / 1 on router R1 HSRP runs and switches route on router R2.
The problem is when I simulate a crash on the side of the ISP and I will shutdown the interface Gi0 / 0 on Router R1
Then HSRP does not work. How do I fix this? How to monitoring the status of all Interface? Whether this is IP SLA? but I found examples showing how IP SLA switches routing on a router connected to two ISPs or can I use this with a version of the two routers? how to do it? and maybe use something else ? what I read?
R1
interface GigabitEthernet0/0
description do ISP_1
ip address XXX.XXX.XXX.XX 255.255.255.248
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
interface GigabitEthernet0/1
description do CoreSW1
ip address 192.168.1.101 255.255.255.0
ip nat inside
ip virtual-reassembly in
standby version 2
standby 1 ip 192.168.1.100
standby 1 priority 150
standby 1 preempt
duplex auto
speed auto
interface GigabitEthernet0/2
description do R2
ip address 10.0.0.1 255.255.255.252
duplex auto
speed auto
ip default-gateway XXX.XXX.XXX.XX
ip nat inside source list 1 interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 XXX.XXX.XXX.XX
ip route 192.168.1.0 255.255.255.0 GigabitEthernet0/1
R2
interface GigabitEthernet0/0
description do ISP_2
ip address YY.YY.YYY.YYY 255.255.255.252
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
interface GigabitEthernet0/1
description do CoreSW2
ip address 192.168.1.102 255.255.255.0
ip nat inside
ip virtual-reassembly in
standby version 2
standby 1 ip 192.168.1.100
standby 1 preempt
duplex auto
speed auto
interface GigabitEthernet0/2
description do R1
ip address 10.0.0.2 255.255.255.252
duplex auto
speed auto
ip default-gateway YY.YY.YYY.YYY
ip nat inside source list 1 interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 YY.YY.YYY.YYY
ip route 192.168.1.0 255.255.255.0 GigabitEthernet0/1
IP SLA example - one router
ip route 0.0.0.0 0.0.0.0 2.2.2.1 2 track 1
ip route 0.0.0.0 0.0.0.0 1.1.1.1 3 track 2
ip route 0.0.0.0 0.0.0.0 2.2.2.1 5
no ip http server
no ip http secure-server
ip sla 11
icmp-echo 2.2.2.10
frequency 10
ip sla schedule 11 life forever start-time now
ip sla 22
icmp-echo 1.1.1.10
frequency 10
ip sla schedule 22 life forever start-time now
regards
welesHi,
correct scheme:
failure of a router or connected R1 - SW1 - HSRP works,
no internet (connection - ISP_1 - R1) - HSRP did not work
regards
weles -
IOS-XRv and HSRP: Supported?
Hey gang -
I'm building a virtual lab within a KVM hypervisor, and it includes 2 XRv images tied together across a VM switch image (Arista vEOS, but that's unimportant). The L2 connectivity is clearly there between the two routers:
RP/0/0/CPU0:r2#show cdp neighbors gigabitEthernet 0/0/0/6
Fri Apr 17 10:49:07.505 UTC
Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
S - Switch, H - Host, I - IGMP, r - Repeater
Device ID Local Intrfce Holdtme Capability Platform Port ID
r1 Gi0/0/0/6 149 R IOS XRv S Gi0/0/0/6
And HSRP is able to sync up appropriately between the two of them:
RP/0/0/CPU0:r2#show hsrp br
Fri Apr 17 10:46:32.806 UTC
IPv4 Groups:
P indicates configured to preempt.
|
Interface Grp Pri P State Active addr Standby addr Group addr
Gi0/0/0/6 1 100 P Standby 172.17.0.242 local 172.17.0.241
IPv6 Groups:
However, r2 (the secondary) can't ping the HSRP IP at all. It can ping the buddy router's IP address, but not the HSRP one:
RP/0/0/CPU0:r2#ping 172.17.0.242
Fri Apr 17 10:51:30.635 UTC
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.17.0.242, timeout is 2 seconds:
Success rate is 100 percent (5/5), round-trip min/avg/max = 9/17/19 ms
RP/0/0/CPU0:r2#ping 172.17.0.241
Fri Apr 17 10:51:32.595 UTC
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.17.0.241, timeout is 2 seconds:
Success rate is 0 percent (0/5)
The primary router can ping the HSRP IP though:
RP/0/0/CPU0:r1#ping 172.17.0.241
Fri Apr 17 11:32:32.679 UTC
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.17.0.241, timeout is 2 seconds:
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
Further, the switch VM that the two XRv routers are connected to can ping both of their IPs on Gig0/0/0/6, but can't ping the HSRP IP:
#ping 172.17.0.242
PING 172.17.0.242 (172.17.0.242) 72(100) bytes of data.
80 bytes from 172.17.0.242: icmp_req=1 ttl=255 time=17.0 ms
80 bytes from 172.17.0.242: icmp_req=2 ttl=255 time=19.0 ms
80 bytes from 172.17.0.242: icmp_req=3 ttl=255 time=21.8 ms
80 bytes from 172.17.0.242: icmp_req=4 ttl=255 time=22.6 ms
80 bytes from 172.17.0.242: icmp_req=5 ttl=255 time=23.3 ms
--- 172.17.0.242 ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 71ms
rtt min/avg/max/mdev = 17.024/20.790/23.366/2.406 ms, pipe 2, ipg/ewma 17.794/19.066 ms
#ping 172.17.0.243
PING 172.17.0.243 (172.17.0.243) 72(100) bytes of data.
80 bytes from 172.17.0.243: icmp_req=1 ttl=255 time=17.2 ms
80 bytes from 172.17.0.243: icmp_req=2 ttl=255 time=19.4 ms
80 bytes from 172.17.0.243: icmp_req=3 ttl=255 time=21.4 ms
80 bytes from 172.17.0.243: icmp_req=4 ttl=255 time=22.1 ms
80 bytes from 172.17.0.243: icmp_req=5 ttl=255 time=23.1 ms
--- 172.17.0.243 ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 71ms
rtt min/avg/max/mdev = 17.266/20.684/23.157/2.100 ms, pipe 2, ipg/ewma 17.758/19.114 ms
fn1.vpn#ping 172.17.0.241
PING 172.17.0.241 (172.17.0.241) 72(100) bytes of data.
--- 172.17.0.241 ping statistics ---
5 packets transmitted, 0 received, 100% packet loss, time 4008ms
(Pay no mind to the horrendous latency; it's due to the way Arista wrote the VM).
So after all of that: should I expect HSRP to be fully supported with XRv? Or, like the L2 interfaces that are fully configurable, is it something that isn't supported? Did I, perhaps, forget to enable some bit within the XRv's config?
Thanks!In order to get redundancy to run between two SLB switches, you need to configure HSRP between the two VLAN interfaces and then associate the standby name with the Cisco IOS SLB Virtual Server (Vserver). When using IOS SLB in an HSRP environment ensure that the active HSRP router (also active for IOS SLB) is receiving the return traffic for the IOS SLB connections.
-
Hi Cisco experts,
My name is Kumagai and I need your expert opinions below.
I am trying to configure one VLAN1 support multiple network segments as below.
(this should be a very straight forward configuration and should be OK, I think ? )
interface Vlan1
ip address 172.30.0.0 255.255.128.0
ip address 172.30.31.253 255.255.254.0 secondary
ip address 172.30.61.253 255.255.254.0 secondary
ip address 172.30.71.253 255.255.254.0 secondary
ip address 172.30.4.253 255.255.255.0 secondary
The only issue that is eating me is the above network segments are using HSRP too
and I am not sure is this possible with a combination of VLAN1 supporting multiples which are
further supported with HSRP settings in Cisco environment.
!example of HSRP:
interface Vlan4
ip address 172.30.4.253 255.255.255.0
no ip redirects
standby 4 ip 172.30.4.254
standby 4 priority 105
standby 4 preempt
<<< what will happen if I add the HSRP configuration as below into the above VLAN1 with multiple Network segment ??)
I would like to summarize my "Combined" configurations as below but I need your expert opinions on
whether the configuration below is workable without any problem ??
Or it is a total flop because Cisco does not support the configuration below !!!
interface Vlan1
ip address 172.30.0.0 255.255.128.0
ip address 172.30.31.253 255.255.254.0 secondary
ip address 172.30.61.253 255.255.254.0 secondary
ip address 172.30.71.253 255.255.254.0 secondary
ip address 172.30.4.253 255.255.255.0 secondary
standby 30 ip 172.30.31.254
standby 30 priority 105
standby 30 preempt
standby 60 ip 172.30.61.254
standby 60 priority 105
standby 60 preempt
standby 70 ip 172.30.71.254
standby 70 priority 105
standby 70 preempt
standby 4 ip 172.30.4.254
standby 4 priority 105
standby 4 preempt
Thanking you in advance !!!!!Hi,
As far as i know we dont set the ip helper address on the radio interface. It should be on the L3 interface of corresposding VLANs i.e.
int vlan 20
ip helper-address 192.168.33.xxx
int vlan 60
ip helper-address 130.20.1.xxx
I'm assuming that your using SVI's (int Vlan 20 and int Vlan 60) rahter than physical interfaces. Also hope you have configured switch port as trunk where this AP is connected.
Modify the AP config as below since you are using data vlan as the native vlan
interface Dot11Radio0.20
encapsulation dot1Q 20 native
interface FastEthernet0.20
encapsulation dot1Q 20 native
Ideally your AP fastethernet configuration should looks like below and not sure how you missed this as this comes by default when you have multiple vlans for multiple ssids.
interface FastEthernet0.20
encapsulation dot1Q 20 native
no ip route-cache
bridge-group 20
no bridge-group 20 source-learning
bridge-group 20 spanning-disabled
interface FastEthernet0.60
encapsulation dot1Q 60
no ip route-cache
bridge-group 60
no bridge-group 60 source-learning
bridge-group 60 spanning-disabled
Hope this helps.
Regards
Najaf -
Hi,
I have implemented HSRP betwen Cisco 1841 & Cisco 1700. and used Standby Track command.
1841>
interface FastEthernet0/0
ip address 10.4.0.2 255.255.252.0
duplex auto
speed auto
standby 1 ip 10.4.0.1
standby 1 priority 254
standby 1 preempt
standby 1 track Serial0/0/0 100
1751>
interface FastEthernet0/0
ip address 10.4.0.3 255.255.252.0
duplex auto
speed auto
standby 1 ip 10.4.0.1
standby 1 priority 250
The show standby Command on 1841 is as follows:
1841#show standby
FastEthernet0/0 - Group 1
State is Active
4 state changes, last state change 01:49:46
Virtual IP address is 10.4.0.1
Active virtual MAC address is 0000.0c07.ac01
Local virtual MAC address is 0000.0c07.ac01 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 0.244 secs
Preemption enabled
Active router is local
Standby router is 10.4.0.3, priority 250 (expires in 8.108 sec)
Priority 154 (configured 254)
Track interface Serial0/0/0 state Down decrement 100
IP redundancy name is "hsrp-Fa0/0-1" (default)
YB-MUMNP-P-1841#
I have made the serial 0/0/0 link down (not by Serial Shutdown command, but by switching off the link)
If you see, the priority of the 1841 router is 154, as compared to 250 of 1751,
Yet 1841 is Active router.
Is there somethin i hv missed, or the router is misbehaving?
rgds
SumedhHi amit,
I was having the same dilemna while preparing for my BCMSN - CCNP exam :) Consider this scenario
Router A with HSRP priority 50 with no preempt configured
Router B with HSRP priority 25 with preempt enabled.
Assume router A is the first HSRP router on the LAN segment it becomes the default active forwarder and begins forwarding data. Now router B comes up and since it has preempt configured, it will preempt router A. However since it has lesser priority it will fail.
Assume router A fails (i.e the hold down timer expires after not recieving 3 consecutive hellos) now router B becomes the default active forwarder.
So far so good.
If router A comes back online, it will start sending hellos, but since it is NOT configured with the preempt command, router A will not set the preempt flag and hence router B will continue being the active forwarder until the time it actually goes down or an administrator manually does the needful.
Now if Router A was configured with standby preempt, Router A would correctly set the preempt flag and since it has higher priority it would correctly be set as the active forwarder once again
Hope I understood your problem correctly and gave the right explanation. -
The 3560 guide shows HSRP always setup under a physical ethernet interface, ie
interface gigabit 1/0/1
Ip address x.x.x.x mask
standby 2 ip x.x.x.x
standby 2 priority 100
I am using my 3560 in L3 mode, can't i setup the HSRP under the VLAN interface?
I can find no examples using the Cat 3560 doing this as shown below:
Interface Vlan26
ip address 10.20.26.3 255.255.254.0
no ip redirects
no ip unreachables
no ip mroute-cache
no cdp enable
standby 26 ip 10.20.26.1
standby 26 priority 101
standby 26 preempt
Other side is x.26.2 with same 100 as priority group and same standby ip.
thanksHi
Do this
interface Vlan5
ip address x.x.x.2 255.255.255.0
ip helper-address x.x.x.x
ip helper-address x.x.x.x
no ip redirects
standby 5 ip x.x.x.1
standby 5 priority 130
standby 5 preempt
interface Vlan5
ip address x.x.x.3 255.255.255.0
ip helper-address x.x.x.x
ip helper-address x.x.x.x
no ip redirects
standby 5 ip x.x.x.1
standby 5 priority 140
standby 5 preempt
Hope this works
Thanks & Regards
Tarun G -
Router HSRP Active/Standby question
Hello,
Can I use following command to setup HSRP Active/Standby mode for both router ?
Router A:
ip address 10.10.228.202 255.255.255.248
standby 3 ip 10.10.228.201
standby 3 preempt
Router B:
ip address 10.10.228.203 255.255.255.248
standby 3 ip 10.10.228.201
standby 3 preempt
standby 3 track 1 decrement 10
standby 3 track 2 decrement 10
ThanksWilson,
we don't know what objects you're tracking, so it's a little bit difficult to answer the question.
You use the default priorities on both routers (100), so, as long as track objects 1 and 2 are up, Router B will be the active router, because it has the higher IP address.
If track object 1 or 2 goes down, Router B's priority will be reduced to 90 (or 80 if both are down at the same time), so Router A will become active, because preemption is enabled.
If the track object(s) change to up, Router B will take over again, because it also has preemtion enabled.
Correction:
Preemption only comes into play when the local priority is higher than the priority of the current active router. In your examle, the priorities on RA and RB have the same values. The IP addresses serve as a tie breaker only in the initial phase, the preemption feature doesn't consider the IP addresses later on.
Consequence: Router A continues beeing the active router.
HTH
Rolf -
ASR-9001 - XR_434 - HSRP
How many HSRP / Subinterfaces will be recomend to be the max in a Teng. port for an ASR-9001.
If i have over 500, what will be the configuration best practice?
I have seen Multiple Group Optimization (MGO) for HSRP as an option, but i dont have a clear example of how to configure it on XR.In spanish ¡¡ APLAUSOS !!
Also i take a look on Struc 33 of the NP, and the max entries change from 1024 to 8192
router hsrp
interface TenGigE0/0/0/3
address-family ipv4
hsrp 4094
name PRINCIPAL
priority 110
track object PRUEBA_1 40
interface TenGigE0/0/0/3.2
address-family ipv4
hsrp 2 slave
follow PRINCIPAL
address 198.18.0.1
interface TenGigE0/0/0/3.3
address-family ipv4
hsrp 3 slave
follow PRINCIPAL
address 198.18.0.9
RP/0/RSP0/CPU0:ASR-9001_1#sh hsrp br
Wed Mar 25 02:13:58.791 MEX
IPv4 Groups:
P indicates configured to preempt.
|
Interface Grp Pri P State Active addr Standby addr Group addr
Te0/0/0/3 4094 70 Init unknown unknown unknown
Te0/0/0/3.2 2 sla Init unknown unknown 198.18.0.1
Te0/0/0/3.3 3 sla Init unknown unknown 198.18.0.9
RP/0/RSP0/CPU0:ASR-9001_1#show controllers np struct 33 np0 location 0/0/CPU0
Wed Mar 25 02:14:30.375 MEX
Node: 0/0/CPU0:
NP: 0 Struct 33: VRRP_MAC
Struct is a PHYSICAL entity
Reserved Entries: 0, Used Entries: 6, Max Entries: 8192
Tks!!!! -
HSRP For the Gateway Redundancy.
Hi all
i just need a simple how to configure 2 Routers(R1;R2) to run HSRP For the Gateway Redundancy ,if one of the 2 routers Fail.should i connect the 2 routers 2gather via cross cable.than one straight cable to the 2 separate distribution switch.(2 Etherchanel configured between Dist switch)PS LIST ur optimum Configuration
Ur help very much AppreciatedHi,
i think you talking about campus network where you have two distribution two access and two core router's.
With that prospects.
My suggesion will be to have etherchannel between distribution switches and both the distribution switch should be connected to both the core router.
than use HSRP in distribution swithes.
configuration and diagram is given below.
do let us know if you want any more information.
interface FastEthernet2
ip address 172.69.90.1 255.255.255.0
standby priority 200
standby preempt
standby ip 172.69.90.6
interface FastEthernet3
ip address 172.69.91.1 255.255.255.0
standby priority 200
standby preempt
standby ip 172.69.91.6
like the above configuration you can configure second switch also you can apply on vlan interface too.
HTH -
ASR-9010 - RSP-4G - XR.4.3.4 - HSRP limitations
I´m unable to foward traffic to virtual IP (HSRP) when Router A is the Active. if Router B is the Active fowarding is ok.
HSRP negotiation (Active vs Standby) is working propertly, on both routers, A and B, see each other in the correct state, if raise priority on one side the other one change to Standby, and so on......
But traffic to Virtual IP when Router A is the active is not working.
show hsrp trace shows the next output
Feb 13 18:11:06.777 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: MAC addresses clear complete (1 success, 0 fail): No error
Feb 13 18:11:08.789 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: MAC addresses set complete (0 success, 1 fail): 'interface attributes library' detected the 'warning' condition 'At least one attribute operation failed. Check retcode array'
Feb 13 18:10:44.741 hsrp_unbulk 0/RSP0/CPU0 t1 VERIFY PRIORITY succeeded
Feb 13 18:10:44.741 hsrp_unbulk 0/RSP0/CPU0 t1 VERIFY PREEMPT: AF IPv4, Interface TenGigE0_0_0_0.567, group 567, delay 0 (remove)
Feb 13 18:10:44.741 hsrp_unbulk 0/RSP0/CPU0 t1 VERIFY PREEMPT succeeded
Feb 13 18:10:44.745 hsrp_unbulk 0/RSP0/CPU0 t1 APPLY PRIORITY: AF IPv4, Interface TenGigE0_0_0_0.567, group 567, priority 0 (remove)
Feb 13 18:10:44.745 hsrp_unbulk 0/RSP0/CPU0 t1 APPLY PRIORITY succeeded
Feb 13 18:10:44.745 hsrp_unbulk 0/RSP0/CPU0 t1 APPLY PREEMPT: AF IPv4, Interface TenGigE0_0_0_0.567, group 567, delay 0 (remove)
Feb 13 18:10:44.745 hsrp_unbulk 0/RSP0/CPU0 t1 APPLY PREEMPT succeeded
Feb 13 18:10:44.746 hsrp_bulked 0/RSP0/CPU0 t1 Send FO start message of size 1 to node 0x801 succeeded
Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1 VERIFY PRIMARY: Interface TenGigE0_0_0_0.567, group 567, addr 0.0.0.0 (learn) (remove)
Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1 VERIFY PRIMARY succeeded
Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1 TenGigE0/0/0/0.567*#0x237Active: (Ev h) Hello message from higher priority Active
Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1 TenGigE0/0/0/0.567*#0x237Session State Active -> Speak
Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1 FHRP: Successfully queued ARP Update for 192.168.152.97 on TenGigE0/0/0/0.567*
Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1 FHRP: Queued RIB remove for 192.168.152.97 on TenGigE0/0/0/0.567*
Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1 FHRP: Successfully queued MAC remove for TenGigE0/0/0/0*, 0000.0c9f.f237
Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1 IPv4#TenGigE0_0_0_0.567#0x237Forwarder State Active -> Speak
Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1 Adding item ipv4/group/TenGigE0_0_0_0.567,567 to the sysdb state change notification queue
Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1 (EDM): (Filter): IP mapping notification on TenGigE0/0/0/0.567*, deleting
Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1 Adding item ip_mapping/d40,c0a89862,567 to the sysdb ICMP redirects notification queue
Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1 (EDM): (Filter): VMAC mapping notification on TenGigE0/0/0/0.567*, deleting
Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1 Adding item dest_macs/d40,00000c9ff237 to the sysdb ICMP redirects notification queue
Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1 TenGigE0/0/0/0.567*#0x237Speak: (Ac H) Sending resign message
Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1 (EDM): (Filter): IP mapping notification on TenGigE0/0/0/0.567*, deleting
Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1 Adding item ip_mapping/d40,c0a89863,0 to the sysdb ICMP redirects notification queue
Feb 13 18:10:44.753 hsrp_bulked 0/RSP0/CPU0 t1 Send FO start message of size 2 to node 0x801 succeeded
Feb 13 18:10:44.754 hsrp_bulked 0/RSP0/CPU0 t1 Send FO send message of size 1 to node 0x801 succeeded
Feb 13 18:10:44.755 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: Successful ARP update of size 1 (1 add, 0 remove, 0 grat ARP)
Feb 13 18:10:44.755 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: Clearing Ucast MAC attribute for 1 interfaces
Feb 13 18:10:44.757 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: MAC addresses clear complete (1 success, 0 fail): No error
Feb 13 18:10:44.757 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: Updating RIB (table 0xe0000034, proto 0x4): Adding 0 routes, removing 1 routes
Feb 13 18:10:44.758 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: (batch_buffer_complete returned 1 - success)
Feb 13 18:10:44.758 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: Sending batch to RIB
Feb 13 18:10:44.758 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: (operation returned 6 - success)
Feb 13 18:10:44.758 hsrp_bulked 0/RSP0/CPU0 t1 Updating 1 sysdb state change notifications
Feb 13 18:10:44.763 hsrp_bulked 0/RSP0/CPU0 t1 Updating 3 sysdb ICMP redirect notifications
Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1 APPLY PRIMARY: Interface TenGigE0_0_0_0.567, group 567, addr 0.0.0.0 (learn) (remove)
Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1 TenGigE0/0/0/0.567*#0x237Speak: (Ev b) HSRP disabled
Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1 TenGigE0/0/0/0.567*#0x237Speak: (Ac C) Stopping Active timer
Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1 TenGigE0/0/0/0.567*#0x237Speak: (Ac D) Stopping Standby timer
Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1 TenGigE0/0/0/0.567*#0x237Session State Speak -> Init
Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1 FHRP: Successfully queued ARP Update for 192.168.152.97 on TenGigE0/0/0/0.567*
Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1 FHRP: Successfully queued MAC remove for TenGigE0/0/0/0*, 0000.0c9f.f237
Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1 Adding item to the IPv4 socket unjoin queue for VRF 0x60000025 on interface TenGigE0/0/0/0.567*
Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1 Add IPv4 interface TenGigE0_0_0_0.567 to the IP-ARM unregister queue succeeded
Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1 (EDM): (Filter): Interface config notification on TenGigE0/0/0/0.567*, deleting
Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1 Adding item if_config/d40 to the sysdb ICMP redirects notification queue
Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1 Add IPv6 interface TenGigE0_0_0_0.567 to the IP-ARM unregister queue succeeded
Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1 Queued unregistration for link-local address updates for TenGigE0/0/0/0.567*
Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1 Add interface TenGigE0/0/0/0.567* to the IM mac unregister queue succeeded
Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1 Removed reference for VRF, vrf_id 0x60000025 refcount 1
Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1 Add IPv4 interface TenGigE0_0_0_0.567 to the IM state unregister queue succeeded
Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1 Add IPv6 interface TenGigE0_0_0_0.567 to the IM state unregister queue succeeded
Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1 APPLY PRIMARY succeeded
Feb 13 18:10:44.766 hsrp_bulked 0/RSP0/CPU0 t1 IP-ARM unregister finished with 1 successes and 0 failures
Feb 13 18:10:44.766 hsrp_bulked 0/RSP0/CPU0 t1 IP-ARM unregister finished with 1 successes and 0 failures
Feb 13 18:10:44.766 hsrp_bulked 0/RSP0/CPU0 t1 Batch of 1 LAS unregister operations complete (0 success / 1 fail) - first failure Invalid argument
Feb 13 18:10:44.767 hsrp_bulked 0/RSP0/CPU0 t1 Send FO send message of size 1 to node 0x801 succeeded
Feb 13 18:10:44.769 hsrp_bulked 0/RSP0/CPU0 t1 Send FO stop message of size 2 to node 0x801 succeeded
Feb 13 18:10:44.770 hsrp_bulked 0/RSP0/CPU0 t1 Send FO delete message of size 2 to node 0x801 succeeded
Feb 13 18:10:44.770 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: Successful ARP update of size 1 (0 add, 1 remove, 0 grat ARP)
Feb 13 18:10:44.770 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: Clearing Ucast MAC attribute for 1 interfaces
Feb 13 18:10:44.772 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: MAC addresses clear complete (1 success, 0 fail): No error
Feb 13 18:10:44.773 hsrp_bulked 0/RSP0/CPU0 t1 IM state unregister finished with 2 successes and 0 failures
Feb 13 18:10:44.773 hsrp_bulked 0/RSP0/CPU0 t1 IM mac unregister finished with 1 successes and 0 failures
Feb 13 18:10:44.773 hsrp_bulked 0/RSP0/CPU0 t1 Updating 1 sysdb ICMP redirect notifications
Feb 13 18:10:44.775 hsrp_bulked 0/RSP0/CPU0 t1 socket unjoin completed with 0 failures and 2 successes
Feb 13 18:11:01.915 hsrp_unbulk 0/RSP0/CPU0 t1 VERIFY PRIMARY: Interface TenGigE0_0_0_0.567, group 567, addr 192.168.152.97 (add)
Feb 13 18:11:01.915 hsrp_unbulk 0/RSP0/CPU0 t1 VERIFY PRIMARY succeeded
Feb 13 18:11:01.921 hsrp_bulked 0/RSP0/CPU0 t1 IM state register finished with 2 successes and 0 failures
Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1 APPLY PRIMARY: Interface TenGigE0_0_0_0.567, group 567, addr 192.168.152.97 (add)
Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1 Add IPv4 interface TenGigE0_0_0_0.567 to the IM state register queue succeeded
Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1 Add IPv6 interface TenGigE0_0_0_0.567 to the IM state register queue succeeded
Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1 Unknown#0x237Add primary VIP 192.168.152.97 (Down)
Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1 APPLY PRIMARY succeeded
Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1 Attribute notification received for interface TenGigE0/0/0/0.567*
Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1 Add interface TenGigE0/0/0/0.567* to the IM mac register queue succeeded
Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1 Add IPv4 interface TenGigE0_0_0_0.567 to the IP-ARM register queue succeeded
Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1 (EDM): (Filter): Interface config notification on TenGigE0/0/0/0.567*, filter on
Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1 Adding item if_config/d40 to the sysdb ICMP redirects notification queue
Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1 IPv4#TenGigE0/0/0/0.567*#0x1000interface state notification (up) (old state unknown)
Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1 FHRP TRK: IM state notification for TenGigE0_0_0_0.567 (IPv4) - Up
Feb 13 18:11:01.922 hsrp_bulked 0/RSP0/CPU0 t1 IP-ARM register finished with 1 successes and 0 failures
Feb 13 18:11:01.922 hsrp_unbulk 0/RSP0/CPU0 t1 Received 1 interface IP address updates (scan)
Feb 13 18:11:01.922 hsrp_unbulk 0/RSP0/CPU0 t1 TenGigE0/0/0/0.567*#0x1000Updating IP address info: 192.168.152.98/29 (add/change) VRF 0x60000025, tbl 0xe0000034
Feb 13 18:11:01.922 hsrp_unbulk 0/RSP0/CPU0 t1 Added reference to VRF, vrf_id 0x60000025 refcount 2
Feb 13 18:11:01.925 hsrp_bulked 0/RSP0/CPU0 t1 Send FO create message of size 1 to node 0x801 succeeded
Feb 13 18:11:01.925 hsrp_bulked 0/RSP0/CPU0 t1 IM mac register finished with 1 successes and 0 failures
Feb 13 18:11:01.925 hsrp_bulked 0/RSP0/CPU0 t1 Updating 1 sysdb ICMP redirect notifications
Feb 13 18:11:01.933 hsrp_unbulk 0/RSP0/CPU0 t1 Attribute notification received for interface TenGigE0/0/0/0.567*
Feb 13 18:11:01.933 hsrp_unbulk 0/RSP0/CPU0 t1 Received MAC change notification for interface TenGigE0/0/0/0.567*:new mac 6c9c.ed6f.c922 , old mac 0000.0000.0000
Feb 13 18:11:01.933 hsrp_unbulk 0/RSP0/CPU0 t1 Received 3rd party bulk end notification
Feb 13 18:11:01.936 hsrp_unbulk 0/RSP0/CPU0 t1 VERIFY PREEMPT: AF IPv4, Interface TenGigE0_0_0_0.567, group 567, delay 0 (add)
Feb 13 18:11:01.936 hsrp_unbulk 0/RSP0/CPU0 t1 VERIFY PREEMPT succeeded
Feb 13 18:11:01.936 hsrp_unbulk 0/RSP0/CPU0 t1 VERIFY PRIORITY: AF IPv4, Interface TenGigE0_0_0_0.567, group 567, priority 110 (add)
Feb 13 18:11:01.936 hsrp_unbulk 0/RSP0/CPU0 t1 VERIFY PRIORITY succeeded
Feb 13 18:11:01.941 hsrp_unbulk 0/RSP0/CPU0 t1 APPLY PREEMPT: AF IPv4, Interface TenGigE0_0_0_0.567, group 567, delay 0 (add)
Feb 13 18:11:01.941 hsrp_unbulk 0/RSP0/CPU0 t1 APPLY PREEMPT succeeded
Feb 13 18:11:01.942 hsrp_unbulk 0/RSP0/CPU0 t1 APPLY PRIORITY: AF IPv4, Interface TenGigE0_0_0_0.567, group 567, priority 110 (add)
Feb 13 18:11:01.942 hsrp_unbulk 0/RSP0/CPU0 t1 APPLY PRIORITY succeeded
Feb 13 18:11:06.772 hsrp_unbulk 0/RSP0/CPU0 t1 Adding item to the IPv4 socket join queue for VRF 0x60000025 on interface TenGigE0/0/0/0.567*
Feb 13 18:11:06.772 hsrp_unbulk 0/RSP0/CPU0 t1 TenGigE0/0/0/0.567*#0x237Init: (Ev a) HSRP enabled
Feb 13 18:11:06.772 hsrp_unbulk 0/RSP0/CPU0 t1 TenGigE0/0/0/0.567*#0x237Session State Init -> Listen
Feb 13 18:11:06.772 hsrp_unbulk 0/RSP0/CPU0 t1 FHRP: Successfully queued ARP Update for 192.168.152.97 on TenGigE0/0/0/0.567*
Feb 13 18:11:06.772 hsrp_unbulk 0/RSP0/CPU0 t1 FHRP: Successfully queued MAC remove for TenGigE0/0/0/0*, 0000.0c9f.f237
Feb 13 18:11:06.773 hsrp_bulked 0/RSP0/CPU0 t1 Send FO create message of size 1 to node 0x801 succeeded
Feb 13 18:11:06.774 hsrp_bulked 0/RSP0/CPU0 t1 Send FO start message of size 1 to node 0x801 succeeded
Feb 13 18:11:06.775 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: Successful ARP update of size 1 (1 add, 0 remove, 0 grat ARP)
Feb 13 18:11:06.775 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: Clearing Ucast MAC attribute for 1 interfaces
Feb 13 18:11:06.777 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: MAC addresses clear complete (1 success, 0 fail): No error
Feb 13 18:11:06.778 hsrp_bulked 0/RSP0/CPU0 t1 socket join completed with 0 failures and 2 successes
Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1 TenGigE0/0/0/0.567*#0x237Preempt delay not configured - preemption allowed
Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1 TenGigE0/0/0/0.567*#0x237Listen: (Ev h) Hello message from lower priority Active
Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1 TenGigE0/0/0/0.567*#0x237Listen: (Ac C) Stopping Active timer
Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1 TenGigE0/0/0/0.567*#0x237Listen: (Ac G) Sending coup message
Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1 TenGigE0/0/0/0.567*#0x237Session State Listen -> Active
Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1 FHRP: Successfully queued ARP Update for 192.168.152.97 on TenGigE0/0/0/0.567*
Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1 FHRP: Queued RIB add for 192.168.152.97 on TenGigE0/0/0/0.567*
Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1 FHRP: Successfully queued MAC add for TenGigE0/0/0/0*, 0000.0c9f.f237
Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1 IPv4#TenGigE0_0_0_0.567#0x237Forwarder State Listen -> Active
Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1 Adding item ipv4/group/TenGigE0_0_0_0.567,567 to the sysdb state change notification queue
Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1 (EDM): (Filter): VMAC mapping notification on TenGigE0/0/0/0.567*, virtual MAC 00000c9ff237, virtual ip 192.168.152.97
Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1 Adding item dest_macs/d40,00000c9ff237 to the sysdb ICMP redirects notification queue
Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1 (EDM): (Filter): IP mapping notification on TenGigE0/0/0/0.567*, real ip 192.168.152.98, virtual 192.168.152.97
Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1 Adding item ip_mapping/d40,c0a89862,567 to the sysdb ICMP redirects notification queue
Feb 13 18:11:08.781 hsrp_bulked 0/RSP0/CPU0 t1 Send FO start message of size 1 to node 0x801 succeeded
Feb 13 18:11:08.783 hsrp_bulked 0/RSP0/CPU0 t1 Send FO send message of size 2 to node 0x801 succeeded
Feb 13 18:11:08.784 hsrp_bulked 0/RSP0/CPU0 t1 Send FO stop message of size 1 to node 0x801 succeeded
Feb 13 18:11:08.784 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: Successful ARP update of size 1 (1 add, 0 remove, 0 grat ARP)
Feb 13 18:11:08.784 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: Setting Ucast MAC attribute for 1 interfaces
Feb 13 18:11:08.789 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: Updating RIB (table 0xe0000034, proto 0x4): Adding 1 routes, removing 0 routes
Feb 13 18:11:08.789 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: MAC addresses set complete (0 success, 1 fail): 'interface attributes library' detected the 'warning' condition 'At least one attribute operation failed. Check retcode array'
Feb 13 18:11:08.789 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: Received IM disconnection event
Feb 13 18:11:08.789 hsrp_unbulk 0/RSP0/CPU0 t1 FHRP: Failed to set MAC address on interface TenGigE0/0/0/0*: 'Ether' detected the 'warning' condition 'Out of memory': Not enough memory
Feb 13 18:11:08.790 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: (batch_buffer_complete returned 1 - success)
Feb 13 18:11:08.790 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: Sending batch to RIB
Feb 13 18:11:08.790 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: (operation returned 6 - success)
Feb 13 18:11:08.791 hsrp_bulked 0/RSP0/CPU0 t1 Updating 1 sysdb state change notifications
Feb 13 18:11:08.793 hsrp_bulked 0/RSP0/CPU0 t1 Updating 2 sysdb ICMP redirect notifications
Feb 13 18:11:08.798 hsrp_unbulk 0/RSP0/CPU0 t1 (EDM): (Filter): IP mapping notification on TenGigE0/0/0/0.567*, real ip 192.168.152.99, virtual none
Feb 13 18:11:08.798 hsrp_unbulk 0/RSP0/CPU0 t1 Adding item ip_mapping/d40,c0a89863,0 to the sysdb ICMP redirects notification queue
Feb 13 18:11:08.798 hsrp_unbulk 0/RSP0/CPU0 t1 TenGigE0/0/0/0.567*#0x237Active: (Ev i) Resign message from Active
Feb 13 18:11:08.798 hsrp_unbulk 0/RSP0/CPU0 t1 TenGigE0/0/0/0.567*#0x237Active: (Ac G) Sending coup message
Feb 13 18:11:08.799 hsrp_bulked 0/RSP0/CPU0 t1 Send FO send message of size 2 to node 0x801 succeeded
Feb 13 18:11:08.799 hsrp_bulked 0/RSP0/CPU0 t1 Updating 1 sysdb ICMP redirect notifications
Feb 13 18:11:09.792 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: Updating Owner Channel for 0 interfaces
Feb 13 18:11:09.792 hsrp_bulked 0/RSP0/CPU0 t1 FHRP: Owner Channel update complete (0 success, 0 fail): No error
Feb 13 18:11:18.781 hsrp_unbulk 0/RSP0/CPU0 t1 TenGigE0/0/0/0.567*#0x237Active: (Ev d) Standby timer expired
Any help is usefull.Ok
The output of the show controller np struct 33 shows that im on 257
RP/0/RSP0/CPU0:9010-Router-A#show controller np struct 33 det all-entries np3 loc 0/0/CPU0
Tue Feb 17 15:08:00.156 CST
Node: 0/0/CPU0:
NP: 3
Struct 33: VRRP_MAC (maps to uCode Str=3 in TopSearch1)
Struct is a PHYSICAL entity
Reserved Entries: 0, Used Entries: 257, Max Entries: 1024
Entries Shown: 257
So a Trident NP has a limitation of 256 Entries on Struct 33 even when the output shows 1024? Thyphone it is able to reach the 1024
We talk about this on a previous discussion and you light my way jejejej and teach me about this command, and now i see on a Thyphone is able to reach the 1024.
But Trident, the maximum is 256 in a port or the np?
Sorry about all this -
HSRP standy router IP not showing
Hi,
i have got 6509 with l3, now with the below said configuration, i couldn't not able to the standby router ip address, instead it shows me "unknown" but for others vlan it shows me the standby router ip address, is that because that i had put access-list & will the access-list has affected that?
Main Layer3 card
interface Vlan199
description ***PCR Network***
ip address 192.168.3.254 255.255.255.0
ip access-group 101 in
ip access-group 103 out
no ip redirects
ip pim sparse-mode
mls rp ip
standby 199 ip 192.168.3.252
standby 199 timers 5 15
standby 199 priority 109
standby 199 preempt
Vlan199 - Group 199
Local state is Active, priority 109, may preempt
Hellotime 5 sec, holdtime 15 sec
Next hello sent in 1.548
Virtual IP address is 192.168.3.252 configured
Active router is local
Standby router is unknown
Virtual mac address is 0000.0c07.acc7
19 state changes, last state change 10w5d
IP redundancy name is "hsrp-Vl199-199" (default)
access-list 101 permit ip 192.168.3.0 0.0.0.255 10.2.9.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 10.2.1.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.3.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.2.0 0.0.0.255
Standby Layer3 card
interface Vlan199
description ***PCR Network***
ip address 192.168.3.253 255.255.255.0
ip access-group 101 in
ip access-group 103 out
no ip redirects
ip pim sparse-mode
mls rp ip
standby 199 ip 192.168.3.252
standby 199 timers 5 15
standby 199 priority 110
standby 199 preempt
Vlan199 - Group 199
Local state is Active, priority 110, may preempt
Hellotime 5 sec, holdtime 15 sec
Next hello sent in 0.910
Virtual IP address is 192.168.3.252 configured
Active router is local
Standby router is unknown
Virtual mac address is 0000.0c07.acc7
3 state changes, last state change 10w5d
IP redundancy name is "hsrp-Vl199-199" (default)
access-list 101 permit ip 192.168.3.0 0.0.0.255 10.2.9.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 10.2.1.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.3.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.2.0 0.0.0.255Hi Anand,
Both the routers are thinking themselves to be active if you check the sh stahndy status which you have pasted "Local state is Active"
This means hello packets are getting lost between the 2 routers and they are not able to detect which is active and which is standy router.
Your accesss list can be one of the reason because you have allowed only 4 set of ip addresses and rest are implicit deny as per access list rules and HSRP hello packet carries 224.0.0.2 in its hello packet as destination address.
Can you permit this ip in your access list and see what happens.
HTH
Ankur -
Hi;
May i use HSRP for ipv4 and ipv6 at the same time on same interface ?
Our interface;
interface GigabitEthernet0/3
description Firewall
ip address 193.x.x.x 255.255.255.192
ip flow ingress
ip policy route-map network-load
load-interval 30
duplex auto
speed auto
media-type rj45
negotiation auto
standby 3 ip 193.x.x.x
standby 3 priority 130
standby 3 preempt
we want to use 2001:047c:xx::5 for standby ip.
for nodes:
2001:047c:xx::6
2001:047c:xx::7
Is it possible ?
ThanksHi,
What feature set i.e Enterprise Services, IP services, etc...?
sh ver | inc bin
Is that NPE-G1 or G2?
HTH
Maybe you are looking for
-
I recently received my iphone 6 and everything was running smoothly until i ran in to this problem. when i open imovie it is gray for a split second then it closes. I tried restarting my phone and i still have the same problem. then i find that pages
-
How can I edit text in a tagged PDF?
I have created an accessible test form in Acrobat Pro X. Now that it has all been tagged and reading order touched up, the client wants to change the text. Is there any way to edit text at this point or do I have to create an entirely new tagged ac
-
All songs selected will not transfer from iTunes to iPod
Previously my iTunes transferred accurately to my iPod. My most recent additions to my library are a couple of audio books. Now, one of my music CDs will not transfer to my iPod and only the first 6 chapters of one of my books will transfer. The rest
-
Resolution of Oracle DATE (ms)
I want to store date and time accurate to 1ms in my oracle database. Does the Oracle DATE type support a resolution of 1 ms? In my experience, the java.sql.Timestamp nanosecond field is always 0, though the time field is correct to one second. My cur
-
Electronic Cleaning Wipes??
I have electronic cleaning wipes for the computer screen. They are moist, but not dripping wet. Are they safe for the screen? I'm hesitant to use them-not sure why. I did a search (online) and I couldn't quite figure out the right answer. I figured p