HSRP preempt

Hi,
I would need some advise to clarify on the following HSRP preempt concept. Please let me know if the following is correct.
1) both active and standby routers NOT configured with HSRP preempt. When active router goes down, standby will NOT take over due to NO HSRP preempt configured.
2) both active and standby routers configured with HSRP preempt. When active router goes down, standby will take over as the active. When the active goes down again, the standby will take over as active. However, there will be a short downtime during the HSRP transition states. How long is the transition state?
3) only standby router configured with HSRP preempt. When active router goes down, standby will take over to become the active. However, when the active router goes down again, the standby router will NOT take over as the active due to NO HSRP preempt configured.
Thanks
Christina

Christina
1) Not correct. If both routers do not include preempt and the active router goes down then the standby router WILL take over as the active. Preempt is not an issue here. If the currently active router goes down and if there is a standby then the standby will take over as active. In a failure situation the standby will take over without consideration of preempt.
2) I am not entirely clear what you are describing when you say the active goes down and then when the active goes down again. So let me re-phrase it in terms of rtrA and rtrB. Assume that rtrA has a higher priority and becomes active and rtrB is standby. Then rtrA goes down. rtrB then becomes active. At that point I do not follow your scenario. I am not sure whether you assume that rtrA comes back into service or if you assume that there is rtrC which became standby.
If rtrA comes into service again and it has higher priority and it has preempt then rtrA becomes active and rtrB returns to standby. This is because preempt on rtrA allows it to displace rtrB. There is some very brief period of transition. I am not sure how long but I know it is quite short.
If rtrB became active and there is rtrC who becomes standby and then rtrB fails then rtrC becomes active and there is no period of interruption.
3)I have the same problem with this description. You describe active and standby, you assume that the active fails, and then you assume that the active fails again without specifying whether the original active router came back in service again.
So let me go back to my example of rtrA and rtrB. Assume that rtrA has higher priority and becomes active and does not have preempt. Assume that rtrB has lower priority and does have preempt. Then rtrA goes down. rtrB becomes active. (Note that this really has nothing to do with preempt - rtrB takes over because the active failed.) If rtrA comes into service then it is in the HSRP group and it has higher priority but it does not become active because it does not have preempt.
Preempt really has to do with enabling a router that has higher priority but is not active to displace the current active router. Preempt is a factor when some router attempts to displace the current active router. It is not a factor when the active router fails.
Let me describe another example. Assume rtrA has priority of 105 and rtrB has priority of 100. So rtrA becomes the active router. Then assume that rtrA is tracking interface serial0/0 and the interface goes down. Now rtrA has priority 95 and rtrB has priority 100. Will rtrB become active? With preempt configured it will and without prempt configured it will not.
HTH
Rick

Similar Messages

  • I am looking for a way to efficiently move from HSRP to GLBP.

    I want to move from using HSRP to GLBP and encountering issues with making it a smooth transition.  I am testing my plans using GNS3
    Our two external production routers are configured to use HSRP and the current traffic demands are taking a toll on the primary router.  The primary HSRP router's CPU is running above 70% while the standby router is hovering in the 20's.  The main reason is the firewalls are running High Availability Load Sharing (Sidewinders) so each firewall is able to transmit / receive data.  Our routers are setup in a BGP multihome configuration with the ISP.  The upstream routers are associated with the same AS.  Each side has maximum-path 2 enabled within the BGP process.  The two firewalls associate a multicast mac address with a vIP.  Each router has a static arp entry for the firewall vIP multicast address allowing them to send traffic they receive from the world to the firewall pair.  The firewalls then decide if they will accept the traffic or defer to the other.  Unfortunately I cannot upgrade the NPE's on the external routers (NPE-400) so the next best thing is to try and distribute the load coming from the two firewalls.  I hope to get both routers running in the mid 50’s which aren’t great but it's better than the current situation.  I've been told money is coming but you know how that goes.
    Here is my glbp scheme I want to implement
    R1 (This will be my AVG)
    track 20 interface g2/0 line-protocol (Gi2/0 is the external interface)
    interface gi0/0 (Serves as the gateway interface for the Firewalls)
    glbp 10 ip 10.1.1.1 (fictitious address)
    glbp 10 timers 5 15
    glbp 10 weighting 100 lower 90 upper 95
    glbp 10 load-balancing host-dependent
    glbp 10 authentication md5 key-string #######
    glbp 10 weighting track 20 decrement 20
    glbp 10 forwarder preempt delay minimum 5
    R2
    track 20 interface g2/0 line-protocol (Gi2/0 is the external interface)
    interface gi0/0 (Serves as the gateway interface for the Firewalls)
    glbp 10 ip 10.1.1.1 (fictitious address)
    glbp 10 timers 5 15
    glbp 10 priority 95 (the interface physical ip address on this router is greater than the one on R1)
    glbp 10 weighting 100 lower 90 upper 95
    glbp 10 load-balancing host-dependent
    glbp 10 authentication md5 key-string #######
    glbp 10 weighting track 20 decrement 20
    glbp 10 forwarder preempt delay minimum 5
    Initially I thought this would be simple to transition from HSRP to GLBP.  I would remove the standby ip ip-address command from the interface and replace it with the glbp ip ip-address command.  The interface would already be configured with the other glbp commands prior to making the change.  I thought this method would also aid in the event I had to roll back to HSRP due to something I didn't account for in testing.
    When I attempt to execute the above command sequence, the router reports the virtual IP address is being used by another application on the interface.  I tried shutting down the interface and rerun the sequence with no success.  To get around this obstacle, I remove all standby commands from the interface by entering either no standby 1 or no standby.
    So here is what I am thinking.  On the day of moving from HSRP to GLBP, I will have a console connection to both routers.
    On R2
    shutdown interface g0/0 since this router is designated as the HSRP standby router and paste the following commands into the router
    track 20 interface g2/0 line-protocol
    interface gi0/0
    no standby 1
    glbp 10 ip ip-address
    glbp 10 timers 5 15
    glbp 10 priority 95
    glbp 10 weighting 100 lower 90 upper 95
    glbp 10 load-balancing host-dependent
    glbp 10 authentication md5 key-string #######
    glbp 10 weighting track 20 decrement 20
    glbp 10 forwarder preempt delay minimum 5
    While this is occurring, on router #1 which is the primary hsrp router, paste the following commands in
    track 20 interface GigabitEthernet2/0 line-protocol
    interface GigabitEthernet0/0
    no standby 1
    glbp 10 ip ip-adddress
    glbp 10 timers 5 15
    glbp 10 weighting 100 lower 90 upper 95
    glbp 10 load-balancing host-dependent
    glbp 10 authentication md5 key-string ######
    glbp 10 weighting track 20 decrement 20
    glbp 10 forwarder preempt delay minimum 5
    Once the commands are pasted into Router #1, enable the interface on Router #2 and monitor GLBP with the following debug commands enabled on both routers.
    debug glbp events
    debug glbp errors
    My test runs using GNS seem to run well.  I know I am going to interrupt traffic and I scheduled network downtime to perform the change.  I am anticipating total downtime to be less than 5 minutes.
    Does this approach sound logical or is there a better method to transition from HSRP to GLBP? 
    thanks in advanced.

    p.lagatta wrote:Jon, Thanks for the reply.  The Siderwinder Firewalls associate a Multicast MAC address with the vIP.  That's the reason for the static ARP entry in each router.  Since our Layer II switches located between the firewalls and routers do not register the MAC with a specific port, both firewalls receive the traffic.  Once the traffic reaches the firewalls, they pass information across a heartbeat interface and the selection process is based on odd / even ports.  Receive traffic is already working in this configuration.  Both our external routers are peered with two EBGP routers located in the same AS.  The GLBP implementation will allow us to load balance the traffic each firewall is sending to the GW address.
    Perhaps i'm misunderstaning.
    If there is one mac-address then GLBP will assign that mac-address to one of the routers and it will keep that router for forwarding the traffic with the same mac-address. So the traffic will always be forwarded by the same router. GLBP works by assigning different source mac-addresses to different routers within the same group but it sounds like the source mac-address is always the same from the firewalls.
    Jon

  • Best practice for High availability design, HSRP

    Hi,
    I am planning to create High Availability for LAN to WAN connectivity.
    But I want to know your opinion about the best way how to do this. I googled for a solution/best way how to do this, but I didn't found in my opinion right answer.
    The situation:
    I have 2 3945E Routers and 2 3560 switches. The design that I am planning to implement is below.
    The main goal is to have redundant connection, whatever one of the devices will fail. For example, if the R1 will fail, R2 should become active, if the SW1 will fail, the SW2 will take care about reachability and vice versa. The router 1 should be preferred always, if the link to ISP isn't down, because of greater bandwidth. So why am I drown 2 connections to 2 separate switches. If the SW1 will fail, I will still have a connection to WAN using R1 router.
    The Router interface should be configured with sub interfaces (preferred over secondary IP address of interface), because more than 10 subnets will be assigned to the LAN segment. The routers have 4 Gi ports.
    HSRP must be enabled on LAN side, because PC's on LAN must have redundant def. getaway.
    So, the question is - what is the best and preferred way to do this?
    In my opinion, I should use BVI and combine R1 routers 2 interfaces in to logical one and do the same for the R2.
    Next, turn the router in to L3 switch using IRB and then configure HSRP.
    What would be your preferred way to do this?

    Hi Audrius,
    I would suggest you to go with HSRP. GLBP you will use where you want load balance.
    I think the connectivity between your Routers (3945) and switches (3560) is gigabit connection which is high speed. So keep one physical link from your switches to each router and do HSRP on those router physical interfaces.
    In this way you will have high availability like if R1 fails then R2 will take over.
    Regarding the config see the below which I have for one of my Customer DC.
    ACTIVE:
    track 1 interface GigabitEthernet0/0 line-protocol
    track 2 interface GigabitEthernet0/0 line-protocol
    interface GigabitEthernet0/1
    ip address 10.10.10.12 255.255.255.0
    ip nat inside
    ip virtual-reassembly
    duplex full
    speed 100
    standby use-bia scope interface
    standby 0 ip 10.10.10.10
    standby 0 priority 110
    standby 0 preempt
    standby 0 authentication peter2mo
    standby 0 track 1 decrement 30
    standby 0 track 2 decrement 30
    STANDBY:
    track 1 interface GigabitEthernet0/0 line-protocol
    interface GigabitEthernet0/1
    ip address 10.10.10.11 255.255.255.0
    ip nat inside
    ip virtual-reassembly
    duplex full
    speed 100
    standby use-bia scope interface
    standby 0 ip 10.10.10.10
    standby 0 priority 90
    standby 0 authentication peter2mo
    standby 0 track 1 decrement 30
    Please rate the helpfull posts.
    Regards,
    Naidu.

  • Hsrp problem....hsrp address not responding

    Hi
    I'm hoping I can get some opinions on this. I have 2 7200 routers with 2 gig interfaces each. Each gig interface is connected to 2 stacked 3750 switches. I have sub interfaces configured on both the gig interfaces so they are essentially dot1q to the 3750 switches. I have specified a hsrp group for each subinterface on the 7200s. My problem is that when I have 1 of the 7200 routers acting as hsrp active for some groups and the other 7200 acting as hsrp active for other groups hosts lose connectivity to their hsrp address for one of the routers. i.e no response to pings yet correct mac address in arp table.All works well when I make either one of the routers the hsrp active for all of the groups. Any ideas?
    r1----3750----hosts
    \/ | <--stack
    /\ |
    r2----3750----hosts

    config for one router is below.The other router is the same apart from the track command and the priority is 155. The 2 3750s have the vlans configured and dot1q trunks to both of the routers 2 gig ports.
    the show standby at the moment shows the correct info ie the correct router is active for all the groups...
    thanks
    interface GigabitEthernet0/1
    description *** Primary link to Switch 1 ***
    no ip address
    no ip proxy-arp
    duplex auto
    speed auto
    media-type sfp
    negotiation auto
    interface GigabitEthernet0/1.10
    encapsulation dot1Q 10
    ip address x.x.x.x 255.255.255.224
    no ip proxy-arp
    no snmp trap link-status
    standby 10 ip x.x.x.x
    standby 10 priority 160
    standby 10 preempt delay minimum 60
    standby 10 track GigabitEthernet1/0
    interface GigabitEthernet0/1.30
    encapsulation dot1Q 30
    ip address x.x.x.x 255.255.255.192
    no ip proxy-arp
    no snmp trap link-status
    standby 30 ip x.x.x.x
    standby 30 priority 160
    standby 30 preempt delay minimum 60
    standby 30 track GigabitEthernet1/0
    interface GigabitEthernet0/1.70
    encapsulation dot1Q 70
    ip address x.x.x.x 255.255.255.252
    no ip proxy-arp
    no snmp trap link-status
    interface FastEthernet0/2
    no ip address
    shutdown
    duplex auto
    speed auto
    interface GigabitEthernet0/2
    description **** secondary link to switch 2 ***
    no ip address
    no ip proxy-arp
    duplex auto
    speed auto
    media-type sfp
    negotiation auto
    interface GigabitEthernet0/2.20
    encapsulation dot1Q 20
    ip address x.x.x.x 255.255.255.224
    no ip proxy-arp
    ip ospf network broadcast
    no snmp trap link-status
    standby 20 ip x.x.x.x
    standby 20 priority 160
    standby 20 preempt delay minimum 60
    standby 20 track GigabitEthernet1/0
    interface GigabitEthernet0/2.40
    description *** N2 Web Farm ***
    encapsulation dot1Q 40
    ip address x.x.x.x 255.255.255.192
    no ip proxy-arp
    no snmp trap link-status
    standby 40 ip x.x.x.x
    standby 40 priority 160
    standby 40 preempt delay minimum 60
    standby 40 track GigabitEthernet1/0
    interface GigabitEthernet0/2.50
    encapsulation dot1Q 50
    ip address x.x.x.x 255.255.255.240
    no ip proxy-arp
    no snmp trap link-status
    standby 50 ip x.x.x.x
    standby 50 priority 160
    standby 50 preempt delay minimum 60
    standby 50 track GigabitEthernet1/0
    interface GigabitEthernet0/2.80
    encapsulation dot1Q 80
    ip address x.x.x.x 255.255.255.252
    no ip proxy-arp
    ip ospf network broadcast
    no snmp trap link-status

  • HSRP- How to monitoring Interfaces

    Hi,
    I still learning and I have a few questions,
    I'm trying to prepare the infrastructure:
    2x Router – 2911
    2x Switch – 2960G
    I configured HSRP, router R1 is active and R2 is the standby.
    Everything works and and when I do shoutdown interface Gi0 / 1 on router R1 HSRP runs and switches route on router R2.
    The problem is when I simulate a crash on the side of the ISP and I will shutdown the interface Gi0 / 0 on Router R1
    Then HSRP does not work. How do I fix this? How to monitoring the status of all Interface? Whether this is IP SLA? but I found examples showing how IP SLA switches routing on a router connected to two ISPs or can I use this with a version of the two routers? how to do it? and maybe use something else ? what I read?
    R1
    interface GigabitEthernet0/0
     description do ISP_1
     ip address XXX.XXX.XXX.XX 255.255.255.248
     ip nat outside
     ip virtual-reassembly in
     duplex auto
     speed auto
    interface GigabitEthernet0/1
     description do CoreSW1
     ip address 192.168.1.101 255.255.255.0
     ip nat inside
     ip virtual-reassembly in
     standby version 2
     standby 1 ip 192.168.1.100
     standby 1 priority 150
     standby 1 preempt
     duplex auto
     speed auto
    interface GigabitEthernet0/2
     description do R2
     ip address 10.0.0.1 255.255.255.252
     duplex auto
     speed auto
    ip default-gateway XXX.XXX.XXX.XX
    ip nat inside source list 1 interface GigabitEthernet0/0 overload
    ip route 0.0.0.0 0.0.0.0 XXX.XXX.XXX.XX
    ip route 192.168.1.0 255.255.255.0 GigabitEthernet0/1
    R2
    interface GigabitEthernet0/0
     description do ISP_2
     ip address YY.YY.YYY.YYY 255.255.255.252
     ip nat outside
     ip virtual-reassembly in
     duplex auto
     speed auto
    interface GigabitEthernet0/1
     description do CoreSW2
     ip address 192.168.1.102 255.255.255.0
     ip nat inside
     ip virtual-reassembly in
     standby version 2
     standby 1 ip 192.168.1.100
     standby 1 preempt
     duplex auto
     speed auto
    interface GigabitEthernet0/2
     description do R1
     ip address 10.0.0.2 255.255.255.252
     duplex auto
     speed auto
    ip default-gateway YY.YY.YYY.YYY
    ip nat inside source list 1 interface GigabitEthernet0/0 overload
    ip route 0.0.0.0 0.0.0.0 YY.YY.YYY.YYY
    ip route 192.168.1.0 255.255.255.0 GigabitEthernet0/1
    IP SLA example - one router
    ip route 0.0.0.0 0.0.0.0 2.2.2.1 2 track 1
    ip route 0.0.0.0 0.0.0.0 1.1.1.1 3 track 2
    ip route 0.0.0.0 0.0.0.0 2.2.2.1 5
    no ip http server
    no ip http secure-server
    ip sla 11
    icmp-echo 2.2.2.10
    frequency 10
    ip sla schedule 11 life forever start-time now
    ip sla 22
    icmp-echo 1.1.1.10
    frequency 10
    ip sla schedule 22 life forever start-time now
    regards
    weles

    Hi,
    correct scheme:
    failure of a router or connected R1 - SW1 - HSRP works,
    no internet (connection - ISP_1 - R1) - HSRP did not work
    regards
    weles

  • IOS-XRv and HSRP: Supported?

    Hey gang -
    I'm building a virtual lab within a KVM hypervisor, and it includes 2 XRv images tied together across a VM switch image (Arista vEOS, but that's unimportant).  The L2 connectivity is clearly there between the two routers:
    RP/0/0/CPU0:r2#show cdp neighbors gigabitEthernet 0/0/0/6
    Fri Apr 17 10:49:07.505 UTC
    Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
                      S - Switch, H - Host, I - IGMP, r - Repeater
    Device ID       Local Intrfce    Holdtme Capability Platform  Port ID
    r1                    Gi0/0/0/6        149     R          IOS XRv S Gi0/0/0/6
    And HSRP is able to sync up appropriately between the two of them:
    RP/0/0/CPU0:r2#show hsrp br
    Fri Apr 17 10:46:32.806 UTC
    IPv4 Groups:
                            P indicates configured to preempt.
                            |
    Interface      Grp  Pri P State   Active addr     Standby addr   Group addr
    Gi0/0/0/6         1 100 P Standby 172.17.0.242    local          172.17.0.241
    IPv6 Groups:
    However, r2 (the secondary) can't ping the HSRP IP at all.  It can ping the buddy router's IP address, but not the HSRP one:
    RP/0/0/CPU0:r2#ping 172.17.0.242
    Fri Apr 17 10:51:30.635 UTC
    Type escape sequence to abort.
    Sending 5, 100-byte ICMP Echos to 172.17.0.242, timeout is 2 seconds:
    Success rate is 100 percent (5/5), round-trip min/avg/max = 9/17/19 ms
    RP/0/0/CPU0:r2#ping 172.17.0.241
    Fri Apr 17 10:51:32.595 UTC
    Type escape sequence to abort.
    Sending 5, 100-byte ICMP Echos to 172.17.0.241, timeout is 2 seconds:
    Success rate is 0 percent (0/5)
    The primary router can ping the HSRP IP though:
    RP/0/0/CPU0:r1#ping 172.17.0.241
    Fri Apr 17 11:32:32.679 UTC
    Type escape sequence to abort.
    Sending 5, 100-byte ICMP Echos to 172.17.0.241, timeout is 2 seconds:
    Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
    Further, the switch VM that the two XRv routers are connected to can ping both of their IPs on Gig0/0/0/6, but can't ping the HSRP IP:
    #ping 172.17.0.242
    PING 172.17.0.242 (172.17.0.242) 72(100) bytes of data.
    80 bytes from 172.17.0.242: icmp_req=1 ttl=255 time=17.0 ms
    80 bytes from 172.17.0.242: icmp_req=2 ttl=255 time=19.0 ms
    80 bytes from 172.17.0.242: icmp_req=3 ttl=255 time=21.8 ms
    80 bytes from 172.17.0.242: icmp_req=4 ttl=255 time=22.6 ms
    80 bytes from 172.17.0.242: icmp_req=5 ttl=255 time=23.3 ms
    --- 172.17.0.242 ping statistics ---
    5 packets transmitted, 5 received, 0% packet loss, time 71ms
    rtt min/avg/max/mdev = 17.024/20.790/23.366/2.406 ms, pipe 2, ipg/ewma 17.794/19.066 ms
    #ping 172.17.0.243
    PING 172.17.0.243 (172.17.0.243) 72(100) bytes of data.
    80 bytes from 172.17.0.243: icmp_req=1 ttl=255 time=17.2 ms
    80 bytes from 172.17.0.243: icmp_req=2 ttl=255 time=19.4 ms
    80 bytes from 172.17.0.243: icmp_req=3 ttl=255 time=21.4 ms
    80 bytes from 172.17.0.243: icmp_req=4 ttl=255 time=22.1 ms
    80 bytes from 172.17.0.243: icmp_req=5 ttl=255 time=23.1 ms
    --- 172.17.0.243 ping statistics ---
    5 packets transmitted, 5 received, 0% packet loss, time 71ms
    rtt min/avg/max/mdev = 17.266/20.684/23.157/2.100 ms, pipe 2, ipg/ewma 17.758/19.114 ms
    fn1.vpn#ping 172.17.0.241
    PING 172.17.0.241 (172.17.0.241) 72(100) bytes of data.
    --- 172.17.0.241 ping statistics ---
    5 packets transmitted, 0 received, 100% packet loss, time 4008ms
    (Pay no mind to the horrendous latency; it's due to the way Arista wrote the VM).
    So after all of that: should I expect HSRP to be fully supported with XRv?  Or, like the L2 interfaces that are fully configurable, is it something that isn't supported?  Did I, perhaps, forget to enable some bit within the XRv's config?
    Thanks!

    In order to get redundancy to run between two SLB switches, you need to configure HSRP between the two VLAN interfaces and then associate the standby name with the Cisco IOS SLB Virtual Server (Vserver). When using IOS SLB in an HSRP environment ensure that the active HSRP router (also active for IOS SLB) is receiving the return traffic for the IOS SLB connections.

  • Does CISCO C3560X VLAN support multiple Network segments which are further configured with HSRP function

    Hi Cisco experts,
        My name is Kumagai and I need your expert opinions below.
    I am trying to configure one VLAN1 support multiple network segments as below.
    (this should be a very straight forward configuration and should be OK, I think ? )
     interface Vlan1
     ip address 172.30.0.0 255.255.128.0
     ip address 172.30.31.253 255.255.254.0 secondary
     ip address 172.30.61.253 255.255.254.0 secondary
     ip address 172.30.71.253 255.255.254.0 secondary
     ip address 172.30.4.253 255.255.255.0 secondary
     The only issue that is eating me is the above network segments are using HSRP too
     and I am not sure is this possible with a combination of VLAN1 supporting multiples which are
     further supported with HSRP settings in Cisco environment.
    !example of HSRP:
    interface Vlan4
     ip address 172.30.4.253 255.255.255.0
     no ip redirects
     standby 4 ip 172.30.4.254
     standby 4 priority 105
     standby 4 preempt
    <<< what will happen if I add the HSRP configuration as below into the above VLAN1 with multiple Network segment ??)
     I would like to summarize my "Combined" configurations as below but I need your expert opinions on
     whether the configuration below is workable without any problem ??
     Or it is a total flop because Cisco does not support the configuration below !!!
     interface Vlan1
     ip address 172.30.0.0 255.255.128.0
     ip address 172.30.31.253 255.255.254.0 secondary
     ip address 172.30.61.253 255.255.254.0 secondary
     ip address 172.30.71.253 255.255.254.0 secondary
     ip address 172.30.4.253 255.255.255.0  secondary
     standby 30 ip 172.30.31.254
     standby 30 priority 105
     standby 30 preempt
     standby 60 ip 172.30.61.254
     standby 60 priority 105
     standby 60 preempt
     standby 70 ip 172.30.71.254
     standby 70 priority 105
     standby 70 preempt
     standby  4 ip 172.30.4.254
     standby  4 priority 105
     standby  4 preempt
    Thanking you in advance !!!!!

    Hi,
    As far as i know we dont set the ip helper address on the radio interface. It should be on the L3 interface of corresposding VLANs i.e.
    int vlan 20
    ip helper-address 192.168.33.xxx
    int vlan 60
    ip helper-address 130.20.1.xxx
    I'm assuming that your using SVI's (int Vlan 20 and int Vlan 60) rahter than physical interfaces. Also hope you have configured switch port as trunk where this AP is connected.
    Modify the AP config as below since you are using data vlan as the native vlan
    interface Dot11Radio0.20
    encapsulation dot1Q 20 native
    interface FastEthernet0.20
    encapsulation dot1Q 20 native
    Ideally your AP fastethernet configuration should looks like below and not sure how you missed this as this comes by default when you have multiple vlans for multiple ssids.
    interface FastEthernet0.20
    encapsulation dot1Q 20 native
    no ip route-cache
    bridge-group 20
    no bridge-group 20 source-learning
    bridge-group 20 spanning-disabled
    interface FastEthernet0.60
    encapsulation dot1Q 60
    no ip route-cache
    bridge-group 60
    no bridge-group 60 source-learning
    bridge-group 60 spanning-disabled
    Hope this helps.
    Regards
    Najaf

  • Is it an HSRP Bug?

    Hi,
    I have implemented HSRP betwen Cisco 1841 & Cisco 1700. and used Standby Track command.
    1841>
    interface FastEthernet0/0
    ip address 10.4.0.2 255.255.252.0
    duplex auto
    speed auto
    standby 1 ip 10.4.0.1
    standby 1 priority 254
    standby 1 preempt
    standby 1 track Serial0/0/0 100
    1751>
    interface FastEthernet0/0
    ip address 10.4.0.3 255.255.252.0
    duplex auto
    speed auto
    standby 1 ip 10.4.0.1
    standby 1 priority 250
    The show standby Command on 1841 is as follows:
    1841#show standby
    FastEthernet0/0 - Group 1
    State is Active
    4 state changes, last state change 01:49:46
    Virtual IP address is 10.4.0.1
    Active virtual MAC address is 0000.0c07.ac01
    Local virtual MAC address is 0000.0c07.ac01 (v1 default)
    Hello time 3 sec, hold time 10 sec
    Next hello sent in 0.244 secs
    Preemption enabled
    Active router is local
    Standby router is 10.4.0.3, priority 250 (expires in 8.108 sec)
    Priority 154 (configured 254)
    Track interface Serial0/0/0 state Down decrement 100
    IP redundancy name is "hsrp-Fa0/0-1" (default)
    YB-MUMNP-P-1841#
    I have made the serial 0/0/0 link down (not by Serial Shutdown command, but by switching off the link)
    If you see, the priority of the 1841 router is 154, as compared to 250 of 1751,
    Yet 1841 is Active router.
    Is there somethin i hv missed, or the router is misbehaving?
    rgds
    Sumedh

    Hi amit,
    I was having the same dilemna while preparing for my BCMSN - CCNP exam :) Consider this scenario
    Router A with HSRP priority 50 with no preempt configured
    Router B with HSRP priority 25 with preempt enabled.
    Assume router A is the first HSRP router on the LAN segment it becomes the default active forwarder and begins forwarding data. Now router B comes up and since it has preempt configured, it will preempt router A. However since it has lesser priority it will fail.
    Assume router A fails (i.e the hold down timer expires after not recieving 3 consecutive hellos) now router B becomes the default active forwarder.
    So far so good.
    If router A comes back online, it will start sending hellos, but since it is NOT configured with the preempt command, router A will not set the preempt flag and hence router B will continue being the active forwarder until the time it actually goes down or an administrator manually does the needful.
    Now if Router A was configured with standby preempt, Router A would correctly set the preempt flag and since it has higher priority it would correctly be set as the active forwarder once again
    Hope I understood your problem correctly and gave the right explanation.

  • Setup of HSRP on 3560

    The 3560 guide shows HSRP always setup under a physical ethernet interface, ie
    interface gigabit 1/0/1
    Ip address x.x.x.x mask
    standby 2 ip x.x.x.x
    standby 2 priority 100
    I am using my 3560 in L3 mode, can't i setup the HSRP under the VLAN interface?
    I can find no examples using the Cat 3560 doing this as shown below:
    Interface Vlan26
    ip address 10.20.26.3 255.255.254.0
    no ip redirects
    no ip unreachables
    no ip mroute-cache
    no cdp enable
    standby 26 ip 10.20.26.1
    standby 26 priority 101
    standby 26 preempt
    Other side is x.26.2 with same 100 as priority group and same standby ip.
    thanks

    Hi
    Do this
    interface Vlan5
    ip address x.x.x.2 255.255.255.0
    ip helper-address x.x.x.x
    ip helper-address x.x.x.x
    no ip redirects
    standby 5 ip x.x.x.1
    standby 5 priority 130
    standby 5 preempt
    interface Vlan5
    ip address x.x.x.3 255.255.255.0
    ip helper-address x.x.x.x
    ip helper-address x.x.x.x
    no ip redirects
    standby 5 ip x.x.x.1
    standby 5 priority 140
    standby 5 preempt
    Hope this works
    Thanks & Regards
    Tarun G

  • Router HSRP Active/Standby question

    Hello,
    Can I use following command to setup HSRP Active/Standby mode for both router ?
    Router A:
    ip address 10.10.228.202 255.255.255.248
    standby 3 ip 10.10.228.201
    standby 3 preempt
    Router B:
    ip address 10.10.228.203 255.255.255.248
    standby 3 ip 10.10.228.201
    standby 3 preempt
    standby 3 track 1 decrement 10
    standby 3 track 2 decrement 10
    Thanks

    Wilson,
    we don't know what objects you're tracking, so it's a little bit difficult to answer the question.
    You use the default priorities on both routers (100), so, as long as track objects 1 and 2 are up, Router B will be the active router, because it has the higher IP address.
    If track object 1 or 2 goes down, Router B's priority will be reduced to 90 (or 80 if both are down at the same time),  so Router A will become active, because preemption is enabled.
    If the track object(s) change to up, Router B will take over again, because it also has preemtion enabled.
    Correction:
    Preemption only comes into play when the local priority is higher than the priority of the current active router. In your examle, the priorities on RA and RB have the same values. The IP addresses serve as a tie breaker only in the initial phase, the preemption feature doesn't consider the IP addresses later on.
    Consequence: Router A continues beeing the active router.
    HTH
    Rolf

  • ASR-9001 - XR_434 - HSRP

    How many HSRP / Subinterfaces will be recomend to be the max in a Teng. port for an ASR-9001.
    If i have over 500, what will be the configuration best practice?
    I have seen Multiple Group Optimization (MGO) for HSRP as an option, but i dont have a clear example of how to configure it on XR.

    In spanish ¡¡ APLAUSOS !!
    Also i take a look on Struc 33 of the NP, and the max entries change from 1024 to 8192
    router hsrp
     interface TenGigE0/0/0/3
      address-family ipv4
       hsrp 4094
        name PRINCIPAL
        priority 110
        track object PRUEBA_1 40
     interface TenGigE0/0/0/3.2
      address-family ipv4
       hsrp 2 slave
        follow PRINCIPAL
        address 198.18.0.1
     interface TenGigE0/0/0/3.3
      address-family ipv4
       hsrp 3 slave
        follow PRINCIPAL
        address 198.18.0.9
    RP/0/RSP0/CPU0:ASR-9001_1#sh hsrp br
    Wed Mar 25 02:13:58.791 MEX
    IPv4 Groups:
                            P indicates configured to preempt.
                            |
    Interface      Grp  Pri P State   Active addr     Standby addr   Group addr    
    Te0/0/0/3      4094  70   Init    unknown         unknown        unknown       
    Te0/0/0/3.2       2 sla   Init    unknown         unknown        198.18.0.1    
    Te0/0/0/3.3       3 sla   Init    unknown         unknown        198.18.0.9  
    RP/0/RSP0/CPU0:ASR-9001_1#show controllers np struct 33 np0 location 0/0/CPU0
    Wed Mar 25 02:14:30.375 MEX
                    Node: 0/0/CPU0:
    NP: 0  Struct 33: VRRP_MAC  
    Struct is a PHYSICAL entity
    Reserved Entries: 0, Used Entries: 6, Max Entries: 8192
    Tks!!!!

  • HSRP For the Gateway Redundancy.

    Hi all
    i just need a simple how to configure 2 Routers(R1;R2) to run HSRP For the Gateway Redundancy ,if one of the 2 routers Fail.should i connect the 2 routers 2gather via cross cable.than one straight cable to the 2 separate distribution switch.(2 Etherchanel configured between Dist switch)PS LIST ur optimum Configuration
    Ur help very much Appreciated

    Hi,
    i think you talking about campus network where you have two distribution two access and two core router's.
    With that prospects.
    My suggesion will be to have etherchannel between distribution switches and both the distribution switch should be connected to both the core router.
    than use HSRP in distribution swithes.
    configuration and diagram is given below.
    do let us know if you want any more information.
    interface FastEthernet2
    ip address 172.69.90.1 255.255.255.0
    standby priority 200
    standby preempt
    standby ip 172.69.90.6
    interface FastEthernet3
    ip address 172.69.91.1 255.255.255.0
    standby priority 200
    standby preempt
    standby ip 172.69.91.6
    like the above configuration you can configure second switch also you can apply on vlan interface too.
    HTH

  • ASR-9010 - RSP-4G - XR.4.3.4 - HSRP limitations

    I´m unable to foward traffic to virtual IP (HSRP) when Router A is the Active. if Router B is the Active fowarding is ok.
    HSRP negotiation (Active vs Standby) is working propertly, on both routers, A and B, see each other in the correct state, if raise priority on one side the other one change to Standby, and so on......
    But traffic to Virtual IP when Router A is the active is not working.
    show hsrp trace shows the next output
    Feb 13 18:11:06.777 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:  MAC addresses clear complete (1 success, 0 fail): No error
    Feb 13 18:11:08.789 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:  MAC addresses set complete (0 success, 1 fail): 'interface attributes library' detected the 'warning' condition 'At least one attribute operation failed. Check retcode array'
    Feb 13 18:10:44.741 hsrp_unbulk 0/RSP0/CPU0 t1      VERIFY PRIORITY succeeded
    Feb 13 18:10:44.741 hsrp_unbulk 0/RSP0/CPU0 t1      VERIFY PREEMPT: AF IPv4, Interface TenGigE0_0_0_0.567, group 567, delay 0 (remove)
    Feb 13 18:10:44.741 hsrp_unbulk 0/RSP0/CPU0 t1      VERIFY PREEMPT succeeded
    Feb 13 18:10:44.745 hsrp_unbulk 0/RSP0/CPU0 t1      APPLY PRIORITY: AF IPv4, Interface TenGigE0_0_0_0.567, group 567, priority 0 (remove)
    Feb 13 18:10:44.745 hsrp_unbulk 0/RSP0/CPU0 t1      APPLY PRIORITY succeeded
    Feb 13 18:10:44.745 hsrp_unbulk 0/RSP0/CPU0 t1      APPLY PREEMPT: AF IPv4, Interface TenGigE0_0_0_0.567, group 567, delay 0 (remove)
    Feb 13 18:10:44.745 hsrp_unbulk 0/RSP0/CPU0 t1      APPLY PREEMPT succeeded
    Feb 13 18:10:44.746 hsrp_bulked 0/RSP0/CPU0 t1  Send FO start message of size 1 to node 0x801 succeeded
    Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1      VERIFY PRIMARY: Interface TenGigE0_0_0_0.567, group 567, addr 0.0.0.0 (learn) (remove)
    Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1      VERIFY PRIMARY succeeded
    Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1      TenGigE0/0/0/0.567*#0x237Active: (Ev h) Hello message from higher priority Active
    Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1      TenGigE0/0/0/0.567*#0x237Session State Active        -> Speak
    Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1  FHRP:    Successfully queued ARP Update for 192.168.152.97 on TenGigE0/0/0/0.567*
    Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1  FHRP:    Queued RIB remove for 192.168.152.97 on TenGigE0/0/0/0.567*
    Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1  FHRP:    Successfully queued MAC remove for TenGigE0/0/0/0*, 0000.0c9f.f237
    Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1      IPv4#TenGigE0_0_0_0.567#0x237Forwarder State Active  -> Speak
    Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1      Adding item ipv4/group/TenGigE0_0_0_0.567,567 to the sysdb state change notification queue
    Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1      (EDM): (Filter): IP mapping notification on TenGigE0/0/0/0.567*, deleting
    Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1      Adding item ip_mapping/d40,c0a89862,567 to the sysdb ICMP redirects notification queue
    Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1      (EDM): (Filter): VMAC mapping notification on TenGigE0/0/0/0.567*, deleting
    Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1      Adding item dest_macs/d40,00000c9ff237 to the sysdb ICMP redirects notification queue
    Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1      TenGigE0/0/0/0.567*#0x237Speak: (Ac H) Sending resign message
    Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1      (EDM): (Filter): IP mapping notification on TenGigE0/0/0/0.567*, deleting
    Feb 13 18:10:44.751 hsrp_unbulk 0/RSP0/CPU0 t1      Adding item ip_mapping/d40,c0a89863,0 to the sysdb ICMP redirects notification queue
    Feb 13 18:10:44.753 hsrp_bulked 0/RSP0/CPU0 t1  Send FO start message of size 2 to node 0x801 succeeded
    Feb 13 18:10:44.754 hsrp_bulked 0/RSP0/CPU0 t1  Send FO send message of size 1 to node 0x801 succeeded
    Feb 13 18:10:44.755 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:  Successful ARP update of size 1 (1 add, 0 remove, 0 grat ARP)
    Feb 13 18:10:44.755 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:  Clearing Ucast MAC attribute for 1 interfaces
    Feb 13 18:10:44.757 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:  MAC addresses clear complete (1 success, 0 fail): No error
    Feb 13 18:10:44.757 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:  Updating RIB (table 0xe0000034, proto 0x4): Adding 0 routes, removing 1 routes
    Feb 13 18:10:44.758 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:    (batch_buffer_complete returned 1 - success)
    Feb 13 18:10:44.758 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:  Sending batch to RIB
    Feb 13 18:10:44.758 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:    (operation returned 6 - success)
    Feb 13 18:10:44.758 hsrp_bulked 0/RSP0/CPU0 t1  Updating 1 sysdb state change notifications
    Feb 13 18:10:44.763 hsrp_bulked 0/RSP0/CPU0 t1  Updating 3 sysdb ICMP redirect notifications
    Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1      APPLY PRIMARY: Interface TenGigE0_0_0_0.567, group 567, addr 0.0.0.0 (learn) (remove)
    Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1      TenGigE0/0/0/0.567*#0x237Speak: (Ev b) HSRP disabled
    Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1      TenGigE0/0/0/0.567*#0x237Speak: (Ac C) Stopping Active timer
    Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1      TenGigE0/0/0/0.567*#0x237Speak: (Ac D) Stopping Standby timer
    Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1      TenGigE0/0/0/0.567*#0x237Session State Speak         -> Init
    Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1  FHRP:    Successfully queued ARP Update for 192.168.152.97 on TenGigE0/0/0/0.567*
    Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1  FHRP:    Successfully queued MAC remove for TenGigE0/0/0/0*, 0000.0c9f.f237
    Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1      Adding item to the IPv4 socket unjoin queue for VRF 0x60000025 on interface TenGigE0/0/0/0.567*
    Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1      Add IPv4 interface TenGigE0_0_0_0.567 to the IP-ARM unregister queue succeeded
    Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1      (EDM): (Filter): Interface config notification on TenGigE0/0/0/0.567*, deleting
    Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1      Adding item if_config/d40 to the sysdb ICMP redirects notification queue
    Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1      Add IPv6 interface TenGigE0_0_0_0.567 to the IP-ARM unregister queue succeeded
    Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1  Queued unregistration for link-local address updates for TenGigE0/0/0/0.567*
    Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1      Add interface TenGigE0/0/0/0.567* to the IM mac unregister queue succeeded
    Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1      Removed reference for VRF, vrf_id 0x60000025 refcount 1
    Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1      Add IPv4 interface TenGigE0_0_0_0.567 to the IM state unregister queue succeeded
    Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1      Add IPv6 interface TenGigE0_0_0_0.567 to the IM state unregister queue succeeded
    Feb 13 18:10:44.765 hsrp_unbulk 0/RSP0/CPU0 t1      APPLY PRIMARY succeeded
    Feb 13 18:10:44.766 hsrp_bulked 0/RSP0/CPU0 t1  IP-ARM unregister finished with 1 successes and 0 failures
    Feb 13 18:10:44.766 hsrp_bulked 0/RSP0/CPU0 t1  IP-ARM unregister finished with 1 successes and 0 failures
    Feb 13 18:10:44.766 hsrp_bulked 0/RSP0/CPU0 t1  Batch of 1 LAS unregister operations complete (0 success / 1 fail) - first failure Invalid argument
    Feb 13 18:10:44.767 hsrp_bulked 0/RSP0/CPU0 t1  Send FO send message of size 1 to node 0x801 succeeded
    Feb 13 18:10:44.769 hsrp_bulked 0/RSP0/CPU0 t1  Send FO stop message of size 2 to node 0x801 succeeded
    Feb 13 18:10:44.770 hsrp_bulked 0/RSP0/CPU0 t1  Send FO delete message of size 2 to node 0x801 succeeded
    Feb 13 18:10:44.770 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:  Successful ARP update of size 1 (0 add, 1 remove, 0 grat ARP)
    Feb 13 18:10:44.770 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:  Clearing Ucast MAC attribute for 1 interfaces
    Feb 13 18:10:44.772 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:  MAC addresses clear complete (1 success, 0 fail): No error
    Feb 13 18:10:44.773 hsrp_bulked 0/RSP0/CPU0 t1  IM state unregister finished with 2 successes and 0 failures
    Feb 13 18:10:44.773 hsrp_bulked 0/RSP0/CPU0 t1  IM mac unregister finished with 1 successes and 0 failures
    Feb 13 18:10:44.773 hsrp_bulked 0/RSP0/CPU0 t1  Updating 1 sysdb ICMP redirect notifications
    Feb 13 18:10:44.775 hsrp_bulked 0/RSP0/CPU0 t1  socket unjoin completed with 0 failures and 2 successes
    Feb 13 18:11:01.915 hsrp_unbulk 0/RSP0/CPU0 t1      VERIFY PRIMARY: Interface TenGigE0_0_0_0.567, group 567, addr 192.168.152.97  (add)
    Feb 13 18:11:01.915 hsrp_unbulk 0/RSP0/CPU0 t1      VERIFY PRIMARY succeeded
    Feb 13 18:11:01.921 hsrp_bulked 0/RSP0/CPU0 t1  IM state register finished with 2 successes and 0 failures
    Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1      APPLY PRIMARY: Interface TenGigE0_0_0_0.567, group 567, addr 192.168.152.97  (add)
    Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1      Add IPv4 interface TenGigE0_0_0_0.567 to the IM state register queue succeeded
    Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1      Add IPv6 interface TenGigE0_0_0_0.567 to the IM state register queue succeeded
    Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1      Unknown#0x237Add primary VIP 192.168.152.97 (Down)
    Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1      APPLY PRIMARY succeeded
    Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1      Attribute notification received for interface TenGigE0/0/0/0.567*
    Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1      Add interface TenGigE0/0/0/0.567* to the IM mac register queue succeeded
    Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1      Add IPv4 interface TenGigE0_0_0_0.567 to the IP-ARM register queue succeeded
    Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1      (EDM): (Filter): Interface config notification on TenGigE0/0/0/0.567*, filter on
    Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1      Adding item if_config/d40 to the sysdb ICMP redirects notification queue
    Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1      IPv4#TenGigE0/0/0/0.567*#0x1000interface state notification (up) (old state unknown)
    Feb 13 18:11:01.921 hsrp_unbulk 0/RSP0/CPU0 t1    FHRP TRK:  IM state notification for TenGigE0_0_0_0.567 (IPv4) - Up
    Feb 13 18:11:01.922 hsrp_bulked 0/RSP0/CPU0 t1  IP-ARM register finished with 1 successes and 0 failures
    Feb 13 18:11:01.922 hsrp_unbulk 0/RSP0/CPU0 t1      Received 1 interface IP address updates (scan)
    Feb 13 18:11:01.922 hsrp_unbulk 0/RSP0/CPU0 t1      TenGigE0/0/0/0.567*#0x1000Updating IP address info: 192.168.152.98/29 (add/change) VRF 0x60000025, tbl 0xe0000034
    Feb 13 18:11:01.922 hsrp_unbulk 0/RSP0/CPU0 t1      Added reference to VRF, vrf_id 0x60000025 refcount 2
    Feb 13 18:11:01.925 hsrp_bulked 0/RSP0/CPU0 t1  Send FO create message of size 1 to node 0x801 succeeded
    Feb 13 18:11:01.925 hsrp_bulked 0/RSP0/CPU0 t1  IM mac register finished with 1 successes and 0 failures
    Feb 13 18:11:01.925 hsrp_bulked 0/RSP0/CPU0 t1  Updating 1 sysdb ICMP redirect notifications
    Feb 13 18:11:01.933 hsrp_unbulk 0/RSP0/CPU0 t1      Attribute notification received for interface TenGigE0/0/0/0.567*
    Feb 13 18:11:01.933 hsrp_unbulk 0/RSP0/CPU0 t1      Received MAC change notification for interface TenGigE0/0/0/0.567*:new mac 6c9c.ed6f.c922 , old mac 0000.0000.0000
    Feb 13 18:11:01.933 hsrp_unbulk 0/RSP0/CPU0 t1      Received 3rd party bulk end notification
    Feb 13 18:11:01.936 hsrp_unbulk 0/RSP0/CPU0 t1      VERIFY PREEMPT: AF IPv4, Interface TenGigE0_0_0_0.567, group 567, delay 0 (add)
    Feb 13 18:11:01.936 hsrp_unbulk 0/RSP0/CPU0 t1      VERIFY PREEMPT succeeded
    Feb 13 18:11:01.936 hsrp_unbulk 0/RSP0/CPU0 t1      VERIFY PRIORITY: AF IPv4, Interface TenGigE0_0_0_0.567, group 567, priority 110 (add)
    Feb 13 18:11:01.936 hsrp_unbulk 0/RSP0/CPU0 t1      VERIFY PRIORITY succeeded
    Feb 13 18:11:01.941 hsrp_unbulk 0/RSP0/CPU0 t1      APPLY PREEMPT: AF IPv4, Interface TenGigE0_0_0_0.567, group 567, delay 0 (add)
    Feb 13 18:11:01.941 hsrp_unbulk 0/RSP0/CPU0 t1      APPLY PREEMPT succeeded
    Feb 13 18:11:01.942 hsrp_unbulk 0/RSP0/CPU0 t1      APPLY PRIORITY: AF IPv4, Interface TenGigE0_0_0_0.567, group 567, priority 110 (add)
    Feb 13 18:11:01.942 hsrp_unbulk 0/RSP0/CPU0 t1      APPLY PRIORITY succeeded
    Feb 13 18:11:06.772 hsrp_unbulk 0/RSP0/CPU0 t1      Adding item to the IPv4 socket join queue for VRF 0x60000025 on interface TenGigE0/0/0/0.567*
    Feb 13 18:11:06.772 hsrp_unbulk 0/RSP0/CPU0 t1      TenGigE0/0/0/0.567*#0x237Init: (Ev a) HSRP enabled
    Feb 13 18:11:06.772 hsrp_unbulk 0/RSP0/CPU0 t1      TenGigE0/0/0/0.567*#0x237Session State Init  -> Listen
    Feb 13 18:11:06.772 hsrp_unbulk 0/RSP0/CPU0 t1  FHRP:    Successfully queued ARP Update for 192.168.152.97 on TenGigE0/0/0/0.567*
    Feb 13 18:11:06.772 hsrp_unbulk 0/RSP0/CPU0 t1  FHRP:    Successfully queued MAC remove for TenGigE0/0/0/0*, 0000.0c9f.f237
    Feb 13 18:11:06.773 hsrp_bulked 0/RSP0/CPU0 t1  Send FO create message of size 1 to node 0x801 succeeded
    Feb 13 18:11:06.774 hsrp_bulked 0/RSP0/CPU0 t1  Send FO start message of size 1 to node 0x801 succeeded
    Feb 13 18:11:06.775 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:  Successful ARP update of size 1 (1 add, 0 remove, 0 grat ARP)
    Feb 13 18:11:06.775 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:  Clearing Ucast MAC attribute for 1 interfaces
    Feb 13 18:11:06.777 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:  MAC addresses clear complete (1 success, 0 fail): No error
    Feb 13 18:11:06.778 hsrp_bulked 0/RSP0/CPU0 t1  socket join completed with 0 failures and 2 successes
    Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1      TenGigE0/0/0/0.567*#0x237Preempt delay not configured - preemption allowed
    Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1      TenGigE0/0/0/0.567*#0x237Listen: (Ev h) Hello message from lower priority Active
    Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1      TenGigE0/0/0/0.567*#0x237Listen: (Ac C) Stopping Active timer
    Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1      TenGigE0/0/0/0.567*#0x237Listen: (Ac G) Sending coup message
    Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1      TenGigE0/0/0/0.567*#0x237Session State Listen        -> Active
    Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1  FHRP:    Successfully queued ARP Update for 192.168.152.97 on TenGigE0/0/0/0.567*
    Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1  FHRP:    Queued RIB add for 192.168.152.97 on TenGigE0/0/0/0.567*
    Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1  FHRP:    Successfully queued MAC add for TenGigE0/0/0/0*, 0000.0c9f.f237
    Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1      IPv4#TenGigE0_0_0_0.567#0x237Forwarder State Listen  -> Active
    Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1      Adding item ipv4/group/TenGigE0_0_0_0.567,567 to the sysdb state change notification queue
    Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1      (EDM): (Filter): VMAC mapping notification on TenGigE0/0/0/0.567*, virtual MAC 00000c9ff237, virtual ip 192.168.152.97
    Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1      Adding item dest_macs/d40,00000c9ff237 to the sysdb ICMP redirects notification queue
    Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1      (EDM): (Filter): IP mapping notification on TenGigE0/0/0/0.567*, real ip 192.168.152.98, virtual 192.168.152.97
    Feb 13 18:11:08.779 hsrp_unbulk 0/RSP0/CPU0 t1      Adding item ip_mapping/d40,c0a89862,567 to the sysdb ICMP redirects notification queue
    Feb 13 18:11:08.781 hsrp_bulked 0/RSP0/CPU0 t1  Send FO start message of size 1 to node 0x801 succeeded
    Feb 13 18:11:08.783 hsrp_bulked 0/RSP0/CPU0 t1  Send FO send message of size 2 to node 0x801 succeeded
    Feb 13 18:11:08.784 hsrp_bulked 0/RSP0/CPU0 t1  Send FO stop message of size 1 to node 0x801 succeeded
    Feb 13 18:11:08.784 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:  Successful ARP update of size 1 (1 add, 0 remove, 0 grat ARP)
    Feb 13 18:11:08.784 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:  Setting Ucast MAC attribute for 1 interfaces
    Feb 13 18:11:08.789 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:  Updating RIB (table 0xe0000034, proto 0x4): Adding 1 routes, removing 0 routes
    Feb 13 18:11:08.789 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:  MAC addresses set complete (0 success, 1 fail): 'interface attributes library' detected the 'warning' condition 'At least one attribute operation failed. Check retcode array'
    Feb 13 18:11:08.789 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:  Received IM disconnection event
    Feb 13 18:11:08.789 hsrp_unbulk 0/RSP0/CPU0 t1  FHRP:    Failed to set MAC address on interface TenGigE0/0/0/0*: 'Ether' detected the 'warning' condition 'Out of memory': Not enough memory
    Feb 13 18:11:08.790 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:    (batch_buffer_complete returned 1 - success)
    Feb 13 18:11:08.790 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:  Sending batch to RIB
    Feb 13 18:11:08.790 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:    (operation returned 6 - success)
    Feb 13 18:11:08.791 hsrp_bulked 0/RSP0/CPU0 t1  Updating 1 sysdb state change notifications
    Feb 13 18:11:08.793 hsrp_bulked 0/RSP0/CPU0 t1  Updating 2 sysdb ICMP redirect notifications
    Feb 13 18:11:08.798 hsrp_unbulk 0/RSP0/CPU0 t1      (EDM): (Filter): IP mapping notification on TenGigE0/0/0/0.567*, real ip 192.168.152.99, virtual none
    Feb 13 18:11:08.798 hsrp_unbulk 0/RSP0/CPU0 t1      Adding item ip_mapping/d40,c0a89863,0 to the sysdb ICMP redirects notification queue
    Feb 13 18:11:08.798 hsrp_unbulk 0/RSP0/CPU0 t1      TenGigE0/0/0/0.567*#0x237Active: (Ev i) Resign message from Active
    Feb 13 18:11:08.798 hsrp_unbulk 0/RSP0/CPU0 t1      TenGigE0/0/0/0.567*#0x237Active: (Ac G) Sending coup message
    Feb 13 18:11:08.799 hsrp_bulked 0/RSP0/CPU0 t1  Send FO send message of size 2 to node 0x801 succeeded
    Feb 13 18:11:08.799 hsrp_bulked 0/RSP0/CPU0 t1  Updating 1 sysdb ICMP redirect notifications
    Feb 13 18:11:09.792 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:  Updating Owner Channel for 0 interfaces
    Feb 13 18:11:09.792 hsrp_bulked 0/RSP0/CPU0 t1  FHRP:  Owner Channel update complete (0 success, 0 fail): No error
    Feb 13 18:11:18.781 hsrp_unbulk 0/RSP0/CPU0 t1      TenGigE0/0/0/0.567*#0x237Active: (Ev d) Standby timer expired
    Any help is usefull.

    Ok
    The output of the show controller np struct 33 shows that im on 257
    RP/0/RSP0/CPU0:9010-Router-A#show controller np struct 33 det all-entries np3 loc 0/0/CPU0
    Tue Feb 17 15:08:00.156 CST
                    Node: 0/0/CPU0:
    NP: 3
    Struct 33: VRRP_MAC (maps to uCode Str=3 in TopSearch1)
    Struct is a PHYSICAL entity
    Reserved Entries: 0, Used Entries: 257, Max Entries: 1024
    Entries Shown: 257
    So a Trident NP has a limitation of 256 Entries on Struct 33 even when the output shows 1024? Thyphone it is able to reach the 1024
    We talk about this on a previous discussion and you light my way jejejej and teach me about this command, and now i see on a Thyphone is able to reach the 1024.
    But Trident, the maximum is 256 in a port or the np?
    Sorry about all this

  • HSRP standy router IP not showing

    Hi,
    i have got 6509 with l3, now with the below said configuration, i couldn't not able to the standby router ip address, instead it shows me "unknown" but for others vlan it shows me the standby router ip address, is that because that i had put access-list & will the access-list has affected that?
    Main Layer3 card
    interface Vlan199
    description ***PCR Network***
    ip address 192.168.3.254 255.255.255.0
    ip access-group 101 in
    ip access-group 103 out
    no ip redirects
    ip pim sparse-mode
    mls rp ip
    standby 199 ip 192.168.3.252
    standby 199 timers 5 15
    standby 199 priority 109
    standby 199 preempt
    Vlan199 - Group 199
    Local state is Active, priority 109, may preempt
    Hellotime 5 sec, holdtime 15 sec
    Next hello sent in 1.548
    Virtual IP address is 192.168.3.252 configured
    Active router is local
    Standby router is unknown
    Virtual mac address is 0000.0c07.acc7
    19 state changes, last state change 10w5d
    IP redundancy name is "hsrp-Vl199-199" (default)
    access-list 101 permit ip 192.168.3.0 0.0.0.255 10.2.9.0 0.0.0.255
    access-list 101 permit ip 192.168.3.0 0.0.0.255 10.2.1.0 0.0.0.255
    access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.3.0 0.0.0.255
    access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.2.0 0.0.0.255
    Standby Layer3 card
    interface Vlan199
    description ***PCR Network***
    ip address 192.168.3.253 255.255.255.0
    ip access-group 101 in
    ip access-group 103 out
    no ip redirects
    ip pim sparse-mode
    mls rp ip
    standby 199 ip 192.168.3.252
    standby 199 timers 5 15
    standby 199 priority 110
    standby 199 preempt
    Vlan199 - Group 199
    Local state is Active, priority 110, may preempt
    Hellotime 5 sec, holdtime 15 sec
    Next hello sent in 0.910
    Virtual IP address is 192.168.3.252 configured
    Active router is local
    Standby router is unknown
    Virtual mac address is 0000.0c07.acc7
    3 state changes, last state change 10w5d
    IP redundancy name is "hsrp-Vl199-199" (default)
    access-list 101 permit ip 192.168.3.0 0.0.0.255 10.2.9.0 0.0.0.255
    access-list 101 permit ip 192.168.3.0 0.0.0.255 10.2.1.0 0.0.0.255
    access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.3.0 0.0.0.255
    access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.2.0 0.0.0.255

    Hi Anand,
    Both the routers are thinking themselves to be active if you check the sh stahndy status which you have pasted "Local state is Active"
    This means hello packets are getting lost between the 2 routers and they are not able to detect which is active and which is standy router.
    Your accesss list can be one of the reason because you have allowed only 4 set of ip addresses and rest are implicit deny as per access list rules and HSRP hello packet carries 224.0.0.2 in its hello packet as destination address.
    Can you permit this ip in your access list and see what happens.
    HTH
    Ankur

  • Cisco 7200 HSRP Dual-Stack

    Hi;
    May i use HSRP for ipv4 and ipv6 at the same time on same interface ?
    Our interface;
    interface GigabitEthernet0/3
    description Firewall
    ip address 193.x.x.x 255.255.255.192
    ip flow ingress
    ip policy route-map network-load
    load-interval 30
    duplex auto
    speed auto
    media-type rj45
    negotiation auto
    standby 3 ip 193.x.x.x
    standby 3 priority 130
    standby 3 preempt
    we want to use  2001:047c:xx::5 for standby ip.
    for nodes:
    2001:047c:xx::6
    2001:047c:xx::7
    Is it possible ?
    Thanks

    Hi,
    What feature set i.e Enterprise Services, IP services, etc...?
    sh ver | inc bin
    Is that NPE-G1 or G2?
    HTH

Maybe you are looking for

  • App wont open!!

    I recently received my iphone 6 and everything was running smoothly until i ran in to this problem. when i open imovie it is gray for a split second then it closes. I tried restarting my phone and i still have the same problem. then i find that pages

  • How can I edit text in a tagged PDF?

    I have created an accessible test form in Acrobat Pro X.  Now that it has all been tagged and reading order touched up, the client wants to change the text.  Is there any way to edit text at this point or do I have to create an entirely new tagged ac

  • All songs selected will not transfer from iTunes to iPod

    Previously my iTunes transferred accurately to my iPod. My most recent additions to my library are a couple of audio books. Now, one of my music CDs will not transfer to my iPod and only the first 6 chapters of one of my books will transfer. The rest

  • Resolution of Oracle DATE (ms)

    I want to store date and time accurate to 1ms in my oracle database. Does the Oracle DATE type support a resolution of 1 ms? In my experience, the java.sql.Timestamp nanosecond field is always 0, though the time field is correct to one second. My cur

  • Electronic Cleaning Wipes??

    I have electronic cleaning wipes for the computer screen. They are moist, but not dripping wet. Are they safe for the screen? I'm hesitant to use them-not sure why. I did a search (online) and I couldn't quite figure out the right answer. I figured p