Two hsrp on two interface two router

It is possible to have two HSRP on two interfaces on two routers ?
ROUTER 1
track 1 interface GigabitEthernet0/1 line-protocol
interface GigabitEthernet0/0
ip address 172.16.1.11 255.255.0.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
standby 10 ip 172.16.1.10
standby 10 priority 110
standby 10 preempt
standby 10 authentication crs-siss
standby 10 track 1 decrement 20
interface GigabitEthernet0/1
ip address 95.14.60.222 255.255.255.224
ip access-group 116 in
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
standby 20 ip 95.14.60.221
standby 20 priority 110
standby 20 preempt
standby 20 authentication crs-siss
standby 20 track 2 decrement 20
=============================================
ROUTER 2
track 1 interface GigabitEthernet0/1 line-protocol
interface GigabitEthernet0/0
ip address 172.16.1.12 255.255.0.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
standby 10 ip 172.16.1.10
standby 10 priority 110
standby 10 preempt
standby 10 authentication crs-siss
standby 10 track 1 decrement 20
interface GigabitEthernet0/1
ip address 95.14.60.223 255.255.255.224
ip access-group 116 in
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
standby 20 ip 95.14.60.221
standby 20 priority 110
standby 20 preempt
standby 20 authentication crs-siss
standby 20 track 2 decrement 20
It is correct ???
thank you

hello john
on router 1 I have to put
ROUTER 1
track 1 interface GigabitEthernet0/1 line-protocol
track 2 interface GigabitEthernet0/0 line-protocol
interface GigabitEthernet0/0
standby 10 track 1 decrement 20
interface GigabitEthernet0/1
standby 20 track 2 decrement 20
=============================================
and on router 2 I have to put
ROUTER 2
track 1 interface GigabitEthernet0/1 line-protocol
track 2 interface GigabitEthernet0/0 line-protocol
interface GigabitEthernet0/0
standby 10 track 1 decrement 20
interface GigabitEthernet0/1
standby 20 track 2 decrement 20
correct ???

Similar Messages

  • Can I set two router IP on my solaris x86 server?

    Hi ,
    I want to make traffic balance on my office. Because we have two leased line.
    I would build up NAT in the solaris x86.
    Can I set two router ip in the solaris x86 server? And How to do it?
    The traffic balance is work or not?
    If that is not work, what can I do?
    Thanks All ^_^
    Andrew Choi

    Yes, you can use solaris x86 as a NAT box.
    add another ethernet interface, and install
    IP-filter, or sunscreen
    I suggest you search the solaris newsgroups on
    http://groups.google.com for more specific links to
    how-tos

  • I need help moving my Photoshop 7 from my old laptop to my new laptop which is running Windows 7 Enterprise.  I've tried two routes unsuccessfully.  I install the CD, it does not autoplay.  I execute Autoplay.exe at the root directory, I am welcomed, I ch

    I need help moving my Photoshop 7 from my old laptop to my new laptop which is running Windows 7 Enterprise. I’ve tried two routes unsuccessfully. I install the CD, it does not autoplay. I execute Autoplay.exe at the root directory, I am welcomed, I choose English, I accept the EULA, I get the Install/Explore choices window, with the Install button already selected, I click the Photoshop button, the CD spins, and nothing happens.  In the 2nd attempt I execute Setup.exe in the Photoshop directory, and nothing happens at all.  I’m never even offered the opportunity to enter my product code. What should I do?

    There could is likely a compatibility problem between the old software and the newer operating system.

  • Processing of two routing steps in BOM at the same time .

    Hello,
    I have two routing steps with different resources for an item but I process them parallelly. I know that I cannot duplicate the sequence number. How can I achieve that in BOM?
    Thanks,
    Sean

    Hi Sean,
    I assume your routing steps are two operations.
    I think in Discrete Manufacturing there is a way to define parallel resources. This can extend across operations, so from a scheduling perspective, you can schedule two operations in parallel. So for example, if the resource at operation 30 is scheduled to overlap the prior resource at operation 20, the two operations would effectively be scheduled in parallel.
    The limitation is that you still need to report the operations in the correct sequence ... or skip reporting one or both. But won't be able to record completion of operation 30 before you've reported completion of operation 20, because WIP will say you have no available quantity at operation 30.
    Regards,
    Sabari

  • Two route-processes for same vrf on a PE

    Hi
    Is it possible to have two route processes, for example eigrp and ospf, for the same vrf on a PE router.
    The situation would be, two customer sites on one PE, one site is running EIGRP and the other one OSPF
    Thanks for your replies
    michael

    You should be able to use any combination of supported IGP (ospf, eigrp, rip, static) or BGP between the different the PE and the different CEs belonging to the same VRF.
    Hope this helps,

  • ASA 5505 interface based routing?

    Hi,
    I got an ASA 5505 in my lab and got it working fine with one IP and various NAT and other scenarios (I'm currently refreshing my skills after a longer break on the job).
    Now, from my ISP I can get up to 5 public IPs. However, those IPs are assigned via DHCP and they are pretty random and not all in the same subnet. For testing, I created an interface outside2 on e0/1 and connected that to one of the ports of the cable gateway. The interface does get an IP and INCOMING packets go to the right place via static PAT, BUT the replies don't arrive at the client. I strongly suspect that the ASA is sending the reply packets through the other public IP on outside (e0/0) which would make sense because that's where the default route points.
    Is it possible to configure some kind of interface base routing, i.e. if a packet comes in via outside2, the corresponsing reply goes through outside2 and through the gateway outside2 receives via DHCP?
    -Stefan

    Hi Stefan,
    As I understand the traffic is coming in from outside2 going to a host-A behind the ASA.
    Host-A will reply back, but this traffic will exit out through the outside 0/0 interface since there is where you have configured the default gateway.
    In order to send the replies to client over outside2, you need to setup specific routes on the ASA through outside2 interface.
    Also remember that ASA doesn´t support Policy Based Routing(PRB), because ASA routes the traffic based on destination:
    http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/route_static.html#wp1121567
    Harvey.
    Please rate if this is the correct answer.

  • Policy based routing on VRF interfaces to route traffic through TE Tunnel

    Hi All,
    Is there a method to do policy based routing on VRF interfaces and route data traffic through one TE tunnel and non-data traffic through another TE tunnel.
    The tunnel is already build up with these below config
    interface Tunnel25
    ip unnumbered Loopback0
    tunnel destination 10.250.16.250
    tunnel mode mpls traffic-eng
    tunnel mpls traffic-eng path-option 10 explicit name test
    ip explicit-path name test enable
    next-address x.x.x.x
    next-address y.y.y.y
    router ospf 1
    mpls traffic-eng router-id Loopback0
    mpls traffic-eng area 0
    mpls traffic-eng tunnels
    nterface GigabitEthernet5/2
    mpls traffic-eng tunnels
    mpls ip
    Is there additional config needed to work ,also in the destination end for the return traffic,we want to use the normal PATH --I mean non TE tunnel.
    We tested with the above scenario,but couldn't able to reach the destination.Meantime we had a question,when the packet uses the policy map while ingress,it may not know the associatuion with VRF(Is that right? --If so ,how to make it happen)
    Any help would be really appreciated
    Thanks
    Regards
    Anantha Subramanian Natarajan

    hi Anantha!
    I might not be the right person to comment on your first question. I have not configured MVPNs yet and not very confertable with the topic.
    But I am sure that if you read through the CBTS doc thoroughly, you might be able to derive the answer yourself. One thing I notice is that " a Tunnel will be selected regularly according to the routing process (even isf it is cbts enabled). From the tunnels selected using the regular best path selection, the traffic is mapped to a perticular tunnel in the group if specific class is mapped to that tunnel.
    So a master tunnel can be the only tunnel between the 2 devices over which the routing (bgp next hops) are exchanged and all other tunnels can be members of this tunnel. So your RPF might not fail.
    You might have to explore on this a bit more and read about the co-existance of multicast and TE. This will be the same as that.
    For your second question, the answer would be easy :
    If you want a specific eompls cust to take a particular tunnel/path, just create a seperate pair of loopbacks on the PEs. Make the loopback learnt on the remote PE through the tunnel/path that you want the eompls to take. Then establish the xconnect with this loopback. I am assuming that your question is that a particular eompls session should take a particular path.
    If you meant that certain traffic from the same eompls session take a different path/tunnel, then CBTS will work.
    Regards,
    Niranjan

  • Using Tunnel interface on Router

    Hi Everyone,
    I see hew Tunnel  interface on Router.
    Router is Running OSPF.
    It has no crypto statemets.
    tunnel configuration
    interface Tunnel1
    ip address 10.4.x.x x.x.x.x
    delay 7
    tunnel source Loopback1
    tunnel destination 10.4.x.x
    My question is when we use Tunnel interface without any crypto statemets?
    Thanks
    MAhesh

    This Tunnel is a plain GRE-Tunnel. These are typically used without crypto when:
    1) The traffic is not sent through an untrusted network and a cryptographic protection is not needed.
    2) The GRE-traffic gets encrypted on a separate device if the GRE-Endpoint is not capable of doing the needed cryptographic protection.
    Sent from Cisco Technical Support iPad App

  • VPN Server with two router local network

    I just got a Mac Mini Server 2011 to set up as a home server. One of the main features I want to use is a VPN so I can access my files on my local network when I'm away from home. I live in Japan and I have a Japanese optical connection to the internet that runs through two boxes before I can use it in any form: some sort of modem, and a "gateway" which I literally just found out is also acting as a router and serving DHCP addresses. In addition, I have a 2TB Time Capsule that, until just recently, I had been using in the "Share a Public IP" mode because I didn't realize the gateway was also issuing DHCP addresses. I cannot simply plug my TC into the modem in place of the gateway - both are required to access the internet.
    Until today I had both routers using DHCP on the local networks they each created. Under that environment, I had finally configured Lion Server to file share (easy), manage network accounts (moderate), and serve Profile Manager (difficult). But despite my best efforts at mapping the ports on the Time Capsule, I just couldn't get the ports open using tools like canyouseeme.org, so the VPN was a no-go. That's when I realized the gateway could be a router too, so with some creative google searches, and extensive use of google translate, I was able to figure out how to open ports on the gateway. It does it pretty differently from the Time Capsule and other routers I've seen. It asks you define the host on the LAN (what i assume to be the target IP), the protocol (TCP vs. UDP), and then a range of ports for it to open. I plugged in the IP of the Time Capsule, opened all the UDP ports (since it was an option to just open all, and I figured 1) the TC would still protect my network and 2) it would just be a test), but I still couldn't see the ports as being open.
    So then I got desperate, and I switched the TC back to Bridge Mode, reconfigured the Server and my MBP (my client Mac) to the new IP addresses being served by the Japanese gateway, and tried again. I think I reconfigured the DNS settings in Server Admin properly to account for the change in IP, and then updated the services in Server.app, but now I can't even get to my server homepage (the apple placeholder page) using either its IP or its .private domain, and to make matters worse, I STILL can't seem to get the ports open (yes, I changed the port mapping to send it directly to the server IP as the target after the change).
    To add insult to injury, the wired ethernet connection I had been running from my TC to the MM Server is now reporting a cable unplugged (it's not), even when I plug it directly into the gateway, though I am able to connect wirelessly.
    Does anyone have any idea what's going on? Why can't I get these ports open? (By the way, I called my ISP and they said they aren't blocking any of the ones I'd want to use for VPN.)
    What is the *better* set up - using the TC as a second LAN, serving its own DHCP addresses, or using it in Bridge mode?
    Why did these changes sever my wired connection?
    I was getting even more problems (like loss of internet connectivity on all devices) using the TC in bridge mode, so I decided to go back to the dual network setup.

    Hello Eric,
    As I mentioned above.
    For external Internet access, I would create a Generation
    1 VM
    and use 2 Legacy Network Adapters for
    the Interfaces . Connect it to the External and Internal network, and then install VM Linux IPFire (How
    to install) and
    configure IPFire with RED and GREEN interface.
    You don't need router or any firewall.
    I have the same set-up that you are trying to do in your lab and it's working great.
    All my VMs / computers on the LAN have their gateway the Linux VM.
    Hope this help.
    Regards,
    Charbel Nemnom
    MCSA, MCSE, MCS, MCITP
    Blog: www.charbelnemnom.com
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • Connecting two computers with two routes?

    Yes, can I hook up two computers, each with a different router on one phone line?  I hope this makes sense.  I have one main computer hooked up to a wireless/wired router and the one in another room I want to hook up to the internet also.  Do I need another router for that other computer?  The distance on the wireless does not reach to the other computer.

    Here are my educated guess(es) :
    Perhaps you could..
    #1 use a wireless extender?
    #2 use a wireless bridge?
    #3 convert the second router into a hub/switch/wap?
    If you are the original poster (OP) and your issue is solved, please remember to click the "Solution?" button so that others can more easily find it. If anyone has been helpful to you, please show your appreciation by clicking the "Kudos" button.

  • Help !!! Static route between two router WRT160NL

    Hi all,
    I have my internet connection connect to my main Linksys router WRT160NL  (192.168.1.1) with 192.168.1.x.
    My 2nd Linksys router connect to the first one as Gateway as well.
    The 2nd router has its WAN ip of 192.168.1.100 and it's local subnet as 192.168.2.x.
    My machines at 192.168.2.x can get to the internet and connect to all machines in the 192.168.1.x network.
    However, the 1.x network can't access the machines on the 2's network. And because of that, i can not sharing or printing between two network.
    I try to add static routes on my main router (192.168.1.1) with the route: 192.168.2.0 mask 255.255.255.0 and defaute gateway 192.168.1.100
    However, the route not work still.
    anyway to make sure that the 1.x network able to access the 2.x network and from 2.x   access 1.x for sharing files and printing.
    thanks for your help!
    Solved!
    Go to Solution.

    In gateway the router does NAT which makes the LAN side inaccessible from the WAN side unless you configure port forwarding or similar. If it wouldn't do so your 192.168.1 LAN would be accessible from the internet. Static routing won't change this.
    You have to disable NAT (aka switch to router mode) on the second router. You have to set up a static route on the main router then. However, most likely your network 192.168.2.* won't have internet anymore because the main router will only do NAT for 192.168.1.* and not for 192.168.2.*.
    Thus, if possible set up the second router as access point only and run a single LAN.

  • Anyone please explain these two router stats.

    Having a (hopefully) minor glitch at the moment with what seems like a stuck IP profile, main thread here.
    A couple of other questions though.
     http://community.bt.com/t5/BB-in-Home/How-often-do-BT-reset-the-HH-remotely-and-should-it-effect-IP/...
    In the advanced stats are two connection times.
    1. Internet connection time and ADSL connection time.
        I was under the impression ADSL time is the time the hub has been on since the last reset... either by BT or by me pulling the plug. That was showing 6 days... I suspect my problems started when the HH was remotely reset. Am I correct in what this time measures ?
    2. I see there is also an "Internet connection" time... what's that ?
        It shows 1 day 14 hours. What is this figure measuring and what is it's significance ?     
    thanks

    This seems to be a common issue on this forum.
    Please take a look at this if you're trying to install via
    Terminal Services:
    http://support.microsoft.com/default.aspx?scid=kb;en-us;320185

  • Is It possible connect two router**from console port to console port

    Hi,
    I need this for doing reverse telnet.
    Thanks very much

    No
    you can connect router 1's aux port to router 2's console port.
    line aux 0
    password blablabla
    login
    modem InOut
    transport input all
    find the aux port's line number which depends on the router model then telnet to a live ip on router 1 on that port.
    Worc_3640#sh line
    Tty Typ Tx/Rx A Modem Roty AccO AccI Uses Noise Overruns Int
    0 CTY - - - - - 0 0 0/0 -
    129 AUX 9600/9600 - inout - - - 0 0 0/0 -
    * 130 VTY - - - - - 75 0 0/0 -
    so say 10.1.1.100 2129 if 10.1.1.100 is on that box.
    should get you going..
    Chris

  • HSRP + BGP - LAN interface failover occurs but BGP fails to work

    I have 2 ISP's with 2 separate routers. 1 - 3845 and 1 - 2801. The routers are connected to a 2900 Catalyst switch stack on the LAN side. My Goal is to have BGP "follow" HSRP. When HSRP fails over I would like BGP to failover as well. Currently if I test failure of the LAN interface on the master router, HSRP works correctly but BGP fails to route traffic.
    I have attached modified examples of the configs from both routers.

    @Gary,
    See attached document. Some disclaimers:
    Its the Internet, failover will not be fast. It will not be pleasant. In most cases, ( even in L3VPN scenario and on the open Internet), I've seen BGP converge in ~2 minutes. This depends on how your ISPs are connected and how your users are connected to the internet. (Waves hand vigorously, its the Internet, such is beyond the scope of this example :)
    Because of point 1 above, real-time traffic will drop during failover. But the failover is automatic so no 5am surprise while your stuck in traffic on the way into the office. Failback is also automatic ( although some people prefer users not to have two hits if at all possible. If that's the case, this isn't for you. As soon as that other active router returns to service, BGP will failback
    You should test the crap out of this in a lab environment there may be idiosyncrasies in your network I did not account for ( goes without saying)
    I would remove your track of "4.4.4.4" in the original configuration. Pinging stuff on the Internet is notoriously unreliable. More important, if it causes HSRP to switch _AND_ there's only a problem with the path to "4.4.4.4", you will have asymmetric routing within your network (i.e. egress from your site, you'll take router_b path, ingress to your site will take router_a path). Not totally as bad thing but something to be aware of. Whats more, egress path from internal network will go to router_a, come back on the 2960S stack, and then hit router_b. Again not totally a bad thing but something to think about. You can either add a direct link between router_a and router_b or track additional stuff ( I personally track Google and Microsoft's anycast DNS servers). The former solves the "back through stack" problem; the latter solves the "no one cares about pings / transient internet pathing problem"
    One last thing. It occurred to me: What happens in this scenario:
    router_a ebgp with ISPA is up. ( Or router_a bgp is down but link is up/up?)
    router_a is up as well
    From router_b, path to router_a is up
    You get a blackhole for your site prefixes. This is because router_b still does not advertise your site prefixes because it still has the ISPA connected /30 in is BGP RIB. The workaround is to condition the announcement on the existence of prefixes originated from ISPA directly ( see doc).  If you don't have such routes, you don't have a direct connection to ISPA and that verifies that router_a is no longer a viable ingress/egress point.
    I'll make one last commentary: All these mechanisms -- EEM scripts, BGP conditional announcement, IP SLA tracking, etc-- add complexity. Not strictly a bad thing, but I like to keep things simple and avoid turning knobs where possible. That said, you wouldn't have to go through these theatrics to cover the failure cases if you had a direct link between router_a and router_b, I would seriously consider making it so.
    If you can't spring for an EHWIC, you could recreate your edge network by connecting both interfaces on your edge routers to the 2960S. Both ISPs would connect to either 2960S switch. Logically, you establish a full mesh eBGP sessions between your routers and your ISPs. But that's just trading one complexity for another. I'd spring for the EHWIC and add a link between your routers...
    Mark if you find helpful. Come back and show me your results as well...

  • HSRP using sub-interfaces,

    I'm planning a design that will need two 2950s to support 4 vlans. Non-local traffic will be routed out via one of two HSRP routers (one pair of vlans using router 1 as a primary, the other pair using router 2).
    I've dug around the cisco documentation but can't find an answer to the following...
    Does HSRP run ok over sub-interfaces?
    For example, VLAN 1 default gateway will be HSRP (virtual) router's f0/0.1 x.x.x.x, VLAN 2 default gateway will be HSRP router's f0/0.2 x.x.x.x, etc.
    Any ideas?

    Hi Dwatson,
    YES, HSRP supports on sub-interfaces also & there wouldn't be any problems.YES the default gateway would be the HSRP standby ip address specified on the sub-interface for the vlans.
    eg.
    Router A
    interface FastEthernet0/0.1
    description ***ABC***
    encapsulation dot1Q 1
    ip address 172.16.1.2 255.255.0.0
    standby 1 ip 172.16.1.1
    standby 1 timers 5 15
    standby 1 priority 108
    standby 1 preempt
    Router B
    interface FastEthernet0/0.1
    description ***ABC***
    encapsulation dot1Q 1
    ip address 172.16.1.3 255.255.0.0
    standby 1 ip 172.16.1.1
    standby 1 timers 5 15
    standby 1 priority 109
    standby 1 preempt
    Note donot give any ip address on the fastethernet interface.
    interface fasthethernet 0/0
    no ip address
    hope this helps.
    rate this post if cleared

Maybe you are looking for