mohammedmahmoud Fri, 08/31/2007 - 01:18


No, this is not normal, but please note that HSRP will influence the upstream of your network, if by incoming traffic you mean the downstream then its most probably a routing issue, can you elaborate more with your configuration.


Mohammed Mahmoud.

nambi_gct Fri, 08/31/2007 - 01:25

where is it coming from?Is it for the VIP.or it comes from the other side of the network?

nojpt Fri, 08/31/2007 - 02:19

Hi guys,

Thanks for the comments. I have made a little drawing to make it a bit clearer.

Interface configuration is also included on the drawing and the bandwidth utilization am getting from MRTG.

Thanks for helping!

nambi_gct Fri, 08/31/2007 - 02:54

It seems asymetric routing is happening here.

Do you have any idea about the detination IP of the traffic.Also please check if you have an entry in the MAC address table of the standby router for the dmac address of the traffic.If there is no entry then flooding is happening here.

- ping now the detination ip from the standby router and see if it stops the flooding.

- if so you need to adjust the arp time out value.

mohammedmahmoud Fri, 08/31/2007 - 03:12


HSRP is a first-hop redundancy protocol (FHRP) designed to allow for transparent fail-over of the first-hop IP router for the hosts behind it, i have never used HSRP is such topology as yours because in your case it is easy to influence the main/backup via routing between the Firewall and the 2 routers, as for your problem it is most probably a routing issue problem, can you clarify how is routing configured on the firewall.


Mohammed Mahmoud.


This Discussion