cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
689
Views
10
Helpful
9
Replies

About HSRP Authentication

t.sawamura
Level 1
Level 1

Hi all,

I will configurate two catalyst3750 using HSRP Authentication next week.

(Catalyst3750:IOS 12.2(25)SEE2)

<catalyst3750#1>

interface GigabitEthernet3/0/X

no switchport

ip address XX.XX.XX.1 255.255.255.0

standby XX ip XX.XX.XX.254

standby XX priority XX

standby XX authentication abc <----here

<catalyst3750#2>

interface GigabitEthernet3/0/X

no switchport

ip address XX.XX.XX.2 255.255.255.0

standby XX ip XX.XX.XX.254

standby XX priority XX

standby XX authentication abc <----here

I have two questions:

Firsty,If I configurate only one catalyst3750#2,the catalyst#2 can't

be authenticated for the other catalyst#1.

Can the catalyst3750#2 chaneg active status?

(of course I will configurate the second catalyst3750#1 10 min later. )

I think non-authentication has nothing to do with it.

I guess HSRP will always use authentication.

(If not specified, maybe,,,the default value is "cisco.")

Secondly,Does HSRP(Catalyst) always use authentication(default password is cisco)?

Regards,

Tadashi

9 Replies 9

royalblues
Level 10
Level 10

If you configure authentication on the primary router and not on the standby router, the standby status will reflect as unknown on both the routers.

As per my wexperience the standby will not change the status as active

Once you have configured the authentication on both the routers, the standby status will reflect both active/standby router status

By default HSRP does not use any authentication

HTH

Narayan

Thank for your replay, Narayan

But I will configurate new HSRP my situation.

(It is not an addition of HSRP Authentication. )

How do you think my situation?

(I will configurate on init status router. )

Tadashi

Tadashi,

I tested it out and the situation is same even when you configuring HSRP for the first time.

So don worry that both the routers would be active at the same time :-)

HTH, rate if it does

Narayan

Narayan,

Thank you for your helpfulness.

I would like to ask and confirm you again.Sorry.

I wrote my question again.

If I configurate only one catalyst3750#2,

the catalyst#2 can'tbe authenticated for the other catalyst#1(I don't still configurate

the second catalyst3750#1.).

Then, Can the catalyst3750#2 chaneg active status?

(I don't still configurate HSRP for the second catalyst)

I hope the communication starts only one switch. (Because, cannot configurate

the second catalyst3750#1 soon.)

Tadashi

There should not be any problem.

whenever you configure, there will always be a state where one router is configured and other is not

Narayan

Hello Narayan,

Can the catalyst3750#2 change active status?

(I still haven't configurated HSRP for the catalyst3750#1 )

Tadashi

Postscript:

I will configurate new HSRP.

(Not only HSRP Authentication)

OK?

Tadashi

Yup go ahead

Narayan

Hi Narayan,

Thanks I understand.

Tadashi

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco