cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1067
Views
0
Helpful
6
Replies

inconsistent HSRP state change on pair

zac ragoonath
Level 1
Level 1

You will see the active router feels that there have only been two state changes, but the standby router feels that there have been many more.

We had a brief outage last night at this location and I am curious as to if this could have been the cause of the issue.

FastEthernet0/0 - Group 11

State is Active

2 state changes, last state change 6w3d

Virtual IP address is 172.30.4.9

Active virtual MAC address is 0000.0c07.ac0b

Local virtual MAC address is 0000.0c07.ac0b (v1 default)

Hello time 2 sec, hold time 4 sec

Next hello sent in 0.704 secs

Preemption enabled

Active router is local

Standby router is 172.30.4.8, priority 110 (expires in 2.524 sec)

Priority 115 (configured 115)

Track object 100 state Up decrement 10

IP redundancy name is "hsrp-Fa0/0-11" (default)

FastEthernet0/0 - Group 11

State is Standby

118 state changes, last state change 00:49:21

Virtual IP address is 172.30.4.9

Active virtual MAC address is 0000.0c07.ac0b

Local virtual MAC address is 0000.0c07.ac0b (v1 default)

Hello time 2 sec, hold time 4 sec

Next hello sent in 0.900 secs

Preemption enabled

Active router is 172.30.4.7, priority 115 (expires in 3.080 sec)

Standby router is local

Priority 110 (configured 110)

Track object 100 state Up decrement 10

IP redundancy name is "hsrp-Fa0/0-11" (default)

6 Replies 6

lamav
Level 8
Level 8

Im assuming you have an L2 trunk between switches.

Perhaps you have an intermittent uni-directional link failure that's causing one router to not receive the HSRP hellos from the other.

Have you examined the log for clues?

How about running a debug (debug standby)? Make sure you have permission to do it before you run any debug.

HTH

Victor

I've run the debug standby and nothing out of the ordniary over 30 mins.

Here is a snapshot from both boxes.

LBC-YMQ-RTR-01#

Mar 12 21:49:36.694: HSRP: Fa0/0 Grp 11 Hello in 172.30.4.8 Standby pri 110 vIP 172.30.4.9

Mar 12 21:49:37.146: HSRP: Fa0/0 Grp 11 Hello out 172.30.4.7 Active pri 115 vIP 172.30.4.9

Mar 12 21:49:38.696: HSRP: Fa0/0 Grp 11 Hello in 172.30.4.8 Standby pri 110 vIP 172.30.4.9

Mar 12 21:49:39.149: HSRP: Fa0/0 Grp 11 Hello out 172.30.4.7 Active pri 115 vIP 172.30.4.9

Mar 12 21:49:40.698: HSRP: Fa0/0 Grp 11 Hello in 172.30.4.8 Standby pri 110 vIP 172.30.4.9

Mar 12 21:49:41.151: HSRP: Fa0/0 Grp 11 Hello out 172.30.4.7 Active pri 115 vIP 172.30.4.9

Mar 12 21:49:42.701: HSRP: Fa0/0 Grp 11 Hello in 172.30.4.8 Standby pri 110 vIP 172.30.4.9

Mar 12 21:49:43.153: HSRP: Fa0/0 Grp 11 Hello out 172.30.4.7 Active pri 115 vIP 172.30.4.9

Mar 12 21:49:44.703: HSRP: Fa0/0 Grp 11 Hello in 172.30.4.8 Standby pri 110 vIP 172.30.4.9

Mar 12 21:49:45.155: HSRP: Fa0/0 Grp 11 Hello out 172.30.4.7 Active pri 115 vIP 172.30.4.9

Mar 12 21:49:46.705: HSRP: Fa0/0 Grp 11 Hello in 172.30.4.8 Standby pri 110 vIP 172.30.4.9

Mar 12 21:49:47.158: HSRP: Fa0/0 Grp 11 Hello out 172.30.4.7 Active pri 115 vIP 172.30.4.9

Mar 12 21:49:48.707: HSRP: Fa0/0 Grp 11 Hello in 172.30.4.8 Standby pri 110 vIP 172.30.4.9

Mar 12 21:49:49.160: HSRP: Fa0/0 Grp 11 Hello out 172.30.4.7 Active pri 115 vIP 172.30.4.9

Mar 12 21:49:50.710: HSRP: Fa0/0 Grp 11 Hello in 172.30.4.8 Standby pri 110 vIP 172.30.4.9

Mar 12 21:49:51.162: HSRP: Fa0/0 Grp 11 Hello out 172.30.4.7 Active pri 115 vIP 172.30.4.9

---------------

LBC-YMQ-RTR-02#

Mar 12 21:49:40.750: HSRP: Fa0/0 Grp 11 Hello out 172.30.4.8 Standby pri 110 vIP 172.30.4.9

Mar 12 21:49:41.203: HSRP: Fa0/0 Grp 11 Hello in 172.30.4.7 Active pri 115 vIP 172.30.4.9

Mar 12 21:49:42.752: HSRP: Fa0/0 Grp 11 Hello out 172.30.4.8 Standby pri 110 vIP 172.30.4.9

Mar 12 21:49:43.205: HSRP: Fa0/0 Grp 11 Hello in 172.30.4.7 Active pri 115 vIP 172.30.4.9

Mar 12 21:49:44.755: HSRP: Fa0/0 Grp 11 Hello out 172.30.4.8 Standby pri 110 vIP 172.30.4.9

Mar 12 21:49:45.207: HSRP: Fa0/0 Grp 11 Hello in 172.30.4.7 Active pri 115 vIP 172.30.4.9

Mar 12 21:49:46.757: HSRP: Fa0/0 Grp 11 Hello out 172.30.4.8 Standby pri 110 vIP 172.30.4.9

Mar 12 21:49:47.209: HSRP: Fa0/0 Grp 11 Hello in 172.30.4.7 Active pri 115 vIP 172.30.4.9

Mar 12 21:49:48.759: HSRP: Fa0/0 Grp 11 Hello out 172.30.4.8 Standby pri 110 vIP 172.30.4.9

Mar 12 21:49:49.212: HSRP: Fa0/0 Grp 11 Hello in 172.30.4.7 Active pri 115 vIP 172.30.4.9

Mar 12 21:49:50.761: HSRP: Fa0/0 Grp 11 Hello out 172.30.4.8 Standby pri 110 vIP 172.30.4.9

Mar 12 21:49:51.214: HSRP: Fa0/0 Grp 11 Hello in 172.30.4.7 Active pri 115 vIP 172.30.4.9

Mar 12 21:49:51.967: HSRP: Fa0/0 Redirect adv out, Passive, active 0 passive 1

Mar 12 21:49:52.764: HSRP: Fa0/0 Grp 11 Hello out 172.30.4.8 Standby pri 110 vIP 172.30.4.9

Im not too sure about that.

I do see something that may or may not mean something.

Mar 12 21:49:51.967: HSRP: Fa0/0 Redirect adv out, Passive, active 0 passive 1

What is being redirected? Do you have the no ip redirect command under each Fa0/0 interface? Im not saying that that is causing these state changes ot be registered, but you should have it configured as a matter of practice.

What about the state of the L2 trunk in between switches? Any errors? Any bouncing?

Why dont you clear the log and clear the counters and lets keep an eye on it?

You can also post the config so we can take a look at it right quick.

Victor

Thanks Victor,

as far as I know no ip redirect is not configured but tell me what are you getting at?

I'll get the config from the admin tonight and post it.

ICMP is a network layer protocol that provides message packets to report errors and other information relevant to IP processing. ICMP provides diagnostic functions and can send and redirect error packets to hosts.

When running HSRP, its important to prevent hosts from discovering the interface (or real) MAC addresses of routers in the HSRP group. If a host is redirected by ICMP to the real MAC address of a router, and that router later fails, then packets from the host will be lost.

ICMP redirects are used by a router to redirect traffic to an alternate default gateway when the primary fails. But that is what HSRP and the virtual IP address is for, so the ip redirect function should be disabled, lest it interfere with normal HSRP operation.

With later versions of IOS, and depending on your switch/router model, HSRP CAN work together with ICMP redirects. HSRP will allow the diagnostic functions of ICMP fredirects but NOT the messages that actually advertise a different default gateway address. Those, HSRP will filter out.

HSRP w/ICMP redirects are supported in:

•Cisco Catalyst 5000 family switches with an installed Route Switch Module

•Cisco 1700 series

•Cisco 2600 series

•Cisco 4700 family routers

•Cisco 7100 series

•Cisco 7200 series

•Cisco 7500 series

•Cisco 12000 series

Again, Im not syaing that that is causing the problem, but you should address this issue.

Lastly, you have still not told me whether your L2 inter-switch trunk is bouncing or running errors.

You have not told me anything about the logs.

HTH

If so, kindly rate my posts.

Thanks

Victor

Hi lam,

I need your help in the following configuration. You have extensive knowledge and indepth understanding of HSRP. Please help me out in the following situtation.

I wanted to configure my network for HSRP. I have two Catalyst 4507 as core switches which are connected with cisco pix firewall. Core switches are running HSRP and have dot1q trunnking enable.

Internet Routers are also running HSRP.

Firewall ports are connected in VLAN as access ports. No trunking on pix firewall ports.

I have attched the network digram for your review. On each VLAN I have given the standby IP address. That standby IP address is gw for firwall.

1. Will that configuration works or not.

2. Any limitation of firewall access port or trunk ports.

3. Vlan configuration is right or wrong as well as standby

configuration.

Please help me out. I will be very greatful to you all.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: