06-25-2009 06:59 AM - edited 03-06-2019 06:27 AM
Hi all
I am having difficulty getting HSRP working beween two 2811 routers. When I type 'show standby' both routers think that they are active, and that the other is 'unknown'.
If I do a 'debug standby packets', I can see that 2811-1 is sending and receiving HSRP packets, but that 2811-2 is only sending, but not receiving HSRP packets.
Both routers can ping each other without a problem, indicating that the VLAN trunking between the switches is working correctly.
I know that HSRP uses muticasts, but there is absolutely nothing configured on the switches to block broadcasts or multicasts. (there is also no L3 VLAN on the 4006 switches).
Any idea how I can troubleshoot this further?
Thanks
06-25-2009 07:06 AM
Can you post the configs from both routers?
HTH,
John
06-25-2009 07:09 AM
Hello,
Could you post the debug output of both the routers ,just need to check the you are using the same VIP on the same SVI with correct subnet.
Thanks
Prasad
06-25-2009 07:22 AM
#2811-1
interface FastEthernet0/0
ip address 192.168.104.148 255.255.255.240 secondary
ip address 192.168.104.149 255.255.255.240
load-interval 30
duplex full
speed 100
standby 55 ip 192.168.104.153
standby 55 priority 110
show standby outout:
-----------------------
FastEthernet0/0 - Group 55
State is Active
2 state changes, last state change 06:16:11
Virtual IP address is 192.168.104.153
Active virtual MAC address is 0000.0c07.ac37
Local virtual MAC address is 0000.0c07.ac37 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 2.760 secs
Preemption disabled
Active router is local
Standby router is unknown
Priority 110 (configured 110)
IP redundancy name is "hsrp-Fa0/0-55" (default)
debug standby packets all output:
------------------------------------
*Jun 25 15:15:03.514: HSRP: Fa0/0 Grp 55 Hello in 192.168.104.152 Active pri 1
00 vIP 192.168.104.153
*Jun 25 15:15:03.514: HSRP: Fa0/0 Grp 55 Coup out 192.168.104.149 Active pri 1
10 vIP 192.168.104.153
*Jun 25 15:15:03.514: HSRP: Fa0/0 Grp 55 Hello out 192.168.104.149 Active pri 1
10 vIP 192.168.104.153
*Jun 25 15:15:04.034: HSRP: Fa0/0 Grp 55 Hello out 192.168.104.149 Active pri 1
10 vIP 192.168.104.153
*Jun 25 15:15:06.374: HSRP: Fa0/0 Grp 55 Hello in 192.168.104.152 Active pri 1
00 vIP 192.168.104.153
*Jun 25 15:15:06.378: HSRP: Fa0/0 Grp 55 Coup out 192.168.104.149 Active pri 1
10 vIP 192.168.104.153
*Jun 25 15:15:06.378: HSRP: Fa0/0 Grp 55 Hello out 192.168.104.149 Active pri 1
10 vIP 192.168.104.153
*Jun 25 15:15:06.514: HSRP: Fa0/0 Grp 55 Hello in 192.168.104.152 Active pri 1
00 vIP 192.168.104.153
*Jun 25 15:15:06.514: HSRP: Fa0/0 Grp 55 Coup out 192.168.104.149 Active pri 1
10 vIP 192.168.104.153
*Jun 25 15:15:06.514: HSRP: Fa0/0 Grp 55 Hello out 192.168.104.149 Active pri 1
10 vIP 192.168.104.153
-----------------------------------------------------------------------------------------------------------
#2811-2
interface FastEthernet0/0
ip address 192.168.104.152 255.255.255.240
ip accounting output-packets
load-interval 30
duplex full
speed 100
standby 55 ip 192.168.104.153
show standby outout:
-----------------------
FastEthernet0/0 - Group 55
State is Active
2 state changes, last state change 00:04:59
Virtual IP address is 192.168.104.153
Active virtual MAC address is 0000.0c07.ac37
Local virtual MAC address is 0000.0c07.ac37 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 0.424 secs
Preemption disabled
Active router is local
Standby router is unknown
Priority 100 (default 100)
IP redundancy name is "hsrp-Fa0/0-55" (default)
debug standby packets all output:
----------------------------------
Jun 25 15:20:23.110: HSRP: Fa0/0 Grp 55 Hello out 192.168.104.152 Active pri 1
00 vIP 192.168.104.153
*Jun 25 15:20:23.390: HSRP: Fa0/0 Grp 55 Hello out 192.168.104.152 Active pri 1
00 vIP 192.168.104.153
*Jun 25 15:20:26.110: HSRP: Fa0/0 Grp 55 Hello out 192.168.104.152 Active pri 1
00 vIP 192.168.104.153
*Jun 25 15:20:29.110: HSRP: Fa0/0 Grp 55 Hello out 192.168.104.152 Active pri 1
00 vIP 192.168.104.153
*Jun 25 15:20:32.110: HSRP: Fa0/0 Grp 55 Hello out 192.168.104.152 Active pri 1
00 vIP 192.168.104.153
*Jun 25 15:20:32.382: HSRP: Fa0/0 Grp 55 Hello out 192.168.104.152 Active pri 1
00 vIP 192.168.104.153
*Jun 25 15:20:35.110: HSRP: Fa0/0 Grp 55 Hello out 192.168.104.152 Active pri 1
00 vIP 192.168.104.153
More information: If I connect both routers to the same switch, the problem disappears. Does this indicate a problem on the switches?
06-25-2009 07:24 AM
It could. What does the SVI look like on both switches that connect to each other? Are the vlans that this subnet connected to allowed on both sides of the trunk?
06-25-2009 07:27 AM
Yes, the VLANs are created on both switches, and no VLANs are denied on the trunk. In addition, the routers can ping each other across the VLAN.
It looks like multicast packets are being blocked, but in one direction only.
06-25-2009 07:29 AM
When you're pinging, are you sourcing from this address?
Also, do you have any acl's on any of the interfaces?
06-25-2009 07:31 AM
If I do 'show ip route' for the IP of the mate, it shows 'connected', so they are definitely pinging across the VLAN.
There are no ACLs on any of the router or switch interfaces.
06-25-2009 07:34 AM
What kind of a switch is it? And can you post the config of the port channel interface, the ports that the routers connect to, and the SVI (if it's a L3 switch)?
06-25-2009 07:35 AM
OK, problem solved - I switched off VLAN pruning on the VTP server switch, and immediately everything started working.
Thanks for the help!
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: