HSRP problem

osiristrading · ‎06-25-2009

Hi all

I am having difficulty getting HSRP working beween two 2811 routers. When I type 'show standby' both routers think that they are active, and that the other is 'unknown'.

If I do a 'debug standby packets', I can see that 2811-1 is sending and receiving HSRP packets, but that 2811-2 is only sending, but not receiving HSRP packets.

Both routers can ping each other without a problem, indicating that the VLAN trunking between the switches is working correctly.

I know that HSRP uses muticasts, but there is absolutely nothing configured on the switches to block broadcasts or multicasts. (there is also no L3 VLAN on the 4006 switches).

Any idea how I can troubleshoot this further?

Thanks

John Blakley · ‎06-25-2009

Can you post the configs from both routers?

HTH,

John

HTH, John *** Please rate all useful posts ***

Manish Prasad · ‎06-25-2009

Hello,

Could you post the debug output of both the routers ,just need to check the you are using the same VIP on the same SVI with correct subnet.

Thanks

Prasad

osiristrading · ‎06-25-2009

#2811-1

interface FastEthernet0/0

ip address 192.168.104.148 255.255.255.240 secondary

ip address 192.168.104.149 255.255.255.240

load-interval 30

duplex full

speed 100

standby 55 ip 192.168.104.153

standby 55 priority 110

show standby outout:

-----------------------

FastEthernet0/0 - Group 55

State is Active

2 state changes, last state change 06:16:11

Virtual IP address is 192.168.104.153

Active virtual MAC address is 0000.0c07.ac37

Local virtual MAC address is 0000.0c07.ac37 (v1 default)

Hello time 3 sec, hold time 10 sec

Next hello sent in 2.760 secs

Preemption disabled

Active router is local

Standby router is unknown

Priority 110 (configured 110)

IP redundancy name is "hsrp-Fa0/0-55" (default)

debug standby packets all output:

------------------------------------

*Jun 25 15:15:03.514: HSRP: Fa0/0 Grp 55 Hello in 192.168.104.152 Active pri 1

00 vIP 192.168.104.153

*Jun 25 15:15:03.514: HSRP: Fa0/0 Grp 55 Coup out 192.168.104.149 Active pri 1

10 vIP 192.168.104.153

*Jun 25 15:15:03.514: HSRP: Fa0/0 Grp 55 Hello out 192.168.104.149 Active pri 1

10 vIP 192.168.104.153

*Jun 25 15:15:04.034: HSRP: Fa0/0 Grp 55 Hello out 192.168.104.149 Active pri 1

10 vIP 192.168.104.153

*Jun 25 15:15:06.374: HSRP: Fa0/0 Grp 55 Hello in 192.168.104.152 Active pri 1

00 vIP 192.168.104.153

*Jun 25 15:15:06.378: HSRP: Fa0/0 Grp 55 Coup out 192.168.104.149 Active pri 1

10 vIP 192.168.104.153

*Jun 25 15:15:06.378: HSRP: Fa0/0 Grp 55 Hello out 192.168.104.149 Active pri 1

10 vIP 192.168.104.153

*Jun 25 15:15:06.514: HSRP: Fa0/0 Grp 55 Hello in 192.168.104.152 Active pri 1

00 vIP 192.168.104.153

*Jun 25 15:15:06.514: HSRP: Fa0/0 Grp 55 Coup out 192.168.104.149 Active pri 1

10 vIP 192.168.104.153

*Jun 25 15:15:06.514: HSRP: Fa0/0 Grp 55 Hello out 192.168.104.149 Active pri 1

10 vIP 192.168.104.153

-----------------------------------------------------------------------------------------------------------

#2811-2

interface FastEthernet0/0

ip address 192.168.104.152 255.255.255.240

ip accounting output-packets

load-interval 30

duplex full

speed 100

standby 55 ip 192.168.104.153

show standby outout:

-----------------------

FastEthernet0/0 - Group 55

State is Active

2 state changes, last state change 00:04:59

Virtual IP address is 192.168.104.153

Active virtual MAC address is 0000.0c07.ac37

Local virtual MAC address is 0000.0c07.ac37 (v1 default)

Hello time 3 sec, hold time 10 sec

Next hello sent in 0.424 secs

Preemption disabled

Active router is local

Standby router is unknown

Priority 100 (default 100)

IP redundancy name is "hsrp-Fa0/0-55" (default)

debug standby packets all output:

----------------------------------

Jun 25 15:20:23.110: HSRP: Fa0/0 Grp 55 Hello out 192.168.104.152 Active pri 1

00 vIP 192.168.104.153

*Jun 25 15:20:23.390: HSRP: Fa0/0 Grp 55 Hello out 192.168.104.152 Active pri 1

00 vIP 192.168.104.153

*Jun 25 15:20:26.110: HSRP: Fa0/0 Grp 55 Hello out 192.168.104.152 Active pri 1

00 vIP 192.168.104.153

*Jun 25 15:20:29.110: HSRP: Fa0/0 Grp 55 Hello out 192.168.104.152 Active pri 1

00 vIP 192.168.104.153

*Jun 25 15:20:32.110: HSRP: Fa0/0 Grp 55 Hello out 192.168.104.152 Active pri 1

00 vIP 192.168.104.153

*Jun 25 15:20:32.382: HSRP: Fa0/0 Grp 55 Hello out 192.168.104.152 Active pri 1

00 vIP 192.168.104.153

*Jun 25 15:20:35.110: HSRP: Fa0/0 Grp 55 Hello out 192.168.104.152 Active pri 1

00 vIP 192.168.104.153

More information: If I connect both routers to the same switch, the problem disappears. Does this indicate a problem on the switches?

John Blakley · ‎06-25-2009

It could. What does the SVI look like on both switches that connect to each other? Are the vlans that this subnet connected to allowed on both sides of the trunk?

HTH, John *** Please rate all useful posts ***

osiristrading · ‎06-25-2009

Yes, the VLANs are created on both switches, and no VLANs are denied on the trunk. In addition, the routers can ping each other across the VLAN.

It looks like multicast packets are being blocked, but in one direction only.

John Blakley · ‎06-25-2009

When you're pinging, are you sourcing from this address?

Also, do you have any acl's on any of the interfaces?

HTH, John *** Please rate all useful posts ***

osiristrading · ‎06-25-2009

If I do 'show ip route' for the IP of the mate, it shows 'connected', so they are definitely pinging across the VLAN.

There are no ACLs on any of the router or switch interfaces.

John Blakley · ‎06-25-2009

What kind of a switch is it? And can you post the config of the port channel interface, the ports that the routers connect to, and the SVI (if it's a L3 switch)?

HTH, John *** Please rate all useful posts ***

osiristrading · ‎06-25-2009

OK, problem solved - I switched off VLAN pruning on the VTP server switch, and immediately everything started working.

Thanks for the help!