Unable to get ping reply from HSRP v2 virtual ip address

Unanswered Question
Sep 14th, 2010
User Badges:

I have problem pinging HSRPv2 ip address from my computer. My computer set the gateway as the HSRP group 1 virtual ip address.

I do not see anything wrong with my configuration, perhaps I have missed something.


Here's my ARP cache in my switch

3550-1#sh ip arp
Protocol  Address          Age (min)  Hardware Addr   Type   Interface
Internet  172.30.0.20             1   0016.d324.b3b7  ARPA   Vlan1
Internet  172.30.0.2              -   000b.be08.f480  ARPA   Vlan1
Internet  172.30.0.3             13   000c.85e5.5380  ARPA   Vlan1
Internet  172.30.0.1              -   0000.0c9f.f001  ARPA   Vlan1
Internet  172.30.0.10             0   0016.d4df.833b  ARPA   Vlan1


I used wireshark, and it seems there's no reply from 172.30.0.1


3550-1#sh standby vlan 1 1
Vlan1 - Group 1 (version 2)
  State is Active
    1 state change, last state change 00:43:13
  Virtual IP address is 172.30.0.1
  Active virtual MAC address is 0000.0c9f.f001
    Local virtual MAC address is 0000.0c9f.f001 (v2 default)
  Hello time 500 msec, hold time 1500 msec
    Next hello sent in 0.096 secs
  Preemption enabled, delay reload 10 secs
  Active router is local
  Standby router is 172.30.0.3, priority 100 (expires in 1.504 sec)
  Priority 150 (configured 150)
    Track object 1 state Up decrement 60
    Track interface FastEthernet0/1 state Up decrement 60
  Group name is "hsrp-Vl1-1" (default)


3550-2#sh standby vlan 1 1
Vlan1 - Group 1 (version 2)
  State is Standby
  Virtual IP address is 172.30.0.1
  Active virtual MAC address is 0000.0c9f.f001
    Local virtual MAC address is 0000.0c9f.f001 (v2 default)
  Hello time 500 msec, hold time 1500 msec
    Next hello sent in 0.016 secs
  Preemption enabled, delay reload 10 secs
  Active router is 172.30.0.2, priority 150 (expires in 1.264 sec)
    MAC address is 000b.be08.f480
  Standby router is local
  Priority 100 (default 100)
  Group name is "hsrp-Vl1-1" (default)


active Switch is able to ping the virtual ip address.

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.30.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms
3550-1#




My pc has the mac address of the virtual ip address:

C:\Documents and Settings\cyruslok>arp -a


Interface: 0.0.0.0 --- 0x2
  Internet Address      Physical Address      Type
  172.30.0.1            00-00-0c-9f-f0-01     dynamic


So... what happen? How come I cannot get a icmp reply from HSRP group 1 virtual ip address? Thanks.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
jorge.calvo Tue, 09/14/2010 - 23:21
User Badges:
  • Bronze, 100 points or more

Hello,


In fact you have the HSRP VIP MAC address on your PC ARP table, that is a good sign. Have you checked if the mask on your PC matches the one configured for the HSRP group and that the switch port is assigned to the right VLAN?


Regards.

rakyomin78 Wed, 09/15/2010 - 02:34
User Badges:

Hi,


Thank you for your reply.


Do you mean if my subnet mask of my pc's nic is the same as the virtual ip address's subnet mask?


standby 1 ip command does not have an option to put in the subnet mask.


My pc can actually ping to the real ip address of the active router.


The subnet I am using is 172.30.0.0/24 my nic is configured as 172.30.0.10 255.255.255.0 gateway is 172.30.0.1 (virtual ip of HSRP)

bgandhi Tue, 09/14/2010 - 23:24
User Badges:

Hi,


Do you have any ACL in place in VLAN interface.


regards,

Bhavesh

rakyomin78 Wed, 09/15/2010 - 02:36
User Badges:

Hi


Thank you for your reply.


No I do not use any ACL, and also I do not use VLAN ACL.


From wireshark the output has:


Who is 172.30.0.1? Tell 172.30.0.10. There's no reply from 172.30.0.1 of its mac address, no response was seen in wireshark from 172.30.0.1, my pc ARP cache however has the virtual ip's virtual mac address...

rakyomin78 Wed, 09/15/2010 - 02:39
User Badges:

Hi Thank you for your reply:


The real ip addresses can ping to each other. The active router can also ping to virtual ip address in my switch.


I did not keep my ipconfig/all.


But I did keep the output of ipconfig:

C:\Documents and Settings\cyruslok>ipconfig


Windows IP Configuration



Ethernet adapter Local Area Connection:


        Connection-specific DNS Suffix  . :
        IP Address. . . . . . . . . . . . : 172.30.0.10
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 172.30.0.1

Actions

This Discussion