cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
328
Views
0
Helpful
1
Replies

HSRP Issues

Our LAN is made up of two sites each with a 6500 and a 3750. All 4 devices are connected via fibre with the 3750s providing a redundant link should the primary link (6500-6500) fail. Diagrammatically it looks like a square.

We are running HSRP on the 6500s, and switches in critical departments are connected to both the 6500 and the 3750 so should either 6500 fail the other will take over and all traffic will pass through the 3750 to the other site and be routed by the 2nd 6500.

Everything had been working fine for months until all of a sudden we had a major network outage when all of our 2950s error disabled their uplinks to the 6500 causing a mad panic while we ran around reseting them.

As a result we have implemented error recovery on all compatible switches which is just as well because a few days ago we had the same problem, but on a smaller scale.

Inspecting the logs of the 6500 that is the primary HSRP router we found the following output.

Dec 12 05:37:49: %STANDBY-3-DUPADDR: Duplicate address 1.1.1.2 on Vlan61, sourced by 0000.0000.0000

Dec 12 05:38:42: %STANDBY-3-DUPADDR: Duplicate address 1.1.1.2 on Vlan61, sourced by 0000.0000.0000

Dec 12 05:40:07: %STANDBY-3-DUPADDR: Duplicate address 1.1.2.2 on Vlan88, sourced by 0000.0000.0000

When we do a 'show standby' we get the following output

Vlan88 - Group 0

Local state is Active, priority 110, may preempt

Hellotime 3 sec, holdtime 10 sec

Next hello sent in 2.086

Virtual IP address is 1.1.2.1 configured

Active router is local

Standby router is 1.1.2.3 expires in 8.772

Virtual mac address is 0000.0000.0000

Authentication text "xxx"

1 state changes, last state change 9w0d

IP redundancy name is "xxx" (default)

It seems strange that we get this duplicate ip address message, as if the backup router has lost connection to the primary and attempted to take over the primary role, but no recent state change has occurred.

Can anyone shed any light on this?

Thanks for your help.

1 Reply 1

glen.grant
VIP Alumni
VIP Alumni

Some where in the logs either in the 6500 or the 2950's in the log it should tell you why it errdisable the ports and you may be able to get an idea from there . If you have trunk links make sure the native vlan is the same on both ends . Make sure the hsrp timers are equal all the way around , better to leave as default . Look for any links that might have failed at the same time as the outage . Look for dirty links between devices . Check to see where the roots are for all your vlans and are they where thay are supposed to be . you certainly don't want a 2950 being the root .

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card