I am reading in to a network at the moment and trying get my head around how OSPF is working between a firewall cluster and 2 6500 switches with HSRP.
When I look at the routing table on both firewalls they are learning all the internal routes from the core however the next hop for those networks is the physical IP address of the HSRP standby device.
Is this a problem? Should it not be the HSRP address? Whats the best way to debug this?
That is correct the next hop would not be the HSRP VIP. However I am guessing it should probably be using the active HSRP IP as its next hop but without knowing your network I can't say for certain that this setup is a problem.
If you were doing static routing on the firewall then the next hop would be the HSRP VIP in order to provide for redundancy. In your case redundancy is achieved with OSPF.
[toc:faq]The ProblemOn traditional switches whenever we have a trunk
interface we use the VLAN tag to demultiplex the VLANs. The switch needs
to determine which MAC Address table to look in for a forwarding
decision. To do this we require the switch to do...
[toc:faq]Introduction:Netdr is a tool available on a RSP720, Sup720 or
Sup32 that allows one to capture packets on the RP or SP inband. The
netdr command can be used to capture both Tx and Rx packets in the
software switching path. This is not a substitut...
IntroductionOSPF, being a link-state protocol, allows for every router
in the network to know of every link and OSPF speaker in the entire
network. From this picture each router independently runs the Shortest
Path First (SPF) algorithm to determine the b...