Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

FHRP Isolation with OTV

Hi,

I have a two datacenter where OTV is implemented, the FHRP isolation is running to segregate the gateways for the vlans.

I have one vlan which still needs to have active hsrp on DC1 and standby in DC2.

I have exclude that vlan from the vlan filterlist in order to have the virtual IP moved from one DC to the other for that vlan only.

But since I have the following vmac filtaration:

 

mac-list OTV_HSRP_VMAC_deny seq 10 deny 0000.0c07.ac00 ffff.ffff.ff00
mac-list OTV_HSRP_VMAC_deny seq 20 deny 0000.0c9f.f000 ffff.ffff.ff00
mac-list OTV_HSRP_VMAC_deny seq 30 permit 0000.0000.0000 0000.0000.0000


route-map OTV_HSRP_FILTER permit 10
  match mac-list OTV_HSRP_VMAC_deny

otv-isis default
  vpn Overlay1
    redistribute filter route-map OTV_HSRP_FILTER

 

it seems that the OTV still blocking the vmac and the hsrp is not being able to communicate between the two gateways !!

Any idea ? shoud I move for something like routing between the two gateways ? or can I exclude the hsrp group from the vmac access-list  ?!

 

Thanks in advance.

Regards

Everyone's tags (4)
3 REPLIES
Cisco Employee

Please  check the below link

Please  check the below link:

http://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/overlay-transport-virtualization-otv/white_paper_c11-702185.html#wp9001588

 

HTH

Regards

Inayath.

Community Member

Hello,As per me research, you

Hello,

As per me research, you need to allow the HSRP VMAC in the OTV_HSRP_VMAC_deny list to be able to present HSRP isolation happening.

e.g. HSRP VMAC = aaaa.bbbb.cccc

mac-list OTV_HSRP_VMAC_deny seq 1 allow aaaa.bbbb.cccc

This list is checked at control plane and will be applied to all VLANs regardless they are added in VLAN filter list or not.

I have yet to test this solution myself but hope it helps.

Regards,

Muhammad Saad

Community Member

I ran into this problem also.

I ran into this problem also.

I was able to get around the global filter on the Overlay by manually configuring the the mac addr of the HSRP Group to be outside of the default range.

in vlan 900

hsrp 900

mac-addr 0000.0000.0001

475
Views
0
Helpful
3
Replies
CreatePlease to create content