strange behavior of listen router of hsrp

henrybb · ‎01-27-2003

I have a topo(6509):

-----------------| |------------

msfc1(listen)----| |msfc3(listen)

-----------------|------trunk----|------------

msfc2(standby)---| |msfc4(active)

-----------------| |------------

In HSRP group 6,msfc1 and msfc3 is listen status,msfc2 is standby status,msfc4 is active status.

when I ping a pc from the msfc,active and standby msfcs can success,but all two listen msfc can't.

All config of msfc is idential except interface ip address and standby priority.

Is there any bug of hsrp and arp?(listen router can't ping)

msfc04#ping 10.1.6.73

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.6.73, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms

msfc04#sh ip arp | include 10.1.6.73

Internet 10.1.6.73 2 0008.74ab.fd89 ARPA Vlan6

msfc02#ping 10.1.6.73

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.6.73, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms

msfc02#sh ip arp | include 10.1.6.73

Internet 10.1.6.73 0 0008.74ab.fd89 ARPA Vlan6

msfc01#ping 10.1.6.73

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.6.73, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

msfc01#ping 10.1.6.73

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.6.73, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

msfc01#ping 10.1.6.73

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.6.73, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

msfc01#ping 10.1.6.73

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.6.73, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

msfc01#ping 10.1.6.73

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.6.73, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

msfc01#ping 10.1.6.73

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.6.73, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

msfc01#ping 10.1.6.73

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.6.73, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

msfc01#ping 10.1.6.73

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.6.73, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

msfc01#sh ip arp | include 10.1.6.73

msfc01#****nothing exist in arp entry*******

msfc03#ping 10.1.6.73

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.6.73, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

msfc03#ping 10.1.6.73

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.6.73, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

msfc03#ping 10.1.6.73

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.6.73, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

msfc03#sh ip arp | include 10.1.6.73

msfc03#****nothing exist in arp entry*******

johnbroadway · ‎01-28-2003

Could you post the config for the VLAN interfaces on all 4 MSFC's ?

I carried out a similar config to this recently without this sort of issue.

John

henrybb · ‎01-28-2003

John,

thanks!

msfc01(listen)#sh run int vlan 6

Building configuration...

Current configuration:

!

interface Vlan6

ip address 10.1.6.251 255.255.255.0

ip access-group 106 out

no ip redirects

mls rp vtp-domain NET

mls rp ip

standby 6 priority 50 preempt

standby 6 ip 10.1.6.253

end

msfc01#

msfc02(standby)#sh run int vlan 6

Building configuration...

Current configuration:

!

interface Vlan6

ip address 10.1.6.252 255.255.255.0

ip access-group 106 out

no ip redirects

mls rp vtp-domain NET

mls rp ip

standby 6 priority 70 preempt

standby 6 ip 10.1.6.253

end

msfc02#

msfc03(listen)#sh run int vlan 6

Building configuration...

Current configuration:

!

interface Vlan6

ip address 10.1.6.250 255.255.255.0

ip access-group 106 out

no ip redirects

mls rp vtp-domain NET

mls rp ip

standby 6 priority 60 preempt

standby 6 ip 10.1.6.253

end

msfc03#

msfc04#sh run int vlan 6

Building configuration...

Current configuration:

!

interface Vlan6

ip address 10.1.6.254 255.255.255.0

ip access-group 106 out

no ip redirects

mls rp vtp-domain NET

mls rp ip

standby 6 priority 80 preempt

standby 6 ip 10.1.6.253

end

msfc04#

johnbroadway · ‎01-29-2003

Are you able to telnet to all of the MSFC's Vlan 6 interfaces ?

I just tested this on a setup using 3 CAT's and a total of 6 MSFC's and it worked fine on all but one (the lowest priority listening device). I'll do some further testing !

John

henrybb · ‎01-29-2003

John,

If I ping from pc to all four msfcs,all can success.And I can telnet all of the MSFC's Vlan 6 interfaces from pc.

Because my MSFC is producation enviorement , so I can't debug or shutdown . If your further testing has some result,do you mind post it here ?

thanks!

henrybb · ‎01-29-2003

Oh,this is my problem.

Suppose your vlan 6 has a MSFC can't work fine(lowest priority listening device). And you have another vlan 7 which active msfc is same with vlan 6 msfc(lowest priority listening device).

So any IP communication between vlan 6 and 7 will fail because asymmetric routing.

God save me! I suppose it is a bug of hsrp or msfc.

regards

Henry

MARCO BOHLMANN · ‎01-29-2003

Hi,

- what is the access-group 106 for ?

- are one of them reacheable via ping when the standby (2) fails or u shutdown it ?

regards

marco bohlmann

henrybb · ‎01-29-2003

Marco,

access-list 106 doen't in affect,because ping is from router internal.

my MSFC is in producation enviorment,so I can't do any test.

thanks!

Henry