HSRP and ACLs on a nexus 7k

[ncowger]

I understand that HSRP sends a notification to 224.0.0.2  So why doesn't HSRP work between 2 routers given the following config:

ACL on both:

IP access list VoiceACL

        10 permit ip any 172.20.0.40/32

        20 permit ip any 172.20.0.65/32

        28 permit ip 224.0.0.2/32 any log

        29 permit ip any 224.0.0.2/32 log

Nexus 1:

interface Vlan1105

  ip access-group VoiceACL in

  no ip redirects

  ip address 172.20.105.3/24

  no ipv6 redirects

  ip pim sparse-mode

  ip pim dr-priority 100

  hsrp version 2

  hsrp 1105

    authentication md5 key-chain hsrp-key

    preempt

    priority 110

    ip 172.20.105.1

  ip dhcp relay address 172.20.0.40

  description ~~~~~ Wireless VoIP ~~~~~

  no shutdown

Nexus 2:

interface Vlan1105

  ip access-group VoiceACL in

  no ip redirects

  ip address 172.20.105.4/24

  no ipv6 redirects

  ip pim sparse-mode

  hsrp version 2

  hsrp 1105

    authentication md5 key-chain hsrp-key

    preempt

    ip 172.20.105.1

  ip dhcp relay address 172.20.0.40

  description ~~~~~ Wireless VoIP ~~~~~

  no shutdown

[Steve Fuller · Accepted solution]

Hi,

You have HSRP version 2 configured here which uses the destination IP multicast address of 224.0.0.102 rather than 224.0.0.2 as used by HSRP v1.

I'd suggest you update the ACL to include the 224.0.0.102 address.

Regards

[ncowger]

You are correct.  Thanks!