Hi Anyone,
Please kindly help for my issue. I have two core switches (C6509 with SUP 720) and using hsrp.
The problem is I cannot not ping to secondary IP: 10.51.20.250 (eg below config) from other network.
I can ping to the VIP: 10.51.20.254 and primary IP: 10.51.20.251.
But I can ping to 10.51.20.250 from CS-2. I encounter this issue for many VLANs.
Here below is the config for VLAN 41 of both CS. The strange thing is I can ping to 10.51.20.250 from other network if I change ACL to
permit icmp any any echo
permit icmp any any echo-reply
Can it be config issue or IOS bug issue?
=====Core Switch 1===========
interface Vlan41
ip address 10.51.20.250 255.255.255.0
ip access-group test_icmp in
no ip redirects
standby 41 ip 10.51.20.254
standby 41 priority 205
standby 41 preempt
!
ip access-list test_icmp
permit ip 10.51.20.0 0.0.0.255 host 224.0.0.2
permit icmp 10.51.20.0 0.0.0.255 any echo
permit icmp 10.51.20.0 0.0.0.255 any echo-reply
=====Core Switch 2===========
interface Vlan41
ip address 10.51.20.251 255.255.255.0
ip access-group test_icmp in
no ip redirects
standby 41 ip 10.51.20.254
standby 41 priority 210
standby 41 preempt
!
ip access-list test_icmp
permit ip 10.51.20.0 0.0.0.255 host 224.0.0.2
permit icmp 10.51.20.0 0.0.0.255 any echo
permit icmp 10.51.20.0 0.0.0.255 any echo-reply
==============================
Thanks,
Ye Naung Oo
