ASR 1001-X HSRP + bridge-domain

[emichrist]

Hi!

I want to ask the question about one big problem with ASR.

My situation is like: i have two Cisco ASR1001-X (ASR1 and ASR2) using HSRP, and of course both of them have virtual IPs with virtual MACs (same on both). But for certain reasons there is bridge-domain configured on ASR1. I can't config same bridge-domain on the ASR2 due to the occurrence of L2-loop. And because of it everytime ASR2 become active gateway i need to configure bridge-domain by myself. 

So my question is there any way to configure same bridge-domain on ASR2 and  prevent L2 loop?

ASR1 config look like

Spoiler

interface TenGigabitEthernet0/1/1
description Base_to_Roff
no ip address
cdp enable
service-policy output LLQ
service instance 4 ethernet
encapsulation dot1q 4
rewrite ingress tag pop 1 symmetric
bridge-domain 4
!
service instance 6 ethernet
encapsulation dot1q 6
rewrite ingress tag pop 1 symmetric
bridge-domain 6
!
!
interface TenGigabitEthernet0/1/1.60
description Roff_FL1
encapsulation dot1Q 60
ip address 10.10.1.3 255.255.255.0
ip nat inside
standby version 2
standby 60 ip 10.10.1.1
standby 60 timers 1 3
standby 60 priority 110
standby 60 preempt
standby 60 track 200 decrement 15
cdp enable
!

show standby
TenGigabitEthernet0/1/1.60 - Group 60 (version 2)
State is Active
2 state changes, last state change 5d23h
Virtual IP address is 10.10.1.1
Active virtual MAC address is 0000.0c9f.f01f (MAC In Use)
Local virtual MAC address is 0000.0c9f.f01f (v2 default)
Hello time 1 sec, hold time 3 sec
Next hello sent in 0.576 secs
Preemption enabled
Active router is local
Standby router is 10.10.1.4, priority 100 (expires in 2.528 sec)
Priority 110 (configured 110)
Track object 200 state Up decrement 15
Group name is "hsrp-Te0/1/1.60-60" (default)

[Hector Gustavo Serrano Gutierrez]

Hi,

The way you introduce a Layer 2 loop into your network is not clear for me.

Could you share the complete configuration of both of your Routers (you can sanitize your IPs if you want) and let us know which Bridge Domain is the one causing you issues?

Regards.

[emichrist]

Spoiler

ASR1001-X_1#show running-config
!
hostname ASR1001-X_1
!
track 200 interface TenGigabitEthernet0/1/0 line-protocol
!
track 201 interface TenGigabitEthernet0/1/1 line-protocol
!
track 202 interface TenGigabitEthernet0/1/2 line-protocol
!
track 203 interface TenGigabitEthernet0/1/3 line-protocol
!
interface TenGigabitEthernet0/1/0
description To_Office1
no ip address
cdp enable
ip virtual-reassembly
!
interface TenGigabitEthernet0/1/0.200
description OF1_LAN
encapsulation dot1Q 200
ip address 10.10.200.3 255.255.255.0
ip nat inside
standby version 2
standby 200 ip 10.10.200.1
standby 200 timers 1 3
standby 200 priority 110
standby 200 preempt
standby 200 track 200 decrement 15
standby 200 track 201 decrement 15
standby 200 track 202 decrement 15
standby 200 track 203 decrement 15
ip ospf priority 10
ip ospf cost 90
cdp enable
ip virtual-reassembly
!
interface TenGigabitEthernet0/1/1
description Base_to_Roff
no ip address
cdp enable
service-policy output LLQ
service instance 4 ethernet
encapsulation dot1q 4
rewrite ingress tag pop 1 symmetric
bridge-domain 4
!
service instance 6 ethernet
encapsulation dot1q 6
rewrite ingress tag pop 1 symmetric
bridge-domain 6
!
!
interface TenGigabitEthernet0/1/1.61
description Roff_FL1
encapsulation dot1Q 61
ip address 10.10.1.3 255.255.255.0
ip nat inside
standby version 2
standby 61 ip 10.10.1.1
standby 61 timers 1 3
standby 61 priority 110
standby 61 preempt
standby 61 track 200 decrement 15
standby 61 track 201 decrement 15
standby 61 track 202 decrement 15
standby 61 track 203 decrement 15
cdp enable
!
interface TenGigabitEthernet0/1/1.62
description Roff_FL2
encapsulation dot1Q 62
ip address 10.10.2.3 255.255.255.0
ip nat inside
standby version 2
standby 62 ip 10.10.2.3
standby 62 timers 1 3
standby 62 priority 110
standby 62 preempt
standby 62 track 200 decrement 15
standby 62 track 201 decrement 15
standby 62 track 202 decrement 15
standby 62 track 203 decrement 15
cdp enable
!
interface TenGigabitEthernet0/1/2
description To_Office3
no ip address
cdp enable
service instance 4 ethernet
encapsulation dot1q 4
rewrite ingress tag pop 1 symmetric
bridge-domain 4
!
service instance 6 ethernet
encapsulation dot1q 6
rewrite ingress tag pop 1 symmetric
bridge-domain 6
!
!
interface TenGigabitEthernet0/1/2.1
description Office3_Lan
encapsulation dot1Q 1 native
ip address 10.7.0.3 255.255.240.0
ip nat inside
standby version 2
standby 7 ip 10.7.0.1
standby 7 timers 1 3
standby 7 priority 110
standby 7 preempt
standby 7 track 200 decrement 15
standby 7 track 201 decrement 15
standby 7 track 202 decrement 15
standby 7 track 203 decrement 15
cdp enable
!
!
interface TenGigabitEthernet0/1/3
description To_Office4
no ip address
cdp enable
service instance 4 ethernet
encapsulation dot1q 4
rewrite ingress tag pop 1 symmetric
bridge-domain 4
!
service instance 6 ethernet
encapsulation dot1q 6
rewrite ingress tag pop 1 symmetric
bridge-domain 6
!
!
interface TenGigabitEthernet0/1/3.80
description MF_Lan
encapsulation dot1Q 80
ip address <ISP_IP> 255.255.255.128 secondary
ip address 10.1.68.3 255.255.255.0 secondary
ip address 10.1.0.3 255.255.128.0
ip nat inside
standby version 2
standby 20 ip 10.1.0.1
standby 20 ip 10.1.68.1 secondary
standby 20 ip <ISP_IP> secondary
standby 20 timers 1 3
standby 20 priority 110
standby 20 preempt
standby 20 track 200 decrement 15
standby 20 track 201 decrement 15
standby 20 track 202 decrement 15
standby 20 track 203 decrement 15
ntp broadcast
cdp enable
!
interface BDI4
description INTERNET
ip address <SECOND_ISP_IP.3> 255.255.255.0
ip nat outside
standby version 2
standby 30 ip <ISP_IP.1>
standby 30 timers 1 3
standby 30 priority 110
standby 30 preempt
standby 30 name BDI8
standby 30 track 200 decrement 15
standby 30 track 201 decrement 15
standby 30 track 202 decrement 15
standby 30 track 203 decrement 15
cdp enable
ip virtual-reassembly
!
router ospf 100
router-id 10.10.200.1
redistribute connected subnets
redistribute static subnets
network 10.100.200.0 0.0.0.255 area 0
default-information originate always
!

Spoiler

ASR1001-X_2#show running-config
!
hostname ASR1001-X_2
!
track 200 interface TenGigabitEthernet0/1/0 line-protocol
!
track 201 interface TenGigabitEthernet0/1/1 line-protocol
!
track 202 interface TenGigabitEthernet0/1/2 line-protocol
!
track 203 interface TenGigabitEthernet0/1/3 line-protocol
!
interface TenGigabitEthernet0/1/0
description To_Office1
no ip address
cdp enable
ip virtual-reassembly
!
interface TenGigabitEthernet0/1/0.200
description OF1_LAN
encapsulation dot1Q 200
ip address 10.10.200.4 255.255.255.0
ip nat inside
standby version 2
standby 200 ip 10.100.200.1
standby 200 timers 1 3
standby 200 preempt
standby 200 track 200 decrement 15
standby 200 track 201 decrement 15
standby 200 track 202 decrement 15
standby 200 track 203 decrement 15
ip ospf priority 9
ip ospf cost 120
ip virtual-reassembly
!
interface TenGigabitEthernet0/1/1
description Base_to_Roff
no ip address
cdp enable
!
interface TenGigabitEthernet0/1/1.61
description Roff_FL1
encapsulation dot1Q 61
ip address 10.10.1.4 255.255.255.0
ip nat inside
standby version 2
standby 61 ip 10.10.1.1
standby 61 timers 1 3
standby 61 preempt
standby 61 track 200 decrement 15
standby 61 track 201 decrement 15
standby 61 track 202 decrement 15
standby 61 track 203 decrement 15
!
interface TenGigabitEthernet0/1/1.62
description Roff_FL2
encapsulation dot1Q 32
ip address 10.10.2.4 255.255.255.0
ip nat inside
standby version 2
standby 32 ip 10.10.2.1
standby 32 timers 1 3
standby 32 preempt
standby 32 track 200 decrement 15
standby 32 track 201 decrement 15
standby 32 track 202 decrement 15
standby 32 track 203 decrement 15
!
interface TenGigabitEthernet0/1/2
description To_Office3
no ip address
cdp enable
service instance 4 ethernet
encapsulation dot1q 4
rewrite ingress tag pop 1 symmetric
bridge-domain 4
!
service instance 6 ethernet
encapsulation dot1q 6
rewrite ingress tag pop 1 symmetric
bridge-domain 6
!
!
interface TenGigabitEthernet0/1/2.1
description Office3_Lan
encapsulation dot1Q 1 native
ip address 10.7.0.4 255.255.240.0
ip nat inside
standby version 2
standby 7 ip 10.7.0.1
standby 7 timers 1 3
standby 7 preempt
standby 7 track 200 decrement 15
standby 7 track 201 decrement 15
standby 7 track 202 decrement 15
standby 7 track 203 decrement 15
cdp enable
!
interface TenGigabitEthernet0/1/3
description To_Office4
no ip address
cdp enable
!
interface TenGigabitEthernet0/1/3.80
description MF_Lan
encapsulation dot1Q 40
ip address <ISP_IP> 255.255.255.128 secondary
ip address 10.1.68.4 255.255.255.0 secondary
ip address 10.1.0.4 255.255.128.0
ip nat inside
standby version 2
standby 20 ip 10.1.0.1
standby 20 ip 10.1.68.1 secondary
standby 20 ip <ISP_IP> secondary
standby 20 timers 1 3
standby 20 preempt
standby 20 track 200 decrement 15
standby 20 track 201 decrement 15
standby 20 track 202 decrement 15
standby 20 track 203 decrement 15
!
interface BDI4
description INTERNET
ip address <SECOND_ISP_IP.4> 255.255.255.0
ip nat outside
standby version 2
standby 30 ip <SECOND_ISP_IP.1>
standby 30 timers 1 3
standby 30 preempt
standby 30 name BDI8
standby 30 track 200 decrement 15
standby 30 track 201 decrement 15
standby 30 track 202 decrement 15
standby 30 track 203 decrement 15
cdp enable
ip virtual-reassembly
!
router ospf 100
router-id 10.100.200.4
redistribute connected subnets
redistribute static subnets
network 10.100.200.0 0.0.0.255 area 0
default-information originate always
!

This is show run from all interfaces. L2 loop apear every time i put the strings below on the interfaces TenGigabitEthernet0/1/1 and TenGigabitEthernet0/1/3

service instance 4 ethernet
encapsulation dot1q 4
rewrite ingress tag pop 1 symmetric
bridge-domain 4
!
service instance 6 ethernet
encapsulation dot1q 6
rewrite ingress tag pop 1 symmetric
bridge-domain 6

[emichrist]

I change a bit of all ip's and names of interfaces.

So my sh run is look like: 

Spoiler

ASR1001-X_1#show running-config
!
hostname ASR1001-X_1
!
track 200 interface TenGigabitEthernet0/1/0 line-protocol
!
track 201 interface TenGigabitEthernet0/1/1 line-protocol
!
track 202 interface TenGigabitEthernet0/1/2 line-protocol
!
track 203 interface TenGigabitEthernet0/1/3 line-protocol
!
interface TenGigabitEthernet0/1/0
description To_Office1
no ip address
cdp enable
ip virtual-reassembly
!
interface TenGigabitEthernet0/1/0.200
description OF1_LAN
encapsulation dot1Q 200
ip address 10.10.200.3 255.255.255.0
ip nat inside
standby version 2
standby 200 ip 10.10.200.1
standby 200 timers 1 3
standby 200 priority 110
standby 200 preempt
standby 200 track 200 decrement 15
standby 200 track 201 decrement 15
standby 200 track 202 decrement 15
standby 200 track 203 decrement 15
ip ospf priority 10
ip ospf cost 90
cdp enable
ip virtual-reassembly
!
interface TenGigabitEthernet0/1/1
description Base_to_Roff
no ip address
cdp enable
service-policy output LLQ
service instance 4 ethernet
encapsulation dot1q 4
rewrite ingress tag pop 1 symmetric
bridge-domain 4
!
service instance 6 ethernet
encapsulation dot1q 6
rewrite ingress tag pop 1 symmetric
bridge-domain 6
!
!
interface TenGigabitEthernet0/1/1.61
description Roff_FL1
encapsulation dot1Q 61
ip address 10.10.1.3 255.255.255.0
ip nat inside
standby version 2
standby 61 ip 10.10.1.1
standby 61 timers 1 3
standby 61 priority 110
standby 61 preempt
standby 61 track 200 decrement 15
standby 61 track 201 decrement 15
standby 61 track 202 decrement 15
standby 61 track 203 decrement 15
cdp enable
!
interface TenGigabitEthernet0/1/1.62
description Roff_FL2
encapsulation dot1Q 62
ip address 10.10.2.3 255.255.255.0
ip nat inside
standby version 2
standby 62 ip 10.10.2.3
standby 62 timers 1 3
standby 62 priority 110
standby 62 preempt
standby 62 track 200 decrement 15
standby 62 track 201 decrement 15
standby 62 track 202 decrement 15
standby 62 track 203 decrement 15
cdp enable
!
interface TenGigabitEthernet0/1/2
description To_Office3
no ip address
cdp enable
service instance 4 ethernet
encapsulation dot1q 4
rewrite ingress tag pop 1 symmetric
bridge-domain 4
!
service instance 6 ethernet
encapsulation dot1q 6
rewrite ingress tag pop 1 symmetric
bridge-domain 6
!
!
interface TenGigabitEthernet0/1/2.1
description Office3_Lan
encapsulation dot1Q 1 native
ip address 10.7.0.3 255.255.240.0
ip nat inside
standby version 2
standby 7 ip 10.7.0.1
standby 7 timers 1 3
standby 7 priority 110
standby 7 preempt
standby 7 track 200 decrement 15
standby 7 track 201 decrement 15
standby 7 track 202 decrement 15
standby 7 track 203 decrement 15
cdp enable
!
!
interface TenGigabitEthernet0/1/3
description To_Office4
no ip address
cdp enable
service instance 4 ethernet
encapsulation dot1q 4
rewrite ingress tag pop 1 symmetric
bridge-domain 4
!
service instance 6 ethernet
encapsulation dot1q 6
rewrite ingress tag pop 1 symmetric
bridge-domain 6
!
!
interface TenGigabitEthernet0/1/3.80
description MF_Lan
encapsulation dot1Q 80
ip address <ISP_IP> 255.255.255.128 secondary
ip address 10.1.68.3 255.255.255.0 secondary
ip address 10.1.0.3 255.255.128.0
ip nat inside
standby version 2
standby 20 ip 10.1.0.1
standby 20 ip 10.1.68.1 secondary
standby 20 ip <ISP_IP> secondary
standby 20 timers 1 3
standby 20 priority 110
standby 20 preempt
standby 20 track 200 decrement 15
standby 20 track 201 decrement 15
standby 20 track 202 decrement 15
standby 20 track 203 decrement 15
ntp broadcast
cdp enable
!
interface BDI4
description INTERNET
ip address <SECOND_ISP_IP.3> 255.255.255.0
ip nat outside
standby version 2
standby 30 ip <ISP_IP.1>
standby 30 timers 1 3
standby 30 priority 110
standby 30 preempt
standby 30 name BDI8
standby 30 track 200 decrement 15
standby 30 track 201 decrement 15
standby 30 track 202 decrement 15
standby 30 track 203 decrement 15
cdp enable
ip virtual-reassembly
!
router ospf 100
router-id 10.10.200.1
redistribute connected subnets
redistribute static subnets
network 10.100.200.0 0.0.0.255 area 0
default-information originate always
!

Spoiler

ASR1001-X_2#show running-config
!
hostname ASR1001-X_2
!
track 200 interface TenGigabitEthernet0/1/0 line-protocol
!
track 201 interface TenGigabitEthernet0/1/1 line-protocol
!
track 202 interface TenGigabitEthernet0/1/2 line-protocol
!
track 203 interface TenGigabitEthernet0/1/3 line-protocol
!
interface TenGigabitEthernet0/1/0
description To_Office1
no ip address
cdp enable
ip virtual-reassembly
!
interface TenGigabitEthernet0/1/0.200
description OF1_LAN
encapsulation dot1Q 200
ip address 10.10.200.4 255.255.255.0
ip nat inside
standby version 2
standby 200 ip 10.100.200.1
standby 200 timers 1 3
standby 200 preempt
standby 200 track 200 decrement 15
standby 200 track 201 decrement 15
standby 200 track 202 decrement 15
standby 200 track 203 decrement 15
ip ospf priority 9
ip ospf cost 120
ip virtual-reassembly
!
interface TenGigabitEthernet0/1/1
description Base_to_Roff
no ip address
cdp enable
!
interface TenGigabitEthernet0/1/1.61
description Roff_FL1
encapsulation dot1Q 61
ip address 10.10.1.4 255.255.255.0
ip nat inside
standby version 2
standby 61 ip 10.10.1.1
standby 61 timers 1 3
standby 61 preempt
standby 61 track 200 decrement 15
standby 61 track 201 decrement 15
standby 61 track 202 decrement 15
standby 61 track 203 decrement 15
!
interface TenGigabitEthernet0/1/1.62
description Roff_FL2
encapsulation dot1Q 32
ip address 10.10.2.4 255.255.255.0
ip nat inside
standby version 2
standby 32 ip 10.10.2.1
standby 32 timers 1 3
standby 32 preempt
standby 32 track 200 decrement 15
standby 32 track 201 decrement 15
standby 32 track 202 decrement 15
standby 32 track 203 decrement 15
!
interface TenGigabitEthernet0/1/2
description To_Office3
no ip address
cdp enable
service instance 4 ethernet
encapsulation dot1q 4
rewrite ingress tag pop 1 symmetric
bridge-domain 4
!
service instance 6 ethernet
encapsulation dot1q 6
rewrite ingress tag pop 1 symmetric
bridge-domain 6
!
!
interface TenGigabitEthernet0/1/2.1
description Office3_Lan
encapsulation dot1Q 1 native
ip address 10.7.0.4 255.255.240.0
ip nat inside
standby version 2
standby 7 ip 10.7.0.1
standby 7 timers 1 3
standby 7 preempt
standby 7 track 200 decrement 15
standby 7 track 201 decrement 15
standby 7 track 202 decrement 15
standby 7 track 203 decrement 15
cdp enable
!
interface TenGigabitEthernet0/1/3
description To_Office4
no ip address
cdp enable
!
interface TenGigabitEthernet0/1/3.80
description MF_Lan
encapsulation dot1Q 40
ip address <ISP_IP> 255.255.255.128 secondary
ip address 10.1.68.4 255.255.255.0 secondary
ip address 10.1.0.4 255.255.128.0
ip nat inside
standby version 2
standby 20 ip 10.1.0.1
standby 20 ip 10.1.68.1 secondary
standby 20 ip <ISP_IP> secondary
standby 20 timers 1 3
standby 20 preempt
standby 20 track 200 decrement 15
standby 20 track 201 decrement 15
standby 20 track 202 decrement 15
standby 20 track 203 decrement 15
!
interface BDI4
description INTERNET
ip address <SECOND_ISP_IP.4> 255.255.255.0
ip nat outside
standby version 2
standby 30 ip <SECOND_ISP_IP.1>
standby 30 timers 1 3
standby 30 preempt
standby 30 name BDI8
standby 30 track 200 decrement 15
standby 30 track 201 decrement 15
standby 30 track 202 decrement 15
standby 30 track 203 decrement 15
cdp enable
ip virtual-reassembly
!
router ospf 100
router-id 10.100.200.4
redistribute connected subnets
redistribute static subnets
network 10.100.200.0 0.0.0.255 area 0
default-information originate always
!

L2 look apear every time i try to put strings on the interface TenGigabitEthernet0/1/1 and 0/1/3

service instance 4 ethernet
encapsulation dot1q 4
rewrite ingress tag pop 1 symmetric
bridge-domain 4
!
service instance 6 ethernet
encapsulation dot1q 6
rewrite ingress tag pop 1 symmetric
bridge-domain 6