HSRP Help

[bigton99]

Hi everyone,

I created a post earlier in regards to this but it got marked as spam for some reason.

I am working on a school assignment that requires me to increase the fault tolerance in my network. I added a router called "Standby" in my network using HSRP to serve as backup router for R1 and R2's network using standby 1 192.168.22.100 on R2 and Standby router and standby 2 192.168.12.100 on R1 and Standby router.

When I go to test it by removing the cable from S2 to R2, I try to ping from PC3 to R3 but it is unsuccessful but if I ping from the Standby router to R3, it goes thru. I also did the same thing on R1's network by removing the cable from S1 to R1 but the same issue  happens. I use the "show standby" command and everything looks fine. I have included screen shots below, can anybody tell me what I am missing?

Standby Router Interfaces
G0/0 - 192.168.12.5
G0/1 - 192.268.22.5
S0/1/0 - 192.168.23.1 / 192.168.23.2 on R3

[Giuseppe Larosa]

Hello @bigton99 ,

HSRP provides first hop redundancy but it is not alone a routing solution.

You need to run a routing protocol between R1,R2,R3 and standby to create a working configuration.

You probably have on R3 a static route pointing to R2 for a LAN subnet and this static route is not removed by a link fault on R2 LAN interface that is why your test fails.

When you ping from the standby routers the source address is not that of the LAN segment but it is the one of the standby router to R3.

A dynamic routing protocol like OSPF or EIGRP is what you need here.

Hope to help

Giuseppe

[bigton99]

Thank you for you reply. I used the EIGRP on all the routers but R1 is not forming an adjacency with R2 and R2 is not forming an adjacency with R3 but R2 has adjacency with Standby g0/0 and R3 has adjacency with Standby 0/1/0. Can you tell me where I went wrong? Below is my configuration. 

R1
router eigrp 1 
network 192.168.2.0 0.0.0.3 (R1 s0/1/0)
network 192.168.12.0 0.0.0.255 (R1 G0/0)

R2
router eigrp 1
network 192.168.2.0 0.0.0.3 (R2 s0/1/0)
network 192.168.3.0 0.0.0.3 (R2 s0/0/0)
network 192.168.22.0 0.0.0.255 (R2 g0/0)

R3
router eigrp 1
network 192.168.3.0 0.0.0.3 (R3 s0/0/0)
network 192.168.23.0 0.0.0.15 (s0/1/0 from standby)
network 192.168.32.0 0.0.0.255 (R3 g0/0)
network 15.127.122.1 0.0.0.15(R3 s0/0/1)

Standby
router eigrp 1
network 192.168.12.0 0.0.0.255 (Standby g0/0)
network 192.168.22.0 0.0.0.255 (Standby g0/1)
network 192.168.23.0 0.0.0.15 (Standby s0/1/0)

[Abzal]

Hi,

Please share output below from R1,R2,R3 and standby routers:

sh ip protocols

sh ip eigrp interfaces

sh ip eigrp ne

[bigton99]

sh ip protocols

  

sh ip eigrp interfaces & sh ip eigrp ne output

[Abzal]

So I see nothing wrong with EIGRP config. Please show running-config from R1/2/3 and standby routers.

[bigton99]

R1 spanning-tree mode pvst ! interface GigabitEthernet0/0 ip address 192.168.12.1 255.255.255.0 duplex auto speed auto standby 2 ip 192.168.12.100 standby 2 priority 110 standby 2 preempt interface Serial0/1/0 ip address 192.168.2.1 255.255.255.252 clock rate 2000000 interface Vlan1 no ip address shutdown router eigrp 1 network 192.168.2.0 0.0.0.3 network 192.168.12.0 ! ip classless ip route 0.0.0.0 0.0.0.0 192.168.22.2 ! ip flow-export version 9 no cdp run line con 0 line aux 0 line vty 0 4 login end

R2 spanning-tree mode pvst interface GigabitEthernet0/0 ip address 192.168.22.1 255.255.255.0 ip access-group HOST_ACCESS in duplex auto speed auto standby 1 ip 192.168.22.100 standby 1 priority 105 standby 1 preempt interface Serial0/0/0 ip address 192.168.3.1 255.255.255.252 clock rate 2000000 interface Serial0/1/0 ip address 192.168.2.2 255.255.255.252 clock rate 2000000 ! interface Vlan1 no ip address shutdown router eigrp 1 network 192.168.2.0 0.0.0.3 network 192.168.3.0 0.0.0.3 network 192.168.22.0 ! ip classless ip route 0.0.0.0 0.0.0.0 192.168.12.1 ip route 0.0.0.0 0.0.0.0 192.168.32.1 ! ip flow-export version 9 ! ip access-list extended BLOCK_WEB deny tcp host 192.168.22.2 host 172.16.1.2 eq www deny tcp host 192.168.22.3 host 172.16.1.2 eq www permit ip any any ip access-list extended HOST_ACCESS permit ip host 192.168.22.2 192.168.12.0 0.0.0.255 deny ip 192.168.22.0 0.0.0.255 192.168.12.0 0.0.0.255 permit ip any any ! no cdp run ! line con 0 ! line aux 0 ! line vty 0 4 login end

R3 spanning-tree mode pvst ! interface GigabitEthernet0/0 ip address 192.168.32.1 255.255.255.0 ip access-group REMOTE_ACCESS in duplex auto speed auto ! interface Serial0/0/0 ip address 192.168.3.2 255.255.255.252 ip access-group REMOTE_ACCESS in clock rate 2000000 ! interface Serial0/0/1 ip address 15.127.122.1 255.255.255.240 ip access-group WEB_RESPONSE in ip access-group WEB_ACCESS out clock rate 2000000 ! interface Serial0/1/0 ip address 192.168.23.2 255.255.255.240 ! interface Vlan1 no ip address shutdown ! router eigrp 1 network 192.168.3.0 0.0.0.3 network 192.168.32.0 network 192.168.23.0 0.0.0.15 network 15.127.122.0 0.0.0.15 ! ip classless ip route 0.0.0.0 0.0.0.0 15.127.122.2 ip route 0.0.0.0 0.0.0.0 192.168.22.1 ! ip flow-export version 9 ! ip access-list extended REMOTE_ACCESS permit tcp host 192.168.12.2 host 192.168.32.1 eq 22 permit tcp host 192.168.12.2 host 192.168.32.1 eq telnet deny tcp any any eq 22 deny tcp any any eq telnet permit ip any any ip access-list extended WEB_ACCESS permit tcp any host 172.16.1.2 eq www ip access-list extended WEB_RESPONSE permit tcp host 172.16.1.2 any established ! no cdp run ! line con 0 ! line aux 0 ! line vty 0 4 password cisco login line vty 5 15 password cisco login end

Standby spanning-tree mode pvst ! interface GigabitEthernet0/0 ip address 192.168.12.5 255.255.255.0 duplex auto speed auto standby 2 ip 192.168.12.100 ! interface GigabitEthernet0/1 ip address 192.168.22.5 255.255.255.0 duplex auto speed auto standby 1 ip 192.168.22.100 standby 1 preempt ! interface Serial0/1/0 ip address 192.168.23.1 255.255.255.240 clock rate 2000000 ! interface Vlan1 no ip address shutdown ! router eigrp 1 network 192.168.12.0 network 192.168.22.0 network 192.168.23.0 0.0.0.15 ! ip classless ! ip flow-export version 9 ! line con 0 ! line aux 0 ! line vty 0 4 login end

[bigton99]

I have included it below, I have checked everything but I have no idea why the PC's from R2's network cannot ping to R3 through the Standby router