cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
910
Views
0
Helpful
1
Replies

HSRP issue with behaviour i am not able to ping multicast ip

AHMADJ
Level 1
Level 1

Below is the outputs of both HSRP status and LAN ip address where subnet mask is different for both the LAN interface of Main and Backup.

 

Device Type                       ISR4431/K9

IOS :isr4400-universalk9.16.09.05.SPA.bin

                 

 

 

 

Main router not able to get response for the multicast ip for the HSRP

 

MAIN#ping 224.0.0.89

Type escape sequence to abort.

Sending 1, 100-byte ICMP Echos to 224.0.0.89, timeout is 2 seconds:

.

MAIN#ping 10.18.0.18 so GigabitEthernet0/0/1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.18.0.18, timeout is 2 seconds:

Packet sent with a source address of 10.18.0.17

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

 

MAIN#sh stand

GigabitEthernet0/0/1 - Group 1

  State is Standby

    10 state changes, last state change 02:36:54

  Virtual IP address is 10.18.0.19

  Active virtual MAC address is 0000.0c07.ac01 (MAC Not In Use)

    Local virtual MAC address is 0000.0c07.ac01 (v1 default)

  Hello time 3 sec, hold time 10 sec

    Next hello sent in 0.560 secs

  Preemption enabled

  Active router is 10.18.0.18, priority 130 (expires in 9.264 sec)

  Standby router is local

  Priority 110 (configured 110)

  Group name is "hsrp-Gi0/0/1-1" (default)

 

 

MAIN#sh run int Gi0/0/1 

Building configuration...

 

Current configuration : 261 bytes

!

interface GigabitEthernet0/0/1

description WesternRegion-Municipality-LAN

ip address 10.18.0.17 255.255.255.240  <<< LAN subnet mask is different on backup

 no ip redirects

no ip unreachables

no ip proxy-arp

standby 1 ip 10.18.0.19

 

 

=====

From Backup able to get response for HSRP multicast and LAN of Main router

 

STDBY#ping 10.18.0.17 so 10.18.0.18

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.18.0.17, timeout is 2 seconds:

Packet sent with a source address of 10.18.0.18

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

 

 

mss-adnet-westmunicipality-rb#ping 224.0.0.89

Type escape sequence to abort.

Sending 1, 100-byte ICMP Echos to 224.0.0.89, timeout is 2 seconds:

 

Reply to request 0 from 10.18.0.9, 4 ms

Reply to request 0 from 10.18.0.17, 4 ms

 

mss-adnet-westmunicipality-rb#sh stand

GigabitEthernet0/1 - Group 1

  State is Active

    8 state changes, last state change 02:38:56

  Virtual IP address is 10.18.0.19

  Active virtual MAC address is 0000.0c07.ac01

    Local virtual MAC address is 0000.0c07.ac01 (v1 default)

  Hello time 3 sec, hold time 10 sec

    Next hello sent in 1.168 secs

  Preemption enabled

  Active router is local

  Standby router is 10.18.0.17, priority 110 (expires in 8.400 sec)

  Priority 130 (configured 130)

  Group name is "hsrp-Gi0/1-1" (default)

 

 

mss-adnet-westmunicipality-rb#sh run int GigabitEthernet0/1

Building configuration...

 

Current configuration : 284 bytes

!

interface GigabitEthernet0/1

description ADNET-ADNET-West Region Municipality Backup-LAN

 ip address 10.18.0.18 255.255.255.248 <<< LAN subnet mask is different on main

no ip redirects

no ip unreachables

no ip proxy-arp

standby 1 ip 10.18.0.19

1 Accepted Solution

Accepted Solutions

Giuseppe Larosa
Hall of Fame
Hall of Fame

Hello @AHMADJ ,

the two routers should be in the same IP subnet using the SAME subnet mask.

In your configuration the backup router has a more specific subnet mask making it not able to serve end user devices with IP addresses that are out of its subnet mask but are in the subnet mask of the primary.

Besides this the backup router is not able to be a valid return path for the whole original subnet and this can break the unicast connectivity if the primary router fails.

 

Your design is wrong.

This is not the way to deploy HSRP on two routers.

 

You should fix your configuration first, using the same subnet and same subnet mask on both routers.

Then later you can deal with multicast issues if any.

 

Hope to help

Giuseppe

 

View solution in original post

1 Reply 1

Giuseppe Larosa
Hall of Fame
Hall of Fame

Hello @AHMADJ ,

the two routers should be in the same IP subnet using the SAME subnet mask.

In your configuration the backup router has a more specific subnet mask making it not able to serve end user devices with IP addresses that are out of its subnet mask but are in the subnet mask of the primary.

Besides this the backup router is not able to be a valid return path for the whole original subnet and this can break the unicast connectivity if the primary router fails.

 

Your design is wrong.

This is not the way to deploy HSRP on two routers.

 

You should fix your configuration first, using the same subnet and same subnet mask on both routers.

Then later you can deal with multicast issues if any.

 

Hope to help

Giuseppe