05-21-2020 02:40 AM
Below is the outputs of both HSRP status and LAN ip address where subnet mask is different for both the LAN interface of Main and Backup.
Device Type ISR4431/K9
IOS :isr4400-universalk9.16.09.05.SPA.bin
Main router not able to get response for the multicast ip for the HSRP
MAIN#ping 224.0.0.89
Type escape sequence to abort.
Sending 1, 100-byte ICMP Echos to 224.0.0.89, timeout is 2 seconds:
.
MAIN#ping 10.18.0.18 so GigabitEthernet0/0/1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.18.0.18, timeout is 2 seconds:
Packet sent with a source address of 10.18.0.17
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
MAIN#sh stand
GigabitEthernet0/0/1 - Group 1
State is Standby
10 state changes, last state change 02:36:54
Virtual IP address is 10.18.0.19
Active virtual MAC address is 0000.0c07.ac01 (MAC Not In Use)
Local virtual MAC address is 0000.0c07.ac01 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 0.560 secs
Preemption enabled
Active router is 10.18.0.18, priority 130 (expires in 9.264 sec)
Standby router is local
Priority 110 (configured 110)
Group name is "hsrp-Gi0/0/1-1" (default)
MAIN#sh run int Gi0/0/1
Building configuration...
Current configuration : 261 bytes
!
interface GigabitEthernet0/0/1
description WesternRegion-Municipality-LAN
ip address 10.18.0.17 255.255.255.240 <<< LAN subnet mask is different on backup
no ip redirects
no ip unreachables
no ip proxy-arp
standby 1 ip 10.18.0.19
=====
From Backup able to get response for HSRP multicast and LAN of Main router
STDBY#ping 10.18.0.17 so 10.18.0.18
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.18.0.17, timeout is 2 seconds:
Packet sent with a source address of 10.18.0.18
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
mss-adnet-westmunicipality-rb#ping 224.0.0.89
Type escape sequence to abort.
Sending 1, 100-byte ICMP Echos to 224.0.0.89, timeout is 2 seconds:
Reply to request 0 from 10.18.0.9, 4 ms
Reply to request 0 from 10.18.0.17, 4 ms
mss-adnet-westmunicipality-rb#sh stand
GigabitEthernet0/1 - Group 1
State is Active
8 state changes, last state change 02:38:56
Virtual IP address is 10.18.0.19
Active virtual MAC address is 0000.0c07.ac01
Local virtual MAC address is 0000.0c07.ac01 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 1.168 secs
Preemption enabled
Active router is local
Standby router is 10.18.0.17, priority 110 (expires in 8.400 sec)
Priority 130 (configured 130)
Group name is "hsrp-Gi0/1-1" (default)
mss-adnet-westmunicipality-rb#sh run int GigabitEthernet0/1
Building configuration...
Current configuration : 284 bytes
!
interface GigabitEthernet0/1
description ADNET-ADNET-West Region Municipality Backup-LAN
ip address 10.18.0.18 255.255.255.248 <<< LAN subnet mask is different on main
no ip redirects
no ip unreachables
no ip proxy-arp
standby 1 ip 10.18.0.19
Solved! Go to Solution.
05-21-2020 02:51 AM - edited 05-21-2020 02:56 AM
Hello @AHMADJ ,
the two routers should be in the same IP subnet using the SAME subnet mask.
In your configuration the backup router has a more specific subnet mask making it not able to serve end user devices with IP addresses that are out of its subnet mask but are in the subnet mask of the primary.
Besides this the backup router is not able to be a valid return path for the whole original subnet and this can break the unicast connectivity if the primary router fails.
Your design is wrong.
This is not the way to deploy HSRP on two routers.
You should fix your configuration first, using the same subnet and same subnet mask on both routers.
Then later you can deal with multicast issues if any.
Hope to help
Giuseppe
05-21-2020 02:51 AM - edited 05-21-2020 02:56 AM
Hello @AHMADJ ,
the two routers should be in the same IP subnet using the SAME subnet mask.
In your configuration the backup router has a more specific subnet mask making it not able to serve end user devices with IP addresses that are out of its subnet mask but are in the subnet mask of the primary.
Besides this the backup router is not able to be a valid return path for the whole original subnet and this can break the unicast connectivity if the primary router fails.
Your design is wrong.
This is not the way to deploy HSRP on two routers.
You should fix your configuration first, using the same subnet and same subnet mask on both routers.
Then later you can deal with multicast issues if any.
Hope to help
Giuseppe
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide