HSRP & Routing

[Terence Lockette]

Hello all,

I have a question regarding routing with HSRP.  We have two ASR1001s; one is used for our primary Internet and the 2nd is used for our backup Internet.  I was wondering if it is possible to point a network device, such as a firewall, to use the 2nd ASR1001 that's part of an HSRP group as it's default gateway?  This 2nd ASR1001 is the standby device for HSRP.  I wanted to point a specific subnet that is behind its own firewall to use this connection out to the internet.  If I set the firewall to the interface IP instead of the virtual IP, it's still going to route to the active HSRP router for Internet connectivity.  I want to change this behavior.  My thought would be to apply a route map.  What are your thoughts on this?

Thanks,

Terence

[mfurnival]

I don't see any 0.0.0.0 route there?

[Terence Lockette]

Yeah not sure why it's not there but the GUI shows a default route of 0.0.0.0/0 and it has to be working because stations behind the firewall can get out to the Internet.

[Terence Lockette]

Hello Mfurnival,

I figured out why it wasn't working when I changed the gateway on the firewall.  I had to activate the new network change.  Once this was done, I tested and saw that it was now routing to the backup connection.  I'm used to working with Cisco gear so when you make a change such as changing the gateway, it picks up and starts working.  Thanks again for all your help!

Regards,

Terence

[mfurnival]

Glad you got it working Terrence. A lot of vendors use this kind of method where you need to "commit" a change before it becomes active. It is good sometimes but can cause you to pull your hair out if you forget about it!