cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
12133
Views
6
Helpful
15
Replies

HSRP subinterfaces problem

I have configured Router 1 as follows

int gi 0/0.10

encapsulation dot1q 10

ip add 192.168.10.3

standby 10 ip 192.168.10.1

standby 10 preempt

standby 10 priority 115

and Router 2 as

int gi 0/0.10

encapsulation dot1q 10

ip add 192.168.10.2

standby 10 ip 192.168.10.1

standby 10 preempt

They are connected via a switch to the LAN segment 192.168.10.0/24

A PC with

IP: 192.168.10.50

subnet: 255.255.255.0

default-gateway: 192.168.10.1

I SIMPLY CANNOT PING 192.168.10.1 from the PC

please help

pings are going from the PC to 192.168.10.2 and 192.168.10.3 but not to 192.168.10.1

the #show standby command displays that the virtual ip is active and well

Please help

Thank you in advance

1 Accepted Solution

Accepted Solutions

Yes. It is correct that the last two hex digits should be the group number (0A for group 10).

At least we know do know why the ping from the PC is failing. The PC did an arp and the MAC address that it is working with is not the correct MAC. I believe that this incorrect MAC is a result of packet tracer not working correctly.

HTH

Rick

HTH

Rick

View solution in original post

15 Replies 15

Richard Burts
Hall of Fame
Hall of Fame

Please post the output of show standby and of show cdp neighbor from both routers. Perhaps that will provide some insight into the cause of the problem.

HTH

Rick

HTH

Rick

I have uploaded the sh standby details below

the topology is working in GNS3 but not in packet tracer

Dennis Mink
VIP Alumni
VIP Alumni

Can you ping the real IP addresses at all?  i.e. the .3 and/or .2?  




=============================
Please remember to rate useful posts, by clicking on the stars below. 

=============================

Please remember to rate useful posts, by clicking on the stars below.

yes i can ping the real addresses

I am attaching the show standby output

GigabitEthernet0/0.10 - Group 10 (version 2)

  State is Active

    4 state changes, last state change 00:04:00

  Virtual IP address is 192.168.10.1

  Active virtual MAC address is 0000.0C9F.0000

    Local virtual MAC address is 0000.0C9F.F00A (v2 default)

  Hello time 3 sec, hold time 10 sec

    Next hello sent in 0.395 secs

  Preemption disabled

  Active router is local

  Standby router is 192.168.10.2

  Priority 100 (default 100)

  Group name is hsrp--10 (default)

GigabitEthernet0/0.20 - Group 20 (version 2)

  State is Active

    5 state changes, last state change 00:03:49

  Virtual IP address is 192.168.20.1

  Active virtual MAC address is 0000.0C9F.0000

    Local virtual MAC address is 0000.0C9F.F014 (v2 default)

  Hello time 3 sec, hold time 10 sec

    Next hello sent in 0.498 secs

  Preemption disabled

  Active router is local

  Standby router is 192.168.20.2

  Priority 100 (default 100)

  Group name is hsrp--20 (default)

Hi,

I can see two strange things in your output:

GigabitEthernet0/0.10 - Group 10 (version 2)

State is Active

4 state changes, last state change 00:04:00

Virtual IP address is 192.168.10.1

Active virtual MAC address is 0000.0C9F.0000

Local virtual MAC address is 0000.0C9F.F00A (v2 default)

Hello time 3 sec, hold time 10 sec

Next hello sent in 0.395 secs

Preemption disabled

Active router is local

Standby router is 192.168.10.2

Priority 100 (default 100)

Group name is hsrp--10 (default)

If you configured

int gi 0/0.10

encapsulation dot1q 10

ip add 192.168.10.3

standby 10 ip 192.168.10.1

standby 10 preempt

standby 10 priority 115

then

a) preemtion should not be disabled,

b) priority should be 115

What is the subnet mask you configured on the interface?

Regards,

Milan

Hello,

Is this output from GNS or Packet tracer. If this is from packet tracer, are you sure that HSRP is supported?

https://learningnetwork.cisco.com/thread/14322

Also vMACs do not seem to be correct, vMAC for HSRP should start 0000.0c07.acXX

Active virtual MAC address is 0000.0C9F.0000

Local virtual MAC address is 0000.0C9F.F00A (v2 default)

Best Regards

Please rate all helpful posts and close solved questions

Best Regards Please rate all helpful posts and close solved questions

The references to support for HSRP in packet tracer are quite interesting and support my theory that this problem is really about packet tracer and not about HSRP.

Also if you read the output carefully it clearly says that the device is running HSRPv2

GigabitEthernet0/0.10 - Group 10 (version 2)

0000.0c07.acXX is the format for version 1 and not for version 2.

HTH

Rick

HTH

Rick

I too couldn't help but notice this anomaly

i have two very different outputs from GNS3 and packet tracer

this one is of packet tracer

GNS3 is working fine

HSRP is supported in packet tracer but works with single interfaces, but in case of sub-interfaces i do see a problem

Hello Blau, in the Beta version (version 6.0 beta) there is now support for HSRP. They made this available in the Cisco Academy recently (couple of months now) - although its still 'buggy' in my opinion.

My old tutor told me they're trying to make it good enough for CCNP studies and their students, so expect more enhancements for the lucky ones

It may/will become better than GNS (one day) in my view, purely because of the switch's and switching capabilities/configuration, wheras GNS, we'll be limited by the limitations of NM16-ESW module and other factors.

(sorry to have posted off topic)

Please rate useful posts & remember to mark any solved questions as answered. Thank you.

Please rate useful posts & remember to mark any solved questions as answered. Thank you.

While I might agree that these changes are probably good (it is more the way that I would typically configure HSRP) I do not see either the priority setting (or defaulting) and the lack of preemption as things that could cause a PC to not be able to ping the virtual address. So I would suggest that these changes are optional things that the original poster can consider.

I find a statement from the original poster in an earlier post to be very interesting:

the topology is working in GNS3 but not in packet tracer

This suggests to me that the problem really is in the way that packet tracer attempts simulate the operation of routers and switches and not so much is a configuration problem.

If we are going to continue to look for some problem other than a fault in packet tracer then I would like to see two things:

- I have asked before to see the output of show cdp neighbor. I believe that this would help us to be sure of the layer 2 relationships.

- I would like the original poster to test again ping from the PC to the virtual address and then to post the output of arp -a (or whatever is the equivalent command on that OS to display the PC arp table). I would like to know if the PC has received a response when it arped and if so what MAC it is using to get to the virtual address.

HTH

Rick

HTH

Rick

Hi Rick,

I was not suggesting any changes, just pointed out the discrepancy between the configuration shown in the origianl post and the show command outputs sent later.

I agree it might be a packet tracer probelm probably.

Best regards,

Milan

Milan

I interpreted your post as suggesting that the original poster make the changes. I missed the fact that the original post did show a configured priority and configured preempt. So you made a good catch that there is a discrepancy between the how output and the original post of configuration. Sorry that I did not correctly understand your post.

And ultimately I do believe that the problem is the failure of an emulator to actually do HSRP.

HTH

Rick

HTH

Rick

I too couldn't help but notice this anomaly

i have two very different outputs from GNS3 and packet tracer

this one is of packet tracer

GNS3 is working fine

HSRP is supported in packet tracer but works with single interfaces, but in case of sub-interfaces i do see a problem

I reconfigured and restarted the devices in packet tracer

the show cdp of both the devices are are correct

Device ID    Local Intrfce   Holdtme    Capability   Platform    Port ID

Switch       Gig 0/0          140            S       2960        Fas 0/1

Device ID    Local Intrfce   Holdtme    Capability   Platform    Port ID

Switch       Gig 0/0          124            S       2960        Fas 0/2

the new show standby is

GigabitEthernet0/0.10 - Group 10 (version 2)

  State is Active

    5 state changes, last state change 00:00:27

  Virtual IP address is 192.168.10.1

  Active virtual MAC address is 0000.0C9F.0000

    Local virtual MAC address is 0000.0C9F.F00A (v2 default)

  Hello time 3 sec, hold time 10 sec

    Next hello sent in 2.474 secs

  Preemption enabled

  Active router is local

  Standby router is 192.168.10.2

  Priority 115 (configured 115)

  Group name is hsrp--10 (default)

GigabitEthernet0/0.20 - Group 20 (version 2)

  State is Active

    4 state changes, last state change 00:00:19

  Virtual IP address is 192.168.20.1

  Active virtual MAC address is 0000.0C9F.0000

    Local virtual MAC address is 0000.0C9F.F014 (v2 default)

  Hello time 3 sec, hold time 10 sec

    Next hello sent in 2.499 secs

  Preemption enabled

  Active router is local

  Standby router is 192.168.20.2

  Priority 115 (configured 115)

  Group name is hsrp--20 (default)

but the pings still continue to fail

the arp -a on the virtual pc shows a mac address of

0000.0C9F.0000 associated with 192.168.20.1

and this is incorrect as the virtual mac address should be having the group number as the last two hexadecimal characters

right?

but the pings still continue to fail

the arp -a on the virtual pc shows a mac address of

0000.0C9F.0000 associated with 192.168.20.1

and this is incorrect as the virtual mac address should be having the group number as the last two hexadecimal characters

right?

Review Cisco Networking for a $25 gift card