HSRP Switch

[SNABZA1ZN]

Hi

I recently changed the priority on the standby router to be (120) higher then the primary (110), which should have changed the traffic to secondary, but what happened was traffic was being sent on 1 link and received on the other. can I get an explanation why was that ?

[paul driver]

Hello

so you have preemption enabled?

standby x preempt 

res

paul

[SNABZA1ZN]

yes preemption is enabled, delay 20 sec

[Krishan PalSingh]

Hello,

You may want to look at routing configuration.

Could you paste traceroute with issue? 

[saif musa]

Hi,

could you please upload both routers configuration. it will help identifying this issue.

[SNABZA1ZN]

GigabitEthernet0/0 - Group 10
  State is Active
    845 state changes, last state change 02:49:27
  Virtual IP address is 164.88.42.1
  Active virtual MAC address is 0000.0c07.ac0a
    Local virtual MAC address is 0000.0c07.ac0a (v1 default)
  Hello time 2 sec, hold time 7 sec
    Next hello sent in 0.224 secs
  Authentication MD5, key-string
  Preemption enabled, delay min 20 secs
  Active router is local
  Standby router is unknown
  Priority 120 (configured 120)
  Group name is "hsrp-Gi0/0-10" (default)

Primary LAN Interface shut down as traffic was not over 1 link. 

GigabitEthernet0/0 - Group 10
  State is Init (interface down)
    836 state changes, last state change 02:14:01
  Virtual IP address is 164.88.42.1
  Active virtual MAC address is unknown
    Local virtual MAC address is 0000.0c07.ac0a (v1 default)
  Hello time 2 sec, hold time 7 sec
  Authentication MD5, key-string
  Preemption enabled, delay min 20 secs
  Active router is unknown
  Standby router is unknown
  Priority 110 (configured 110)
    Track object 10 state Up decrement 50
  Group name is "hsrp-Gi0/0-10" (default)

[Umesh Shetty]

Hi,

Are WAN links terminated on these routers ? If yes then the router that is configured with priority 110 is the Primary WAN circuit for the site. So any traffic that goes out takes the HSRP primary router but while coming back the primary circuit is used hence you have this asymmetric routing. 

Hope this helps

Umesh

[Joseph W. Doherty]

Just changing the virtual gateway, likely doesn't impact the return routing path (nor the converse).  I.e., they are often independent.

BTW, likewise, changing egress routing, may not impact ingress routing path usage.