Implementing FHRP

[ankitohc]

Hello Expert,

I am trying to implement the FHRP. I have added two core switches to R1. I still did not assign any IP address to interface before I start doing that. I want to know Is this topology okay for FHRP implementation or I want to make any changes.

[Martin L]

Yes, topology is fine.  I would add etherchannel with 2 links between L2 and L3 switches or another connection from access switch to different L3 switch 

Regards, ML
**Please Rate All Helpful Responses **

[DanielP211]

Hello!

The topology is as it should be. Which protocol will you use for FHRP? If you need any help configuring let us know.

BR

[MHM Cisco World]

This topolgy not need Any FHRP.

Since each access SW is connect to only one Agg SW.

If you want to config FHRP then you need to make Acc SW connect to both Agg SW (L3SW).

[M02@rt37]

Hello @ankitohc,

Connect Switch Access to both Switch Core. Configure FHRP on core for this LAN side. Different groups could be configured and hosted Gw as VIP for each LAN. Compare/Test vrrp/hsrp/glbp configurations.

Other design should be to have two routers actings as Gw FHRP for LANs. For ISP side, add a Switch between ISP and the two Routers and add an other FHRP group for this side.

[ankitohc]

Thank you all for your response. I have added one more router. I have configured the R1 and R2 with HSRP and it's working fine however now I want to do the HSRP on the l3 switch. Which interface do I need to select to do that? e0/0,  e1/2 on L3 switches, and client machines are taking router gateway If I create VLANs, Do I need to do SVI to change the gateway for client machines? I

Here is the updated topology 

[MHM Cisco World]

Why you add router to Core layer?

Friend as rule config hsrp on layer that is boundary between l2 and l3.

Here as I see do dont need hsrp on routers of core 

But you need hsrp in agg l3 SW which is boundary between l2 and l3.

You need to config SVI not physical interface for hsrp in l3 SW.

[ankitohc]

Why you add router to Core layer?

If I have a plan to add one more ISP on router 2 side then I guess we should have redundancy between two ISPs that is why I have added HSRP.

I have enabled the HSRP between two L3 Switches...

I want to have the host machine get the IP address from the new SVI but it's still taking IP addresses from mgmt router

VPCS> ip dhcp
DDORA IP 10.10.10.6/24 GW 10.10.10.1

VPCS>show v

SWcore1>show vlan

VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Et0/0, Et0/2, Et1/1, Et1/2
Et1/3, Et2/0, Et2/1, Et2/2
Et2/3, Et3/0, Et3/1, Et3/2
Et3/3, Et4/0, Et4/1, Et4/2
Et4/3, Et5/0, Et5/1, Et5/2
Et5/3, Et6/0, Et6/1, Et6/2
Et6/3, Et7/0, Et7/1, Et7/2
Et7/3, Et8/0, Et8/1, Et8/2
Et8/3, Et9/0, Et9/1, Et9/2
Et9/3
20 IT active Et0/3
30 sales active Et1/0
40 marketing active
50 accounting active
60 HSRP active Et0/1

SWcore2#show vlan

VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Et0/0, Et0/2, Et0/3, Et1/0
Et1/1, Et1/2, Et1/3
30 VLAN0030 active
60 HSRP active Et0/1
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup

DHCP

ip dhcp pool WAN
network 10.10.10.0 255.255.255.0
default-router 10.10.10.1
dns-server 8.8.8.8
!
ip dhcp pool HSRPVLAN60
network 10.10.60.0 255.255.255.0
default-router 10.10.60.3
dns-server 8.8.8.8

[MHM Cisco World]

the host DHCP request is pass as L2 until Router and also serve by local dhcp pool in L3SW.
if you remove the pool from Router you will see host get IP from L3SW.

[Martin L]

L3 switches could use routed ports, SVI ports, or even Etherchannel L3 ports. However, I would use HSRP on SVI interfaces on L3 switches; Several examples will use load balance for groups x and y where x.,y are vlans;  For example. Sw1 has SVI vlan 10 is active and vlan 20 is standby while it;s opposite on sw 2; vlan 10 is standby and vlan 20 is active one. Use priority and preemptive for that.  Yes, SVI will be default gateways for PCs in corresponding vlans.

https://www.cisco.com/c/en/us/support/docs/ip/hot-standby-router-protocol-hsrp/9281-3.html

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-11/configuration_guide/ip/b_1611_ip_9300_cg/configuring_hsrp.html

Regards, ML
**Please Rate All Helpful Responses **

[paul driver]

Hello
Based on your topology you could run MHSRP with ipsla tracking on the core switch's SVI's in order to utilize both uplinks towards the rtrs and run a IGP for dynamic routing between the cores switch's and rtrs (no need for HSRP on the rtrs)

[balaji.bandi]

On this topology you create in eve-ng or pnetlab, if you have only 1 ISP connection and R1 Fails - that not meet the needs if you really looking design

May be you can add another Layer 2 switch on the top of routers and connect ISP connection will be good test.

Its all depends on the CORE and Access Layer connection, if this Layer 2 or Layer 3 towards access switch.

[MHM Cisco World]

Why SVI not port ?

If SW have two vlan or more then you need port in l3 SW for each vlan in access SW.

Instead you can use trunk and SVI in l3SW.

That why.

[ankitohc]

Do I need to create VIP for All the Vlans created in LAN?

I want to have each VLAN assigned a different Gateway. Example- VLAN 10 then 10.10.10.1 Gateway and VLAN 20 10.10.20.1 Gateway

[ankitohc]

Do I need to create a DHCP pool for each SVI VLAN? 

Example- 10.10.20.1 VLAN 20 it should take gateway as SVI same with other VLANs?