Hi all
Hope you'll be able to help
We have 2 core switches and 2 access switches and 1 firewall
The core switches have HSRP Configured on all vlans where core 1 is is active for 2,3,4,5,6 and core 2 is active for vlan 90,21,100.
the vlans are also configurd with a IPsla the is pinging 8.8.8.8 so that if one of the links to firewall goes down the core with a active link to the firewall becomes the active HSRP for all vlans.
However when we test this by disconnecting one of links to the firewall we can see that the HSRP swaps over. BUT the vlans that swaps over virtual IP is not pingable but both vlan interfaces are. Please don't mind vlan 60 and 61
If you have any suggestions they are much apricated!
the script that is used for core 1
hostname DKARR-CSW01
!
banner motd '*******************************************************************************
*******************************************************************************
*******************************************************************************
***** *****
***** *****
***** Electrotech Solutions *****
***** *****
***** Maa kun anvendes til formaal godkendt af ETS IT administration *****
***** Uautoriseret adgang forbudt *****
***** *****
***** May only be used for purposes authorized by ETS IT management *****
***** Unauthorized access prohibited *****
***** *****
***** *****
***** *****
*******************************************************************************
*******************************************************************************
*******************************************************************************'
!
ip routing
ip domain name ets.local
crypto key generate rsa modulus 2048
ip ssh ver 2
line vty 0 4
access-class SSH-ACCESS in
transport input ssh
login local
line vty 5 15
access-class SSH-ACCESS in
transport input ssh
login local
exit
!
ip access-list standard SSH-ACCESS
permit 10.1.6.0 0.0.0.255
permit 10.1.90.0 0.0.0.255
!
vlan 2
vlan 3
vlan 4
vlan 5
vlan 6
vlan 60
vlan 61
vlan 90
vlan 91
vlan 999
!
interface vlan 999
description BLACKHOLE
no shutdown
!
interface range gig1/0/23-24
description Uplink- port-channel 1
channel-group 1 mode active!
!
interface Port-channel1
description Uplink-CSW02
switchport trunk native vlan 91
switchport mode trunk
!
interface vlan 2
description Accounting
ip address 10.1.2.252 255.255.255.0
ip helper-address 10.1.100.1
ip helper-address 10.1.100.2
standby 2 ip 10.1.2.254
standby 2 priority 110
standby 2 preempt
standby 2 track 1 decrement 20
!
interface vlan 3
description Sales
ip address 10.1.3.252 255.255.255.0
ip helper-address 10.1.100.1
ip helper-address 10.1.100.2
standby 3 ip 10.1.3.254
standby 3 priority 110
standby 3 preempt
standby 3 track 1 decrement 20
!
interface vlan 4
description Administration
ip address 10.1.4.252 255.255.255.0
ip helper-address 10.1.100.1
ip helper-address 10.1.100.2
standby 4 ip 10.1.4.254
standby 4 priority 110
standby 4 preempt
standby 4 track 1 decrement 20
!
interface vlan 5
description WiFi-Client
ip address 10.1.5.252 255.255.255.0
ip helper-address 10.1.100.1
ip helper-address 10.1.100.2
standby 5 ip 10.1.5.254
standby 5 priority 110
standby 5 preempt
standby 5 track 1 decrement 20
!
interface vlan 6
description IT
ip address 10.1.6.252 255.255.255.0
ip helper-address 10.1.100.1
ip helper-address 10.1.100.2
standby 6 ip 10.1.6.254
standby 6 priority 110
standby 6 preempt
standby 6 track 1 decrement 20
!
interface vlan 90
description Server-Management
ip address 10.1.90.252 255.255.255.0
ip helper-address 10.1.100.1
ip helper-address 10.1.100.2
standby 90 ip 10.1.90.254
standby 90 preempt
!
interface vlan 91
description Network-Management
ip address 10.1.91.252 255.255.255.0
ip helper-address 10.1.100.1
ip helper-address 10.1.100.2
standby 91 ip 10.1.91.254
Standby 91 preempt
!
interface vlan 100
description Server
ip address 10.1.100.252 255.255.255.0
ip helper-address 10.1.100.1
ip helper-address 10.1.100.2
standby 100 ip 10.1.100.254
standby 100 preempt
!
interface vlan 60
description DMZ
ip address 192.168.0.252 255.255.255.0
standby 60 ip 192.168.0.254
!
interface vlan 61
description WiFi-Guset
ip address 192.168.1.252 255.255.255.0
ip helper-address 10.1.100.1
ip helper-address 10.1.100.2
ip access-group GuestWifi in
standby 61 ip 192.168.1.254
standby 61 priority 110
standby 61 preempt
standby 61 track 1 decrement 20
!
interface gig1/0/3
description group-channel2
channel-group 2 mode active
no switchport
no shutdown
!
interface gig1/0/4
description group-channel2
channel-group 2 mode active
no switchport
no shutdown
!
interface port-channel 2
description Uplink-Fw
no switchport
ip address 172.21.1.2 255.255.255.252
no shutdown
!
interface gig1/0/1
description Uplink->DKAAR-ASW01
switchport mode trunk
switchport trunk native vlan 91
no shutdown
!
interface gig1/0/2
description Uplink->DKAAR-ASW02
switchport mode trunk
switchport trunk native vlan 91
no shutdown
!
router ospf 1
redistribute connected
network 172.21.1.0 0.0.0.3 area 0
!
interface range gig1/0/5-22
description Disabled-Port
switchport access vlan 999
switchport mode access
shutdown
!
ip sla 1
icmp-echo 8.8.8.8 source-ip 10.1.91.252
frequency 5
exit
!
ip sla schedule 1 life forever start-time now
track 1 ip sla 1 reachability
the script that is used for core 2
en
conf t
hostname DKARR-CSW02
!
banner motd '*******************************************************************************
*******************************************************************************
*******************************************************************************
***** *****
***** *****
***** Electrotech Solutions *****
***** *****
***** Maa kun anvendes til formaal godkendt af ETS IT administration *****
***** Uautoriseret adgang forbudt *****
***** *****
***** May only be used for purposes authorized by ETS IT management *****
***** Unauthorized access prohibited *****
***** *****
***** *****
***** *****
*******************************************************************************
*******************************************************************************
*******************************************************************************'
!
ip routing
ip domain name ets.local
crypto key generate rsa modulus 2048
ip ssh ver 2
line vty 0 4
access-class SSH-ACCESS in
transport input ssh
login local
line vty 5 15
access-class SSH-ACCESS in
transport input ssh
login local
exit
!
ip access-list standard SSH-ACCESS
permit 10.1.6.0 0.0.0.255
permit 10.1.90.0 0.0.0.255
!
vlan 2
vlan 3
vlan 4
vlan 5
vlan 6
vlan 60
vlan 61
vlan 90
vlan 91
vlan 999
!
interface vlan 999
description BLACKHOLE
no shutdown
!
interface range gig1/0/23-24
description Uplink- port-channel 1
channel-group 1 mode active
!
interface Port-channel1
description Uplink-CSW01
switchport trunk native vlan 91
switchport mode trunk
!
interface vlan 2
description Accounting
ip address 10.1.2.253 255.255.255.0
ip helper-address 10.1.100.1
ip helper-address 10.1.100.2
standby 2 ip 10.1.2.254
standby 2 preempt
!
interface vlan 3
description Sales
ip address 10.1.3.253 255.255.255.0
ip helper-address 10.1.100.1
ip helper-address 10.1.100.2
standby 3 ip 10.1.3.254
standby 3 preempt
!
interface vlan 4
description Administration
ip address 10.1.4.253 255.255.255.0
ip helper-address 10.1.100.1
ip helper-address 10.1.100.2
standby 4 ip 10.1.4.254
standby 4 preempt
!
interface vlan 5
description WiFi-Client
ip address 10.1.5.253 255.255.255.0
ip helper-address 10.1.100.1
ip helper-address 10.1.100.2
standby 5 ip 10.1.5.254
standby 5 preempt
!
interface vlan 6
description IT
ip address 10.1.6.253 255.255.255.0
ip helper-address 10.1.100.1
ip helper-address 10.1.100.2
standby 6 ip 10.1.6.254
standby 6 preempt
!
interface vlan 90
description Server-Management
ip address 10.1.90.253 255.255.255.0
ip helper-address 10.1.100.1
ip helper-address 10.1.100.2
standby 90 ip 10.1.90.254
standby 90 priority 110
standby 90 preempt
standby 90 track 1 decrement 20
!
interface vlan 91
description Network-Management
ip address 10.1.91.253 255.255.255.0
ip helper-address 10.1.100.1
ip helper-address 10.1.100.2
standby 91 ip 10.1.91.254
standby 91 priority 110
standby 91 preempt
standby 91 track 1 decrement 20
!
interface vlan 100
description Server
ip address 10.1.100.253 255.255.255.0
ip helper-address 10.1.100.1
ip helper-address 10.1.100.2
standby 100 ip 10.1.100.254
standby 100 priority 110
standby 100 preempt
standby 100 track 1 decrement 20
!
interface vlan 60
description DMZ
ip address 192.168.0.253 255.255.255.0
standby 60 ip 192.168.0.254
!
interface vlan 61
description WiFi-Guset
ip address 192.168.1.253 255.255.255.0
ip helper-address 10.1.100.1
ip helper-address 10.1.100.2
ip access-group GuestWifi in
standby 61 ip 192.168.1.254
standby 61 preempt
!
interface gig1/0/3
no switchport
description port-channel2
channel-group 2 mode active
!
interface gig1/0/4
no switchport
description port-channel2
channel-group 2 mode active
!
interface port-channel 2
description Uplink-Fw
no switchport
ip address 172.21.1.6 255.255.255.252
no shutdown
!
interface gig1/0/1
description Uplink->DKAAR-ASW01
switchport mode trunk
switchport trunk native vlan 91
no shutdown
!
interface gig1/0/2
description Uplink->DKAAR-ASW02
switchport mode trunk
switchport trunk native vlan 91
no shutdown
!
router ospf 1
redistribute connected
network 172.21.1.4 0.0.0.3 area 0
!
interface range gig1/0/5-22
description Disabled-Port
switchport access vlan 999
switchport mode access
shutdown
!
ip sla 1
icmp-echo 8.8.8.8 source-ip 10.1.91.253
frequency 5
exit
!
ip sla schedule 1 life forever start-time now
track 1 ip sla 1 reachability
the script that is used for access 1
en
conf t
hostname DKARR-ASW01
!
banner motd '*******************************************************************************
*******************************************************************************
*******************************************************************************
***** *****
***** *****
***** Electrotech Solutions *****
***** *****
***** Maa kun anvendes til formaal godkendt af ETS IT administration *****
***** Uautoriseret adgang forbudt *****
***** *****
***** May only be used for purposes authorized by ETS IT management *****
***** Unauthorized access prohibited *****
***** *****
***** *****
***** *****
*******************************************************************************
*******************************************************************************
*******************************************************************************'
!
ip domain name ets.local
crypto key generate rsa modulus 2048
ip ssh ver 2
line vty 0 4
access-class SSH-ACCESS in
transport input ssh
login local
line vty 5 15
access-class SSH-ACCESS in
transport input ssh
login local
exit
!
vlan 2
vlan 3
vlan 4
vlan 5
vlan 6
vlan 90
vlan 91
vlan 999
!
interface vlan 999
description BLACK-HOLE
!
interface vlan 2
description Accounting
!
interface vlan 3
description Sales
!
interface vlan 4
description Administration
!
interface vlan 5
description WiFi-Client
!
interface vlan 6
description IT
!
interface vlan 90
description Server-Managemnet
!
Interface vlan 91
description Network-Managemnet
ip address 10.1.91.1 255.255.255.0
!
interface vlan 100
description Server
exit
!
ip default-gateway 10.1.91.254
!
ip access-list standard SSH-ACCESS
permit 10.1.6.0 0.0.0.255
permit 10.1.90.0 0.0.0.255
!
interface GigabitEthernet1/0/1
description Uplink->CSW01
switchport mode trunk
switchport trunk native vlan 91
no shutdown
!
interface GigabitEthernet1/0/2
description Uplink->CSW02
switchport mode trunk
switchport trunk native vlan 91
no shutdown
!
interface range gigabitEthernet1/0/3-6
switchport mode access
switchport access vlan 6
spanning-tree portfast
!
interface range gigabitEthernet1/0/7-8
switchport mode access
switchport access vlan 90
spanning-tree portfast
!
interface range gigabitEthernet1/0/9-12
switchport mode access
switchport access vlan 100
spanning-tree portfast
!
interface range gigabitEthernet1/0/13-45
description Disabled-Port
switchport access vlan 999
switchport mode access
switchport port-security maximum 5
switchport port-security
switchport port-security violation restrict
shutdown
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/46
description MGMT to ETS-HV01 port 0
switchport access vlan 90
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/47
description Uplink to ETS-HV02 port 2
switchport mode trunk
no shutdown
!
interface GigabitEthernet1/0/48
description Uplink to ETS-HV01 port 1
switchport mode trunk
no shutdown
the script that is used for access 2
en
conf t
hostname DKARR-ASW02
!
banner motd '*******************************************************************************
*******************************************************************************
*******************************************************************************
***** *****
***** *****
***** Electrotech Solutions *****
***** *****
***** Maa kun anvendes til formaal godkendt af ETS IT administration *****
***** Uautoriseret adgang forbudt *****
***** *****
***** May only be used for purposes authorized by ETS IT management *****
***** Unauthorized access prohibited *****
***** *****
***** *****
***** *****
*******************************************************************************
*******************************************************************************
*******************************************************************************'
!
ip domain name ets.local
crypto key generate rsa modulus 2048
ip ssh ver 2
line vty 0 4
access-class SSH-ACCESS in
transport input ssh
login local
line vty 5 15
access-class SSH-ACCESS in
transport input ssh
login local
exit
!
vlan 2
vlan 3
vlan 4
vlan 5
vlan 6
vlan 90
vlan 91
vlan 999
!
interface vlan 999
description BLACK-HOLE
!
interface vlan 2
description Accounting
!
interface vlan 3
description Sales
!
interface vlan 4
description Administration
!
interface vlan 5
description WiFi-Client
!
interface vlan 6
description IT
!
interface vlan 90
description Server-Managemnet
!
interface vlan 91
description Network-Managemnet
ip address 10.1.91.2 255.255.255.0
!
interface vlan 100
description Server
exit
!
ip default-gateway 10.1.91.254
!
ip access-list standard SSH-ACCESS
permit 10.1.6.0 0.0.0.255
permit 10.1.90.0 0.0.0.255
!
interface GigabitEthernet1/0/1
description Uplink->CSW01
switchport mode trunk
switchport trunk native vlan 91
!
interface GigabitEthernet1/0/2
description Uplink->CSW02
switchport mode trunk
switchport trunk native vlan 91
!
interface range gigabitEthernet1/0/3-6
switchport mode access
switchport access vlan 6
spanning-tree portfast
!
interface range gigabitEthernet1/0/7-8
switchport mode access
switchport access vlan 90
spanning-tree portfast
!
interface range gigabitEthernet1/0/9-12
switchport mode access
switchport access vlan 100
spanning-tree portfast
!
interface range gigabitEthernet1/0/13-45
description Disabled-Port
switchport access vlan 999
switchport mode access
switchport port-security maximum 5
switchport port-security
switchport port-security violation restrict
shutdown
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/46
description MGMT to ETS-HV02 port 0
switchport access vlan 90
switchport mode access
ip arp inspection trust
ip dhcp snooping trust
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/47
description Uplink to ETS-HV01 port 2
switchport mode trunk
no shutdown
!
interface GigabitEthernet1/0/48
description Uplink to ETS-HV02 port 1
switchport mode trunk
no shutdown
