ASR 100-X Management Interface with HSRP doesn´t work

[lp-muc]

Hi,

we have two ASR 1001-X with IOS-XE 9.03.13. On both Management Interfaces is  HSRP configured:

Prime:

interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address 10.11.100.2 255.255.255.0
 no ip proxy-arp
 standby version 2
 standby 961 ip 10.11.100.1
 standby 961 priority 110
 standby 961 preempt
 standby 961 authentication md5 key-chain HSRP2
 standby 961 name 961
 standby 961 track 2 decrement 10
 speed 1000
 no negotiation auto

Secondary:

interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address 10.11.100.3 255.255.255.0
 no ip proxy-arp
 standby version 2
 standby 961 ip 10.11.100.1
 standby 961 priority 110
 standby 961 preempt
 standby 961 authentication md5 key-chain HSRP2
 standby 961 name 961
 standby 961 track 2 decrement 10
 speed 1000
 no negotiation auto

show standby:

GigabitEthernet0 - Group 961 (version 2)
  State is Active
    5 state changes, last state change 01:16:40
  Virtual IP address is 10.11.100.1
  Active virtual MAC address is 0000.0c9f.f353 (MAC In Use)
    Local virtual MAC address is 0000.0c9f.f353 (v2 default)
  Hello time 3 sec, hold time 10 sec
    Next hello sent in 0.800 secs
  Authentication MD5, key-chain "***"
  Preemption enabled
  Active router is local
  Standby router is unknown
  Priority 110 (configured 110)
    Track object 2 state Up decrement 10
  Group name is "961" (cfgd)

I can ping both IPs (.2/.3) vice versa. No Firewall or ACL inbetween.

They can not see eachother. Both are  in active mode.

Does somebody know why this configuration doesn´t work on the ASR 1001-X ?

Thanks,

robert

[Reza Sharifi]

Hi,

I have never done it and not sure if you can configure HSRP on the out-of-band management interfaces. They are supposed to be connected to an out-of-band management switch and work just like a host (no layer-2).  How are the 2 interfaces connected together?

HTH

[lp-muc]

Hello,

I have done this on other Devices and it worked. They are connected over 2960 Switches Layer 2.

They can ping eachother.

Robert

[Reza Sharifi]

Hi,

Ok.  Good to know.  Both routers have priority 110.  Can you change one to default (100) and test again?

HTH

[lp-muc]

Already done. I had the secondary on 80, 85 and 100. Stayed the same. 

[Reza Sharifi]

For testing, have you tried removing the authentication?

[lp-muc]

Yes, of course.

[Enrico]

Same problem for me! Did you manage to solve it in some way?!
Anyone experimenting this problem?

Many thanks in advance
Enrico