cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
16094
Views
3
Helpful
5
Replies

How to configure HSRP between two Layer3 switches with no trunk between them?

gkushnir21
Level 1
Level 1

I have 2 Cisco 6509 MultiLayer Switches. I have no Layer 2 trunk between them.  They are connected over a Layer 3 etherchannel.

I configured a vlan with HSRP on both switches but HSRP is not working.  Do i need a layer 2 trunk betwen the switches in order for hsrp to work?

Switch1:

sh standby vlan1700
Vlan1700 - Group 1
  Local state is Active, priority 200, may preempt
  Hellotime 3 sec, holdtime 10 sec
  Next hello sent in 2.883
  Virtual IP address is 30.176.126.1 configured
  Active router is local
  Standby router is unknown
  Virtual mac address is 0000.0c07.ac01
  2 state changes, last state change 1w0d
  IP redundancy name is "hsrp-Vl1700-1" (default)

Switch2:

sh standby vlan 1700
Vlan1700 - Group 1
  Local state is Active, priority 100, may preempt
  Hellotime 3 sec, holdtime 10 sec
  Next hello sent in 2.242
  Virtual IP address is 30.176.126.1 configured
  Active router is local
  Standby router is unknown
  Virtual mac address is 0000.0c07.ac01
  2 state changes, last state change 5d16h
  IP redundancy name is "hsrp-Vl1700-1" (default)

3 Accepted Solutions

Accepted Solutions

Atif Awan
Cisco Employee
Cisco Employee

gkushnir21 wrote:

I have 2 Cisco 6509 MultiLayer Switches. I have no Layer 2 trunk between them.  They are connected over a Layer 3 etherchannel.

I configured a vlan with HSRP on both switches but HSRP is not working.  Do i need a layer 2 trunk betwen the switches in order for hsrp to work?

Switch1:

sh standby vlan1700
Vlan1700 - Group 1
  Local state is Active, priority 200, may preempt
  Hellotime 3 sec, holdtime 10 sec
  Next hello sent in 2.883
  Virtual IP address is 30.176.126.1 configured
  Active router is local
  Standby router is unknown
  Virtual mac address is 0000.0c07.ac01
  2 state changes, last state change 1w0d
  IP redundancy name is "hsrp-Vl1700-1" (default)

Switch2:

sh standby vlan 1700
Vlan1700 - Group 1
  Local state is Active, priority 100, may preempt
  Hellotime 3 sec, holdtime 10 sec
  Next hello sent in 2.242
  Virtual IP address is 30.176.126.1 configured
  Active router is local
  Standby router is unknown
  Virtual mac address is 0000.0c07.ac01
  2 state changes, last state change 5d16h
  IP redundancy name is "hsrp-Vl1700-1" (default)

HSRP works by exchanging Layer-2 messages over a shared segment for which two or more routers are serving as potential first hop gateways. So in your case the two switches need to be Layer-2 adjacent on VLAN1700. This is usually achieved by means of a Layer-2 port-channel between the switches but some designs also use the Access switch for this purpose.

Atif

View solution in original post

Yudong Wu
Level 7
Level 7

Yes, you must have a kind of layer 2 connectivity between two HSRP swithes on this vlan.

A layer 2 trunk between two switch directly or via the the other access layer switch works as long as it provide the layer 2 connectivity.

View solution in original post

Hello,

Actually, it is not about just creating a trunk between your two 6500s. What also Yudong Wu tried to tell you is that both of your 6500 switches actually have to be connected to the same VLAN for which they are providing the default gateway function, and in this common VLAN you activate the HSRP. The network itself for which you are doing the gateway backup via the HSRP is the common Layer2 domain on which the two 6500 switches should be interconnected. Does this make it more clear?

Best regards,

Peter

View solution in original post

5 Replies 5

Atif Awan
Cisco Employee
Cisco Employee

gkushnir21 wrote:

I have 2 Cisco 6509 MultiLayer Switches. I have no Layer 2 trunk between them.  They are connected over a Layer 3 etherchannel.

I configured a vlan with HSRP on both switches but HSRP is not working.  Do i need a layer 2 trunk betwen the switches in order for hsrp to work?

Switch1:

sh standby vlan1700
Vlan1700 - Group 1
  Local state is Active, priority 200, may preempt
  Hellotime 3 sec, holdtime 10 sec
  Next hello sent in 2.883
  Virtual IP address is 30.176.126.1 configured
  Active router is local
  Standby router is unknown
  Virtual mac address is 0000.0c07.ac01
  2 state changes, last state change 1w0d
  IP redundancy name is "hsrp-Vl1700-1" (default)

Switch2:

sh standby vlan 1700
Vlan1700 - Group 1
  Local state is Active, priority 100, may preempt
  Hellotime 3 sec, holdtime 10 sec
  Next hello sent in 2.242
  Virtual IP address is 30.176.126.1 configured
  Active router is local
  Standby router is unknown
  Virtual mac address is 0000.0c07.ac01
  2 state changes, last state change 5d16h
  IP redundancy name is "hsrp-Vl1700-1" (default)

HSRP works by exchanging Layer-2 messages over a shared segment for which two or more routers are serving as potential first hop gateways. So in your case the two switches need to be Layer-2 adjacent on VLAN1700. This is usually achieved by means of a Layer-2 port-channel between the switches but some designs also use the Access switch for this purpose.

Atif

Yudong Wu
Level 7
Level 7

Yes, you must have a kind of layer 2 connectivity between two HSRP swithes on this vlan.

A layer 2 trunk between two switch directly or via the the other access layer switch works as long as it provide the layer 2 connectivity.

I was hoping to avoid creating a layer 2 trunk between the two core switches, but if the only way for HSRP to work is to have a layer 2 connectivity, i will have to creat a trunk.

Hello,

Actually, it is not about just creating a trunk between your two 6500s. What also Yudong Wu tried to tell you is that both of your 6500 switches actually have to be connected to the same VLAN for which they are providing the default gateway function, and in this common VLAN you activate the HSRP. The network itself for which you are doing the gateway backup via the HSRP is the common Layer2 domain on which the two 6500 switches should be interconnected. Does this make it more clear?

Best regards,

Peter

gkushnir21
Level 1
Level 1

Thank you all for providing your explanations to me.  I fully understand what needs to be done in this case

Thanks again!