Afternoon guys,
I have the following scenario. I have a c4500 and a c6500 running HSRP:
C6500:
interface Vlan53
ip address 10.4.35.36 255.255.255.248
standby 53 ip 10.4.35.33
standby 53 priority 105
standby 53 preempt
router eigrp 10
passive-interface default
no passive-interface Vlan53
network 10.0.0.0
neighbor 10.4.35.34 Vlan53
Cisco 4500:
interface Vlan53
description 3rd Party Firewall - DCTPFW01- INSIDE
ip address 10.4.35.37 255.255.255.248
ip flow ingress
standby 53 ip 10.4.35.33
router eigrp 10
passive-interface default
no passive-interface Vlan53
network 10.0.0.0
neighbor 10.4.35.34 Vlan53
There is also a ASA that is also communicating with these twi devices via EIGRP
Cisco 5540 ASA:
interface Port-channel44.53
vlan 53
nameif inside
security-level 100
ip address 10.4.35.34 255.255.255.248 standby 10.4.35.35
router eigrp 10
no auto-summary
neighbor 10.4.35.37 interface inside
neighbor 10.4.35.36 interface inside
neighbor 10.4.35.33 interface inside << no nieghbourship is built via this IP
network 10.0.0.0 255.0.0.0
passive-interface default
no passive-interface inside
As you can see, I've had to put the 'real' ip addresses of both the c4500 and c6500 under the firewalls EIGRP process. The switches use their 'real' ip addresses to talk to the firewall via EIGRP.
Is there a way so that the HSRP address is used instead? I understand this might get complicated when implementing this on both switches as you only wsih one switch to be communicating at one time if using the HSRP address for EIGRP communication.
Thanks for any help.
Regards,
Jimmy
