%HSRP-4-BADAUTH

[ashleyreed4218]

Hello All:

Happy Thanksgiving!

Can anyone point me in the right direction of this error on my switch:

%HSRP-4-BADAUTH: Bad authentication from 192.168.30.2, group 30, remote state Active

I don't know enough about HSRP to diagnose what the error could be.

Thank you in advance,

Ashley

[John Blakley · Accepted solution]

Ashley,

This generally means that the standby group is using authentication, but the other side isn't. Check to see if authentication is configured between these two devices. If you want, you can post the configuration here as well.

HTH,

John

[ashleyreed4218]

Thanks John:

How can I change the authentication? (Sorry I have never really worked with HSRP)

Here is more info:

Switch1#

Nov 21 14:24:57.479: %HSRP-4-BADAUTH: Bad authentication from 192.168.30.3, group 30, remote state Active

interface Vlan30

description LAN1 Subnet

ip address 192.168.30.2 255.255.255.0

ip igmp query-interval 20

standby 30 ip 192.168.30.1

standby 30 timers 1 3

standby 30 priority 255

standby 30 preempt

standby 30 authentication Cisco30

Switch2#

Nov 21 13:57:42.138: %HSRP-4-BADAUTH: Bad authentication from 192.168.30.2, group 30, remote state Active

interface Vlan30

description LAN1 Subnet

ip address 192.168.30.3 255.255.255.0

ip igmp query-interval 20

standby 30 ip 192.168.30.1

standby 30 timers 1 3

standby 30 priority 110

standby 30 preempt

[cadet alain · Accepted solution]

Hi,

switch1:

int vlan 30

no standby 30 authentication

or better:

switch2:

int vl30

standby 30 auth Cisco30

Regards.

Alain

Don't forget to rate helpful posts.

[ashleyreed4218]

Thank you,

But do I need to have authentication on both switches? 

[John Blakley · Accepted solution]

You should have it configured on both switches, but if you don't want authentication, then you can remove it from both switches.

HTH,

John

[ashleyreed4218]

Thank you, the error is gone and now I have:

%HSRP-5-STATECHANGE: Vlan30 Grp 30 state Speak -> Standby

Is this good ?

Thanks guys,

Ashley

[John Blakley]

If this is the router that you want to serve as the backup router, then this is perfect