"If it ain't broke, don't fix it." Well, it isn't broken, but I want to ensure that I don't run into problems in the event of a failure.
I have a pair of 9k's (N9k1 & N9k2) set up as HSRP for a number of VLANs, with N9k1 as the active for each. On N9k1, the config is as follows (and is identical for every VLAN):
interface Vlan100 no ip redirects ip address 220.127.116.11/24 no ipv6 redirects ip ospf passive-interface ip router ospf 1 area 0.0.0.0 hsrp version 2 hsrp 100 preempt delay minimum 180 priority 105 timers 1 3 ip 18.104.22.168
On N9k1, the config is as follows:
ip address 22.214.171.124/24 ip ospf passive-interface ip router ospf 1 area 0.0.0.0 hsrp version 2 hsrp 100 preempt delay minimum 180 timers 1 3 ip 126.96.36.199
If N9k1 should fail and N9k2 takes over, will the exclusion of no ip redirects on the latter create any issues? I understand that, in normal operation, we don't want hosts to learn the interface-level IP address, which is one reason why the no ip redirects command is in place in the first place. Would this not be the case in an HSRP-failover state as well, i.e., we still want traffic directed to the VIP rather than the interface IP?
Also, as information, I am presently seeing a large number of ICMP redirects on N9k2. Is this merely a product of having an HSRP configuration in place and considered normal in this scenario? Or is it (as it often can be) an indication of a potential routing problem?
We do not know enough about your environment to give very insightful answers. I do not understand why you do configure no ip redirects on one but not on the other N9K. We certainly do not know enough about your environment to be able to say whether the redirects that you see on N9K2 are related to HSRP. As a starting point what address are the redirects for?
Game on! As a part of Cisco Live US auxiliary programs, we invite you to learn new technologies and obtain hands-on experience in a fun way by playing Capture the Flag (CTF).
Your mission: solve interesting challenges based on use-cases, technologies and ...
Hi,I'm trying to setup a cellular connection on my Cisco 1111 router.The interface is UP and it gets a private IPv4 and a public IPv6 address.If I try to send something on IPv4 through the cellular interface it works fine.But there seems to be an issue wi...
For an offline or printed copy of this document, simply choose ⋮ Options > Printer Friendly Page. You may then Print, Print to PDF or copy and paste to any other document format you like.
Is your WAN ready for a multicloud transformation?
Network Insider Live Webinar
Tuesday, July 21, 2020 10:00 am Pacific Time (San Francisco, GMT-08:00)
This webinar will show how convergence between SD-WAN and Security is emerging as important new SASE a...