01-19-2023 03:09 AM
We have frequent HSRP flapping issue on cisco ISR4431/K9 router. The HSRP state is flapping continuously when I check my log, I have no physical link failure between two routers and
Can someone help me find solution of that issue, below some config and log capture
interface GigabitEthernet0/0/1
ip flow monitor ORION-MONITOR input
ip flow monitor ORION-MONITOR output
ip address 172.31.254.2 255.255.255.0
ip nat inside
zone-member security INSIDE
standby 1 ip 172.31.254.1
standby 1 priority 200
standby 1 preempt
standby 1 track 1 decrement 51
ip tcp adjust-mss 1360
ip policy route-map rmap-pbr
negotiation auto
end
GigabitEthernet0/0/1 - Group 1
State is Active
4656 state changes, last state change 01:05:40
Virtual IP address is 172.31.254.1
Active virtual MAC address is 0000.0c07.ac01 (MAC In Use)
Local virtual MAC address is 0000.0c07.ac01 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 1.856 secs
Preemption enabled
Active router is local
Standby router is 172.31.254.3, priority 150 (expires in 10.272 sec)
Priority 200 (configured 200)
Track object 1 state Up decrement 51
Group name is "hsrp-Gi0/0/1-1" (default)
Logs.....................................................................................................................
Jan 17 09:27:58.788: %HSRP-5-STATECHANGE: GigabitEthernet0/0/1 Grp 1 state Active -> Speak
Jan 17 09:28:02.472: %TRACK-6-STATE: 1 ip sla 1 reachability Down -> Up
Jan 17 09:28:04.039: %HSRP-5-STATECHANGE: GigabitEthernet0/0/1 Grp 1 state Speak -> Active
Jan 17 09:47:03.235: %TRACK-6-STATE: 1 ip sla 1 reachability Up -> Down
Jan 17 09:47:05.210: %HSRP-5-STATECHANGE: GigabitEthernet0/0/1 Grp 1 state Active -> Speak
Jan 17 09:47:08.235: %TRACK-6-STATE: 1 ip sla 1 reachability Down -> Up
Jan 17 09:47:10.461: %HSRP-5-STATECHANGE: GigabitEthernet0/0/1 Grp 1 state Speak -> Active
Jan 17 21:47:27.294: %TRACK-6-STATE: 1 ip sla 1 reachability Up -> Down
Jan 17 21:47:27.802: %HSRP-5-STATECHANGE: GigabitEthernet0/0/1 Grp 1 state Active -> Speak
Jan 17 21:47:32.295: %TRACK-6-STATE: 1 ip sla 1 reachability Down -> Up
Jan 17 21:47:33.222: %HSRP-5-STATECHANGE: GigabitEthernet0/0/1 Grp 1 state Speak -> Active
Regards,
Warshad
01-19-2023 03:32 AM
I think you misconfig the IP SLA for track use in HSRP group
can you share the config ?
01-19-2023 03:59 AM
According to log, it says IP SLA reachability change. can you share the IPSLA config?
01-19-2023 04:02 AM
Here is the IP SLA config
rt001#show running-config | I sla
track 1 ip sla 1 reachability
ip sla 1
ip sla schedule 1 life forever start-time now
01-19-2023 04:13 AM
that not all config, we need to see the destination and source you use for IP SLA, I think you use wrong IP.
01-19-2023 04:58 AM
Hi,
Following is the SLA related config on the router.
rt001#show running-config | Section sla
track 1 ip sla 1 reachability
ip sla 1
icmp-echo 91.106.177.65 source-ip 91.106.177.72
frequency 5
ip sla schedule 1 life forever start-time now
Regards,
Warshad
01-19-2023 05:04 AM - edited 01-19-2023 05:07 AM
frequency 5 <<- can you increase, this freq is to short and if ISP router can not re-forward the echo your edge router assume the ISP router is down.
TRY 30 or 60.
01-19-2023 05:15 AM
Thank you. I will change it and let you know with further updates.
01-19-2023 05:16 AM
you are so so welcome
01-19-2023 09:32 PM
I agree that it seems likely that track is the cause of the flapping. Can you tell us about 91.106.177.72? Is this the address of a connected interface? Can you post the config of that interface? Is 91.106.177.65 in the same subnet? Can you successfully ping that address?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide