HSRP Loop

[demon114hn]

Hello guys, I have a topology like above
I'm trying co config HSRP for two L3 SW
I think my HSRP config is fine, i check with "show standby brief" and see one active, one standby
Both L3 SW enable ip routing, default route to 192.168.5.254 with e0/0 access vlan5
eth1,eth2 of Router is in the same subnet 192.168.5.0/24
On EVE Lab it work fine. But problem is it seem like create a loop in real life (delay and timeout) and i can't figure out why.

Please help, Thanks!

[Flavio Miranda]

Hi

 Loop in layer 2 or layer 3? 

Whithout log is hard to say anyrlthing. 

[MHM Cisco World]

I DONT get why you use hsrp?

You can use equal cost path 

And make all l3sw and mikrotik have same vlan.

Allow this vlan through the trunk between two l3sw

Config svi in l3sw not router port.

[demon114hn]

Sorry if my SW name make you misunderstand, my purpose when use HSRP is i want all pc connect to two L3SW(R1,R2) can access Internet when port e0/0 on R1 or R2 go down, without HSRP i lost connect to Internet after serveral minutes, after i config HSRP it's still same. I only can connect to Internet when just one of two L3SW connect to Router .Here is my config
R1(L3SW):
ip routing
E0/0 access vlan 5
int vlan 5 ip 192.168.5.1/24
default route 192.168.5.254
E0/1 trunk allow vlan 5
- on int vlan 5 of R1 i config
standby 5 ip 192.168.5.253
standby 5 priotiry 105
standby 5 preempt
standby 5 track e0/0

R2(L3SW):
ip routing
E0/0 access vlan 5
int vlan 5 ip 192.168.5.2/24
default route 192.168.5.254
E0/1 trunk allow vlan 5
- on int vlan 5 of R2 i config
standby 5 ip 192.168.5.253
standby 5 preempt
standby 5 track e0/0

Draytek(Router):
Eth1, Eth2 is LAN port of network 192.168.5.0/24
static route: 192.168.0.0/16 ask 192.168.5.253 (Virtual IP of two L3SW)

Sorry because i'm newbie, hope you can point out my problem. Thanks

[MHM Cisco World]

default route 192.168.5.254 <<- change this to be 
ip route 0.0.0.0 0.0.0.0 192.168.5.254

[demon114hn]

For more clear here is my config:

R1 (L3SW1): ip routing ! interface e0/1 switchport trunk encapsulation dot1q switchport mode trunk ! interface e0/0 switchport access vlan 5 switchport mode access ! interface Vlan5 ip address 192.168.5.1 255.255.255.0 standby 5 ip 192.168.5.253 standby 5 priority 105 standby 5 preempt ! ip route 0.0.0.0 0.0.0.0 192.168.5.254

R2 (L3SW2): ip routing ! interface e0/1 switchport trunk encapsulation dot1q switchport mode trunk ! interface e0/0 switchport access vlan 5 switchport mode access ! interface Vlan5 ip address 192.168.5.2 255.255.255.0 standby 5 ip 192.168.5.253 standby 5 preempt ! ip route 0.0.0.0 0.0.0.0 192.168.5.254

- I config R1 as VTP server and R2 as VTP client for vlan sync (it work fine).
- I create vlan10 and DHCP for vlan10 on R1. A client(Vlan10) attatch to R1 , when i connect just one L3SW (R1 or R2) to the Router, my client (Vlan10) can access Internet normally.
- If i connect both L3SW to Router, my client (Vlan10) can ping gateway of vlan10, 192.168.5.1 (R1), 192.168.5.253 (VIP) but it can't ping to 192.168.5.2 (R2) and 192.168.5.254 (Router).
- The Router i use here actually is Draytek not Mikrotik (but i don't think this is the problem).
All Router LAN ports is access LAN1 with subnet 192.168.5.0/24

So can u tell me what is the problem here ?

[Richard Burts]

Thanks for clarifying the config of your switches. I do not understand how the router has 2 interfaces in the same subnet. Can you clarify the router config for us?

[demon114hn]

The Router have multiple WAN and LAN port, and i set all the LAN port using LAN1 with subnet: 192.168.5.0/24
As the topology, i connect two L3SW to two LAN port on Router.
And I made a static route on Router to subnet 192.168.0.0/16 with gateway is 192.168.5.253 (VIP).

[balaji.bandi]

 But problem is it seem like create a loop in real life (delay and timeout) and i can't figure out why.

how does the draytek Router behaviour, when you connect 2 LAN ports to different Layer 2 Switches in the network ?

Do you see L2 Loops, you can check show span brief or show span block (in cisco switches to identify the issue)

on Cisco switch show logs are very important to look for the problem.

in the real world, what switches are you using? Looks like I do not see on the cisco switch side config high level (more you need to look drayteck side how each port behavior when you connect to Layer 2 network. ?

[MHM Cisco World]

the Mikroik have static route to both VLAN5 in both L3SW (R)
the R1 send the packet to mikroik 
the mikrorik send reply to R2, here the R1-R2 trunk is STP block and hence packet drop. 
what you need is add new VLAN to clinet not same VLAN you use for HSRP with mikrotik 
also you need mikrotik have static route toward VIP of HSRP VLAN5

[demon114hn]

I already create VLAN10 (192.168.10.0/24) for the client
And on Router i create a static route: 192.168.0.0/16 with gateway is 192.168.5.253 (VIP).
But nothing changes.

[balaji.bandi]

On the Router when you using WAN port you can only set 1 IP address ? how does this give you advantage for HSRP here ?

what is the Goal of doing this Load -balance the traffic ?

If you have only 1 Device on the north side, better you run any IGP withp2p IP address so it load-balance as expected.

[demon114hn]

At first, the topology have just 1 L3SW (R1) connect to Router, and i want connect both L3SW to Router in case if connection between R1 and Router broke. At first R2 is running as L2SW (ip routing not enable) so i turn it on routing and connect R2 to Router.
But when i do this i lost connect to the Internet. So i think maybe i have made a loop here and try to make one connect as active and the other as standby. That why i use HSRP. I don't have experience with Cisco before so i don't know how to diagnose and find out the problem.

[MHM Cisco World]

I will try share exact topology you need here.
thanks for waiting 
MHM

[demon114hn]

Thanks for the help.