06-19-2015 09:43 PM - edited 03-08-2019 12:37 AM
Hi, I'm trying to extend a vlan across my layer 2 connection to my colocation DC using hsrp. The two different sites are using two different vtp domains, and they are both their respective vtp servers. I'm not sure if that has anything to do with the problems I'm having.
When both vlans are active, any server in the primary site on the extended vlan loses connectivity to all remote sites, including the the colocation DC site. If I shutdown the vlan at the colo, then all servers at the primary site regain connectivity. Sounds like a possible routing thing, but everything is using eigrp so I would've thought that would take care of any changes. While this is happening, the servers at the primary site on the extended vlan are still accessible locally to all other vlans and networks.
Now, from a workstation on a different vlan at the primary site, I can see the hsrp failover happen for that network and work just like it's supposed to. I can tell by running a ping, that when I shutdown the primary site's vlan interface, I can see the ping times increase on the latency that's on that circuit, so I know that the failover happened. And when I bring back up the interface locally, the pings stop for a few seconds then start back up with low latency times so I know it failed back. So it would seem that the operation of hsrp is happening properly.
Here are my configs:
Primary site:
interface Vlan15
ip address 10.200.145.2 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
no ip mroute-cache
standby 0 ip 10.200.145.1
standby 0 priority 105
standby 0 preempt
standby 0 authentication xxxxxx
end
Secondary site
interface Vlan15
ip address 10.200.145.3 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
no ip mroute-cache
standby 0 ip 10.200.145.1
standby 0 priority 85
standby 0 authentication xxxxxx
end
sh standby primary site:
Vlan15 - Group 0
State is Active
17 state changes, last state change 00:28:56
Virtual IP address is 10.200.145.1
Active virtual MAC address is 0000.0c07.ac00
Local virtual MAC address is 0000.0c07.ac00 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 2.176 secs
Authentication text, string "xxxxxx"
Preemption enabled
Active router is local
Standby router is unknown
Priority 105 (configured 105)
Group name is "hsrp-Vl15-0" (default)
sh standby secondary site:
Vlan15 - Group 0
State is Active
11 state changes, last state change 00:01:22
Virtual IP address is 10.200.145.1
Active virtual MAC address is 0000.0c07.ac00
Local virtual MAC address is 0000.0c07.ac00 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 2.224 secs
Authentication text, string "xxxxxx"
Preemption disabled
Active router is local
Standby router is unknown
Priority 85 (configured 85)
Group name is "hsrp-Vl15-0" (default)
Network topology:
Primary site Core 6500 <--> 3750 edge <-- Layer 2 connection --> Secondary CoLo site 3560
<-- Layer 2 connection --> Remote office 3560
<-- Layer 2 connection --> Remote office 3560
<-- Layer 2 connection --> Remote office 3560
I'm abut 100% sure I'm not giving enough information for anyone, so just tell me what you'd want to see and I'll post it. I'm by no means an hsrp expert, but just know enough to make myself dangerous.
Thanks!
Solved! Go to Solution.
07-17-2015 08:36 AM
Thanks for all your help. I ended up connecting another switch port between the edge switch and the core, and made those trunks. Only allowed the vlans I wanted to do HSRP with and made sure that interface and vlans were not allowed in the eigrp routing plan. Everything came right up and is working as expected.
Show standby at both sites are now aware of each other and looks good. Thanks for all your help!
Vlan501 - Group 0
State is Standby
25 state changes, last state change 6d09h
Virtual IP address is 10.200.1.1
Active virtual MAC address is 0000.0c07.ac00
Local virtual MAC address is 0000.0c07.ac00 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 1.488 secs
Authentication text, string ""
Preemption disabled
Active router is 10.200.1.2, priority 105 (expires in 9.456 sec)
Standby router is local
Priority 85 (configured 85)
Group name is "hsrp-Vl501-0" (default)
Vlan521 - Group 0
State is Standby
7 state changes, last state change 6d10h
Virtual IP address is 10.202.1.1
Active virtual MAC address is 0000.0c07.ac00
Local virtual MAC address is 0000.0c07.ac00 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 0.656 secs
Authentication text, string ""
Preemption disabled
Active router is 10.202.1.2, priority 105 (expires in 8.160 sec)
Standby router is local
Priority 85 (configured 85)
Group name is "hsrp-Vl521-0" (default)
Vlan920 - Group 0
State is Standby
4 state changes, last state change 6d09h
Virtual IP address is 10.92.1.1
Active virtual MAC address is 0000.0c07.ac00
Local virtual MAC address is 0000.0c07.ac00 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 0.512 secs
Authentication text, string ""
Preemption disabled
Active router is 10.92.1.2, priority 105 (expires in 8.848 sec)
Standby router is local
Priority 85 (configured 85)
Group name is "hsrp-Vl920-0" (default)
07-17-2015 09:07 AM
I am glad that you got it working and that our suggestions were helpful in finding the solution. Thanks for posting back to the forum to let us know that it is working and how you solved it.
HTH
Rick
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide