cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4910
Views
0
Helpful
31
Replies

HSRP Over layer 2 WAN

Ryan Fisher
Level 1
Level 1

Hi, I'm trying to extend a vlan across my layer 2 connection to my colocation DC using hsrp.  The two different sites are using two different vtp domains, and they are both their respective vtp servers.  I'm not sure if that has anything to do with the problems I'm having.

When both vlans are active, any server in the primary site on the extended vlan loses connectivity to all remote sites, including the the colocation DC site.  If I shutdown the vlan at the colo, then all servers at the primary site regain connectivity.  Sounds like a possible routing thing, but everything is using eigrp so I would've thought that would take care of any changes.  While this is happening, the servers at the primary site on the extended vlan are still accessible locally to all other vlans and networks.

Now, from a workstation on a different vlan at the primary site, I can see the hsrp failover happen for that network and work just like it's supposed to.  I can tell by running a ping, that when I shutdown the primary site's vlan interface, I can see the ping times increase on the latency that's on that circuit, so I know that the failover happened.  And when I bring back up the interface locally, the pings stop for a few seconds then start back up with low latency times so I know it failed back.  So it would seem that the operation of hsrp is happening properly.

Here are my configs:

Primary site:

interface Vlan15
 ip address 10.200.145.2 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 no ip mroute-cache
 standby 0 ip 10.200.145.1
 standby 0 priority 105
 standby 0 preempt
 standby 0 authentication xxxxxx
end

Secondary site

interface Vlan15
 ip address 10.200.145.3 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 no ip mroute-cache
 standby 0 ip 10.200.145.1
 standby 0 priority 85
 standby 0 authentication xxxxxx
end

sh standby primary site:

Vlan15 - Group 0
  State is Active
    17 state changes, last state change 00:28:56
  Virtual IP address is 10.200.145.1
  Active virtual MAC address is 0000.0c07.ac00
    Local virtual MAC address is 0000.0c07.ac00 (v1 default)
  Hello time 3 sec, hold time 10 sec
    Next hello sent in 2.176 secs
  Authentication text, string "xxxxxx"
  Preemption enabled
  Active router is local
  Standby router is unknown
  Priority 105 (configured 105)
  Group name is "hsrp-Vl15-0" (default)

sh standby secondary site:

Vlan15 - Group 0
  State is Active
    11 state changes, last state change 00:01:22
  Virtual IP address is 10.200.145.1
  Active virtual MAC address is 0000.0c07.ac00
    Local virtual MAC address is 0000.0c07.ac00 (v1 default)
  Hello time 3 sec, hold time 10 sec
    Next hello sent in 2.224 secs
  Authentication text, string "xxxxxx"
  Preemption disabled
  Active router is local
  Standby router is unknown
  Priority 85 (configured 85)
  Group name is "hsrp-Vl15-0" (default)

Network topology:

Primary site Core 6500 <--> 3750 edge <-- Layer 2 connection --> Secondary CoLo site 3560

<-- Layer 2 connection --> Remote office 3560

<-- Layer 2 connection --> Remote office 3560

<-- Layer 2 connection --> Remote office 3560

I'm abut 100% sure I'm not giving enough information for anyone, so just tell me what you'd want to see and I'll post it.  I'm by no means an hsrp expert, but just know enough to make myself dangerous.

Thanks!

31 Replies 31

Ryan Fisher
Level 1
Level 1

Thanks for all your help.  I ended up connecting another switch port between the edge switch and the core, and made those trunks.  Only allowed the vlans I wanted to do HSRP with and made sure that interface and vlans were not allowed in the eigrp routing plan.  Everything came right up and is working as expected.

Show standby at both sites are now aware of each other and looks good.  Thanks for all your help!

Vlan501 - Group 0
  State is Standby
    25 state changes, last state change 6d09h
  Virtual IP address is 10.200.1.1
  Active virtual MAC address is 0000.0c07.ac00
    Local virtual MAC address is 0000.0c07.ac00 (v1 default)
  Hello time 3 sec, hold time 10 sec
    Next hello sent in 1.488 secs
  Authentication text, string ""
  Preemption disabled
  Active router is 10.200.1.2, priority 105 (expires in 9.456 sec)
  Standby router is local
  Priority 85 (configured 85)
  Group name is "hsrp-Vl501-0" (default)
Vlan521 - Group 0
  State is Standby
    7 state changes, last state change 6d10h
  Virtual IP address is 10.202.1.1
  Active virtual MAC address is 0000.0c07.ac00
    Local virtual MAC address is 0000.0c07.ac00 (v1 default)
  Hello time 3 sec, hold time 10 sec
    Next hello sent in 0.656 secs
  Authentication text, string ""
  Preemption disabled
  Active router is 10.202.1.2, priority 105 (expires in 8.160 sec)
  Standby router is local
  Priority 85 (configured 85)
  Group name is "hsrp-Vl521-0" (default)
Vlan920 - Group 0
  State is Standby
    4 state changes, last state change 6d09h
  Virtual IP address is 10.92.1.1
  Active virtual MAC address is 0000.0c07.ac00
    Local virtual MAC address is 0000.0c07.ac00 (v1 default)
  Hello time 3 sec, hold time 10 sec
    Next hello sent in 0.512 secs
  Authentication text, string ""
  Preemption disabled
  Active router is 10.92.1.2, priority 105 (expires in 8.848 sec)
  Standby router is local
  Priority 85 (configured 85)
  Group name is "hsrp-Vl920-0" (default)

I am glad that you got it working and that our suggestions were helpful in finding the solution. Thanks for posting back to the forum to let us know that it is working and how you solved it.

 

HTH

 

Rick

HTH

Rick