HSRP -- Unable to ping the Active and Standby Routers back and forth

[Chandra Shekar Mannem]

Hi,

This is a issue related to HSRP. I cannot ping the Standby HSRP router's ip from the Active HSRP router and Vice Versa. I cannot even ping the Virtual ip from either the Standby or from the Active Router.

Here is the lab set up:

-- R5's ethernet0/1 is connected to SW3's fa0/5 and is running vlan 149 on that trunk link.
-- R6's ethernet0/1 is connected to SW4's fa0/6 and is running vlan 149 on that trunk link.
-- SW3 and SW4 ( interface range fa0/19 to fa0/21  on both the Switches ) are in Port Channel 1 on which Vlan 149 is active.

-- R5 and R6 are running HSRP between them on their ethernet0/1 interfaces with R5 being the active and R6 being the standby and the Virtual IP is 10.1.1.8/24.

ISSUE : From R5, I am not able to ping 20.1.1.6 which is R6's ip address.

               And, from R6, I am not able to ping either R5's address 20.1.1.5 or the HSRP Virtual IP Address 20.1.1.7.

               I see each other's mac in the arp table, but still I am unable to ping.

R5:

int e0/1

stanby 1 priority 110

standby 1 ip 20.1.1.7

standby 1 prempt

no shut

int e0/1.149

encap dot1q 149

ip address 20.1.1.5 255.255.255.0

no shut

===============================================

Rack1R5#sh standby br
                     P indicates configured to preempt.
                     |
Interface   Grp Prio P State    Active          Standby         Virtual IP
Et0/0       1   110    Active   local           20.1.1.6        20.1.1.7

===============================================

R6:

int e0/1

stanby 1 priority 100

standby 1 ip 20.1.1.7

standby 1 prempt

no shut

int e0/1.149

encap dot1q 149

ip address 20.1.1.6 255.255.255.0

no shut

===============================================

Rack1R6#sh standby br
                     P indicates configured to preempt.
                     |
Interface   Grp Prio P State    Active          Standby         Virtual IP
Fa0/0       1   100    Standby  20.1.1.5        local           20.1.1.7

===============================================

SW3 and SW4 : I have their configs attached.

Please assist. Thanks !!

later,

Shekar.

[Chandra Shekar Mannem]

Small Correction in the Lab Set up explanation:

VIRTUAL IP ---- 20.1.1.7

[rakhande]

Hello ChandraShekar,

Thanks for the detailed description.

What are the devices - platforms and IOS?

Did we try removing HSRP group configurations and reapplying them?

- Rahul

[glen.grant]

   Your hsrp config should be on the "sub interfaces " not the actual interface itself..

R5:

int e0/1

no shut

int e0/1.149

encap dot1q 149

ip address 20.1.1.5 255.255.255.0

standby 1 priority 110

standby 1 ip 20.1.1.7

standby 1 prempt

no shut

[Chandra Shekar Mannem]

Glen,

Thanks for the response !!

I actually experienced this issue in the Production network. I set up the same scenario in my personal lab and it worked just fine.

I am sorry. The HSRP config is actually under the sub-interfaces in the Production Network.

We tried removing HSRP group configs and reapplied them. Still the same --- The active is recoginizing the standby router and the standby is recognizing the active router but unable to ping back and forth.

I just tried again setting this scenario in my lab and it worked perfectly fine. Not sure what is the issue in the Production Network with the exact same set up -- the difference is just the platforms..

Any more inputs ?? Thanks,

later,

Shekar.

[Chandra Shekar Mannem]

Rahul,

Thanks for the response !!

I actually experienced this issue in the Production network. I set up the same scenario in my personal lab and it worked just fine.

The End routers are CRS-1 and the Switches in between are 6509s.

Yes -- we tried removing HSRP group configs and reapplied them. Still the same --- The active is recoginizing the standby router and the standby is recognizing the active router but unable to ping back and forth.

I just tried again setting this scenario in my lab and it worked .

Any more inputs ?? Thanks,

later,

Shekar.

[jorge.calvo · Accepted solution]

Hello,

Try configuring VLAN 149 as the native VLAN on the trunks or allow VLAN 1 on the trunks because VLAN 1 is being prunned and native VLANs is should not when using subinterfaces for HSRP.

It should work then.

Hope this helps.

[Chandra Shekar Mannem]

Hello Jorge,

Thanks for the response !!

Vlan 1 is allowed on the trunk links. And I cannot configure Vlan 149 as the native Vlan. Because as I mentioned, this is a production network and the other Vlans that are being allowed along with this Vlan is just working fine.

Not still exactly sure what the issue is. I will try stripping out the HSRP config and put it back again.

Please let me know if you come across any other inputs. Thanks !!

later,

Shekar.

[jorge.calvo]

Hello,

What I mean is you have VLAN1 pruned on the switches so it is not allowed:

ack1SW3#sh int trunk

Port        Mode             Encapsulation  Status        Native vlan
Fa0/5       on               802.1q         trunking      1
Po1         on               802.1q         trunking      1

Port        Vlans allowed on trunk
Fa0/5       149
Po1         149

Port        Vlans allowed and active in management domain
Fa0/5       149
Po1         149

Port        Vlans in spanning tree forwarding state and not pruned
Fa0/5       149
Po1         149

When you configure a trunk with manual prunning: switchport trunk allowed vlan , VLAN1 is not allowed on the trunk by default anymore.

In e0/1 in both routers you have VLAN 1 as native too but it is allowed.

Hope this helps.