HSRP

[networkinggeek]

I am new to understanding HSRP, I just want to to know how to understand these log messages? What each line can tell how it is established

router#HSRP: Et1/0 Grp 2 Hello out 172.16.30.2 Active pri 100 vIP 172.16.20.254

router#HSRP: EtO/0 Grp 1 Hello out 172.16.40.2 Active pri 130 vIP 172.16.10.254

router#HSRP: EtO/0 Grp 1 Hello in 172.16.30.1 Standby pri 100 vIP 172.16.10.254
router#HSRP: Et1/0 Grp 2 Hello out 172.16.40.2 Active pri 100 vIP 172.16.20.254
router#HSRP: EtO/0 Grp 1 Hello out 172.16.30.2 Active pri 130 vIP 172.16.10.254

--

Sal

[Julio E. Moisa]

Hi

Are you using the same group for different HSRP configurations?

router#HSRP: EtO/0 Grp 1 Hello out 172.16.40.2 Active pri 130 vIP 172.16.10.254

router#HSRP: EtO/0 Grp 1 Hello in 172.16.30.2 Standby pri 130 vIP 172.16.10.254

You should have something like

Primary Device

Interface vlan 30
ip address 172.16.30.2 255.255.255.0
standby 1 ip 172.16.30.1
standby 1 priority 130
standby 1 preempt

Interface vlan 40
ip address 172.16.40.2 255.255.255.0
standby 2 ip 172.16.30.1
standby 2 priority 130
standby 2 preempt

Secondary Device

Interface vlan 30
ip address 172.16.30.3 255.255.255.0
standby 1 ip 172.16.30.1
standby 1 preempt

Interface vlan 40
ip address 172.16.40.3 255.255.255.0
standby 2 ip 172.16.30.1
standby 2 preempt

This is just an example, could you please share your configs related to HSRP? if you are using a switch you should allow the vlan 30 and 40 through the trunk interface between these switches. 

:-)

[networkinggeek]

I actually do not have configuration, so if we just take the one you put in, all I wanted to know/understand was what is each debug line actually telling. Specifically what are Hello out and hello in messages telling me.  

[Julio E. Moisa]

Hi

Once a router is assigned as active router, it starts to send out hello messages indicating to the neighbor indicating it is the active router. The config above could be generated by a misconfiguration or something is blocking the communication between the HSRP devices. 

In the following case an ACL is blocking, HSRP uses the UDP port 1985 to enable the communication between active and standby devices. 

https://supportforums.cisco.com/discussion/12070151/hsrp-packet-issues

[networkinggeek]

Okay so hello-out is advertising itself being active, what does "hello-in" do here? I also want to know the priority value? Is the pri value the value of router? or neighbor?

router#HSRP: EtO/0 Grp 1 Hello in 172.16.30.1 Standby pri 100 vIP 172.16.10.254

[networkinggeek]

and how by quickly looking we can tell that this HSRP has some issues (acl or anything), what logs we should have been expected and did not appear? I am trying to understand line by line 

[Julio E. Moisa · Accepted solution]

Hi

Apologies for the late response, the Hello IN can be interpreted like: 

router#HSRP: EtO/0 Grp 1 Hello in 172.16.30.1 Standby pri 100 vIP 172.16.10.254

Received a hello message informing that the HSRP neighbor 172.16.30.1 in group 1 will be the standby HSRP with priority 100 and virtual IP 172.16.10.254