12-20-2007 05:24 AM - edited 03-05-2019 08:06 PM
Dear all,
interface FastEthernet0/0.150
encapsulation dot1Q 150
ip address 192.168.10.2 255.255.255.0
ip access-group 101 in
no ip redirects
no ip unreachables
no ip proxy-arp
no ip route-cache
no snmp trap link-status
standby 1 ip 192.168.10.1
standby 1 priority 105
standby 1 preempt
standby 1 track Serial0/0/0:0
standby 1 track Serial0/0/1:0
from above config. I understood, we configured router on-stick ( virtula interfaces to communicate between Vlans).
ip address 192.168.10.2 255.255.255.0 assigned ip address to virtual interface FastEthernet0/0.150,
please explain the following.....
<b><i>
ip access-group 101 in
no ip redirects
no ip unreachables
no ip proxy-arp
no ip route-cache
no snmp trap link-status
standby 1 ip 192.168.10.1
standby 1 priority 105
standby 1 preempt
standby 1 track Serial0/0/0:0
standby 1 track Serial0/0/1:0
</b></i>
thanks,
rageurdreams
12-20-2007 06:10 AM
ip access-group 101 in - ACL 101 is configured inbound direction to the router.
no ip redirects - router sends pkt to another gateway which may be best path to destination, but icmp response not send to host.
no ip unreachables - Will not send any icmp unreachables messages to the host.
no ip proxy-arp - Multiple IP addresses are not mapped to a single MAC address (the router's MAC address), thus not doing ARP for routing to other subnets.
no ip route-cache - disables fast switching on interface.
no snmp trap link-status - will not track snmp logs for any changes on links.
All below commands are for HSRP +tracking set for serial interfaces.
standby 1 ip 192.168.10.1 -
standby 1 priority 105
standby 1 preempt
standby 1 track Serial0/0/0:0
standby 1 track Serial0/0/1:0
hope that clarifies.
pls rate all helpful posts.
12-20-2007 06:25 AM
Hi,
!
! Check you access-list 101 as it is used to filter incoming traffic
! to interface FastEthernet0/0.150
ip access-group 101 in
! Don't send redirects.
no ip redirects
! Don't send unreachables.
! NOTE WELL that this may break PMTU discovery.
! For example, if this router is edge for a VPN of any sort, you might need
! to enable ip unreachables
! A typical symptom is ping working but a larger transmission doesn't.
no ip unreachables
! Don't pretend to be something you're not.
no ip proxy-arp
! Disable high speed switching for IP routing
no ip route-cache
! Disable SNMP Trap signals from this interface (i.e. link status up/down)
no snmp trap link-status
! Following are HSRP entries for HSRP Group #1, Virtual IP is 192.168.10.1
standby 1 ip 192.168.10.1
! Priority of 105 means this router is the Active since default priority is 100
standby 1 priority 105
! The standby preempt interface configuration command allows the router to
! become the active router when its priority is higher than all other
! HSRP-configured routers in this Hot Standby group. The configurations of both
! routers include this command so that each router can be the standby router for
! the other router. The 1 indicates that this command applies to Hot Standby group 1.
! If you do not use the standby preempt command in the configuration for a router,
! that router cannot become the active router.
standby 1 preempt
! This tracks two interfaces, any one of them down will cause the HSRP to failover to
! standby router.
standby 1 track Serial0/0/0:0
standby 1 track Serial0/0/1:0
Regards,
Dandy
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide