Re: Unable to get ping reply from HSRP v2 virtual ip address

rakyomin78 · ‎09-14-2010

I have problem pinging HSRPv2 ip address from my computer. My computer set the gateway as the HSRP group 1 virtual ip address.

I do not see anything wrong with my configuration, perhaps I have missed something.

Here's my ARP cache in my switch

3550-1#sh ip arp
Protocol Address          Age (min) Hardware Addr   Type   Interface
Internet 172.30.0.20             1   0016.d324.b3b7 ARPA   Vlan1
Internet 172.30.0.2              -   000b.be08.f480 ARPA   Vlan1
Internet 172.30.0.3             13   000c.85e5.5380 ARPA   Vlan1
Internet 172.30.0.1              -   0000.0c9f.f001 ARPA   Vlan1
Internet 172.30.0.10             0   0016.d4df.833b ARPA   Vlan1

I used wireshark, and it seems there's no reply from 172.30.0.1

3550-1#sh standby vlan 1 1
Vlan1 - Group 1 (version 2)
State is Active
    1 state change, last state change 00:43:13
Virtual IP address is 172.30.0.1
Active virtual MAC address is 0000.0c9f.f001
    Local virtual MAC address is 0000.0c9f.f001 (v2 default)
Hello time 500 msec, hold time 1500 msec
    Next hello sent in 0.096 secs
Preemption enabled, delay reload 10 secs
Active router is local
Standby router is 172.30.0.3, priority 100 (expires in 1.504 sec)
Priority 150 (configured 150)
    Track object 1 state Up decrement 60
    Track interface FastEthernet0/1 state Up decrement 60
Group name is "hsrp-Vl1-1" (default)

3550-2#sh standby vlan 1 1
Vlan1 - Group 1 (version 2)
State is Standby
Virtual IP address is 172.30.0.1
Active virtual MAC address is 0000.0c9f.f001
    Local virtual MAC address is 0000.0c9f.f001 (v2 default)
Hello time 500 msec, hold time 1500 msec
    Next hello sent in 0.016 secs
Preemption enabled, delay reload 10 secs
Active router is 172.30.0.2, priority 150 (expires in 1.264 sec)
    MAC address is 000b.be08.f480
Standby router is local
Priority 100 (default 100)
Group name is "hsrp-Vl1-1" (default)

active Switch is able to ping the virtual ip address.

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.30.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms
3550-1#

My pc has the mac address of the virtual ip address:

C:\Documents and Settings\cyruslok>arp -a

Interface: 0.0.0.0 --- 0x2
Internet Address Physical Address Type
172.30.0.1 00-00-0c-9f-f0-01 dynamic

So... what happen? How come I cannot get a icmp reply from HSRP group 1 virtual ip address? Thanks.

jorge.calvo · ‎09-14-2010

Hello,

In fact you have the HSRP VIP MAC address on your PC ARP table, that is a good sign. Have you checked if the mask on your PC matches the one configured for the HSRP group and that the switch port is assigned to the right VLAN?

Regards.

rakyomin78 · ‎09-15-2010

Hi,

Thank you for your reply.

Do you mean if my subnet mask of my pc's nic is the same as the virtual ip address's subnet mask?

standby 1 ip command does not have an option to put in the subnet mask.

My pc can actually ping to the real ip address of the active router.

The subnet I am using is 172.30.0.0/24 my nic is configured as 172.30.0.10 255.255.255.0 gateway is 172.30.0.1 (virtual ip of HSRP)

bgandhi · ‎09-14-2010

Hi,

Do you have any ACL in place in VLAN interface.

regards,

Bhavesh

rakyomin78 · ‎09-15-2010

Hi

Thank you for your reply.

No I do not use any ACL, and also I do not use VLAN ACL.

From wireshark the output has:

Who is 172.30.0.1? Tell 172.30.0.10. There's no reply from 172.30.0.1 of its mac address, no response was seen in wireshark from 172.30.0.1, my pc ARP cache however has the virtual ip's virtual mac address...

sebastian.lemke · ‎09-14-2010

Can your PC ping 172.30.0.2 and 172.30.0.3?

post a C:\ipconfig /all

rakyomin78 · ‎09-15-2010

Hi Thank you for your reply:

The real ip addresses can ping to each other. The active router can also ping to virtual ip address in my switch.

I did not keep my ipconfig/all.

But I did keep the output of ipconfig:

C:\Documents and Settings\cyruslok>ipconfig

Windows IP Configuration

Ethernet adapter Local Area Connection:

        Connection-specific DNS Suffix . :
        IP Address. . . . . . . . . . . . : 172.30.0.10
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 172.30.0.1