@ Switch-1 ! interface FastEthernet0/1 switchport trunk encapsulation dot1q switchport mode trunk ! interface FastEthernet0/2 no switchport ip address 1.1.1.2 255.255.255.0 duplex auto speed auto standby version 2 standby 1 ip 1.1.1.1 standby 1 priority 110 ! Sw-1(config)# Sw-1# %SYS-5-CONFIG_I: Configured from console by console Sw-1# Sw-1# Sw-1#sh stand FastEthernet0/2 - Group 1 (version 2) State is Active 4 state changes, last state change 00:05:28 Virtual IP address is 1.1.1.1 Active virtual MAC address is 0000.0C9F.F001 Local virtual MAC address is 0000.0C9F.F001 (v2 default) Hello time 3 sec, hold time 10 sec Next hello sent in 2.946 secs Preemption disabled Active router is local Standby router is unknown Priority 110 (configured 110) Group name is hsrp-Fa0/2-1 (default) Sw-1# @Switch-2 ! interface FastEthernet0/1 switchport trunk encapsulation dot1q switchport mode trunk ! interface FastEthernet0/2 no switchport ip address 1.1.1.3 255.255.255.0 duplex auto speed auto standby version 2 standby 1 ip 1.1.1.1 ! interface FastEthernet0/3 Sw-2#sh stand FastEthernet0/2 - Group 1 (version 2) State is Active 4 state changes, last state change 00:05:29 Virtual IP address is 1.1.1.1 Active virtual MAC address is 0000.0C9F.F001 Local virtual MAC address is 0000.0C9F.F001 (v2 default) Hello time 3 sec, hold time 10 sec Next hello sent in 2.669 secs Preemption disabled Active router is local Standby router is unknown Priority 100 (default 100) Group name is hsrp-Fa0/2-1 (default) Sw-2# Both fa0/2 of switches are directly connected to nexus router (HSRP)   ... View more

I tried trunking between two switches. Still both Active in HSRP, and Standby router is unknown ... View more

Hi Jon In what manner did the VRRP hellos passing to switch? Are the VRRP hellos in vlan? native/untagged frames..Idk? I raised the question because the ports facing the HT routers allowed only the said vlan in the previous messages. Just thinking. So is it right to say that you want to only use one HT router for the connectivity but if that fails then use the other one ? Yes that's right. Active / Standby for the routers. Josh ... View more

Hi Jon "The question i would have now is if the switches are doing inter vlan routing what are the HT routers for ie. what is their purpose. That's what i was trying to ask before. You don't just connect up devices without knowing why you are doing it. Again no criticism is intended, i am just trying to understand what you are trying to achieve. My best guess at the moment is that the HT routers are used to give you access to remote networks from the client vlans and for remote networks to get to the client vlans. If that is correct and i need you to confirm this then i am not clear why they are using subinterfaces with VRRP." First the vlans are for  Signalling, Application, OAM and Monitoring Servers . Devices connected to SW: Cisco ITP router 7600 - used for sigtran Monitoring Servers You are right, HT routers  are the core routers " Is the idea that the switches only use one of the HT routers (ie the VRRP master) to route to remote networks and then if the active HT router fails it moves over to the other one ? If so i am not clear on why they are using subinterfaces ie. you only need one L3 interface per HT router for the routing. " Yes, it is for HA purposes. Is it wrong that they configure vrrp per vlan subinterface instead they should have use the L3 int? Also I missed out to tell you that the two Switches are running in HSRP. It's not tracking as such it is just hello packets ie the hello are sent so each router can keep a check on the other routers state in case one of them needs to take over.  Your switch is seeing them because that is the L2 path between the HT routers. So HT router 1 and HT router 2 use the switch to send VRRP hellos/heartbeat. Did I get it right? Is it possible that VRRP hellos/heartbeat are send directly from/to the routers if they have direct connection? ITP --------SW1 =======HT Router 1    \             ||                                                \---------SW2 =======HT Router 1 JOsh ... View more

When you say "I think so" in answer to question 1) does that mean you don't actually know ? I'm not criticising but you should know whether or not the HT routers are meant to be routing for your vlans. Otherwise how can you set it up properly. FYI I'm not handling HT routers. I do not know HT router so that's why I am not sure if the config is meant to route vlans. But It is supposed to. What the VRRP messages seem to be suggesting is that the VRRP hellos are not getting through via your switches. They should be because there is a L2 path all the way through. I am wondering with this kind of configuration in the switch, why suddenly VRRP error on HT router occur?. If I remove the etherchannel, the vrrp error on HT router stops what i'm not clear about is this statement from you. You seem to be suggesting that if you remove the etherchannel the messages stop but i would have thought if you remove the etherchannel then there is no L2 path between the HT routers so they would not be able to communicate. I made a mistake on the statement above. The VRRP error exist from the start whether the two ports in the switch is in trunk mode or on port-channel facing HT router. Also VRRP error exist only in HT router2. No vrrp error seen in HT router1 **according to router guys Can you tell me why there are hellos From HT router sent going to the switch? Is it for link checking like  "track in HSRP?" We can do some troubleshooting in terms of switch outputs etc, and i am happy to help but you need to be clear on what you are trying to achieve as we could be trying to solve an issue that is totally different from the one you are trying to solve. So the easiest way to confirm this is what default gateway are clients in those vlans using. Is it the IP address assigned to the HT subinterface for that vlan or is some other IP address. The clients default gateway are the SVIs in the SW not the HT subint IP for the vlans. so we used the sw to have intervlan connection. is it supposed to be HT subinterface IP to use? Josh ... View more

Hi Jon 1. I think so, kindly see their config below: See below for Huawei router config # interface Eth-Trunk11 description For ITP Link mode lacp-static # interface Eth-Trunk11.250 vlan-type dot1q 250 description For ITP Signaling shutdown ip binding vpn-instance SIGTRAN ip address vrrp vrid 7 virtual-ip vrrp vrid 7 priority 140 statistic enable # interface Eth-Trunk11.251 vlan-type dot1q 251 description For ITP Application shutdown ip binding vpn-instance BE ip address vrrp vrid 8 virtual-ip vrrp vrid 8 priority 140 statistic enable # interface Eth-Trunk11.252 vlan-type dot1q 252 description For ITP OM shutdown ip binding vpn-instance OM ip address vrrp vrid 9 virtual-ip vrrp vrid 9 priority 140 statistic enable # # # interface GigabitEthernet5/1/4 description To ITP L3 Switch2 undo shutdown eth-trunk 11 # interface GigabitEthernet5/1/5 description To ITP L3 Switch2 undo shutdown eth-trunk 11 # 2. Yes I already did that. 3. Im not running VRRP on any interfaces. I am wondering with this kind of configuration in the switch, why suddenly VRRP error on HT router occur?. If I remove the etherchannel, the vrrp error on HT router stops. ... View more

Have you configured the entire path shown in your diagram above ? Can you confirm whether or not the HT routers are meant to be routing for the vlans on the switches ? Jon Yes Sir I've done the configuration, flapping stopped but problem now occured in their side/as I said the VRRP error in HT router after I made the Port-channel configuration. They said that is the standard configuration in this kind of proj Also why I can't configure "no switchport" in int port-channel11. It says "Incomplete command" and It's not allowed to put IP ADDRESS in portchannel interface. Is it kind of limitation fot this iOS / Switch? BTW Thank you Jon ... View more

jon.marshall wrote: What are you actually trying to achieve ? Is it to run VRRP between the Huawei and the Cisco switch for the same vlans ? No Sir, Huawei Router has a redundant as well as my cisco switch SW1 ============HT Router 1    || SW2 ============HT Router 2 The issue is when I tried to configure port-channel11 LACP facing HT routers, the HT router VRRP messed up See Alarm from HT router below: Jan  3 2014 15:36:26+08:00 CNR-CS-RTR-002 %%01VRRP/4/STATEWARNINGEXTEND(l)[0]:Virtual Router state MASTER changed to BACKUP, because of priority calculation. (Interface=Eth-Trunk11.250, VrId=7, InetType=IPV4) Jan  3 2014 15:36:26+08:00 CNR-CS-RTR-002 %%01VRRP/4/STATEWARNINGEXTEND(l)[1]:Virtual Router state BACKUP changed to MASTER, because of protocol timer expired. (Interface=Eth-Trunk11.250, VrId=7, InetType=IPV4) Jan  3 2014 15:36:25+08:00 CNR-CS-RTR-002 %%01VRRP/4/STATEWARNINGEXTEND(l)[2]:Virtual Router state MASTER changed to BACKUP, because of priority calculation. (Interface=Eth-Trunk11.251, VrId=8, InetType=IPV4) Jan  3 2014 15:36:25+08:00 CNR-CS-RTR-002 %%01VRRP/4/STATEWARNINGEXTEND(l)[3]:Virtual Router state BACKUP changed to MASTER, because of protocol timer expired. (Interface=Eth-Trunk11.251, VrId=8, InetType=IPV4) Jan  3 2014 15:35:24+08:00 CNR-CS-RTR-002 %%01VRRP/4/STATEWARNINGEXTEND(l)[4]:Virtual Router state MASTER changed to BACKUP, because of priority calculation. (Interface=Eth-Trunk11.252, VrId=9, InetType=IPV4) That's why they recommend to do portchannel subinterface **port-channel11.(VLANID) Also, that I can't do with my 3560. Did I make it clear SIr? ... View more

Oh I see, does 12.(55)SE8 support Portchannel subinterface? ... View more

Can you please help me to verify what IOS should I use? Below is the sh ver of the current Switch sw1#sh ver Cisco IOS Software, C3560 Software (C3560-IPBASE-M), Version 12.2(25)SEE3, RELEASE SOFTWARE (fc2) Copyright (c) 1986-2007 by Cisco Systems, Inc. Compiled Thu 22-Feb-07 14:40 by myl Image text-base: 0x00003000, data-base: 0x00EB11A0 ROM: Bootstrap program is C3560 boot loader BOOTLDR: C3560 Boot Loader (C3560-HBOOT-M) Version 12.2(25r)SEE4, RELEASE SOFTWARE (fc1) sw1 uptime is 1 week, 9 hours, 51 minutes System returned to ROM by power-on System image file is "flash:c3560-ipbase-mz.122-25.SEE3/c3560-ipbase-mz.122-25.SEE3.bin" cisco WS-C3560G-24TS (PowerPC405) processor (revision D0) with 118784K/12280K bytes of memory. Processor board ID FOC1116Y0LD ... View more

As per IP core, that's their standard //to have layer 3 portchannel-subinterface BTW thanks guys ... View more

They are using subinterface portchannel. Can you verify their confgi ? See NE40 config below ... View more

See below for Huawei router config # interface Eth-Trunk11 description For ITP Link mode lacp-static # interface Eth-Trunk11.250 vlan-type dot1q 250 description For ITP Signaling shutdown ip binding vpn-instance SIGTRAN ip address vrrp vrid 7 virtual-ip vrrp vrid 7 priority 140 statistic enable # interface Eth-Trunk11.251 vlan-type dot1q 251 description For ITP Application shutdown ip binding vpn-instance BE ip address vrrp vrid 8 virtual-ip vrrp vrid 8 priority 140 statistic enable # interface Eth-Trunk11.252 vlan-type dot1q 252 description For ITP OM shutdown ip binding vpn-instance OM ip address vrrp vrid 9 virtual-ip vrrp vrid 9 priority 140 statistic enable # # # interface GigabitEthernet5/1/4 description To ITP L3 Switch2 undo shutdown eth-trunk 11 # interface GigabitEthernet5/1/5 description To ITP L3 Switch2 undo shutdown eth-trunk 11 # ... View more