3550-2#sh version
Cisco IOS Software, C3550 Software (C3550-IPSERVICESK9-M), Version 12.2(46)SE, RELEASE SOFTWARE (fc2)
3550-1#sh version
Cisco IOS Software, C3550 Software (C3550-IPSERVICESK9-M), Version 12.2(46)SE, RELEASE SOFTWARE (fc2)
Both IOS are the same version. This version onwards contain HSRPv2.
HSRPv2 multicast 224.0.0.102, virtual mac address 0000.0c9f.fxxx where xxx is the group.
HSRPv2 can support up to 255 groups, and can choose HSRP group number up to 4095, this gives user the flexibility to name HSRP group to be the same as its vlan id.
I am testing the HSRPv2 with my two switches and found that HSRPv2 virtual ip address cannot be ping.
On version 1 and 2, the active router is able to ping to its virtual ip address.
3550-1#ping 172.30.0.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.30.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms
On version 2, standby router cannot ping to its virtual ip address.
3550-2#ping 172.30.0.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.30.0.1, timeout is 2 seconds:
…..
Success rate is 0 percent (0/5)
On version 1 standby router can ping to its virtual ip address:
3550-2#ping 172.30.0.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.30.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/203/1000 ms
While on HSRPv2, pc cannot ping to the virtual ip address. This is the ip information of the pc.
Windows IP Configuration
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 172.30.0.10
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 172.30.0.1
Pc can ping to the real ip addresses of both the standby and active routers.
C:\Documents and Settings\cyruslok>ping 172.30.0.2
Pinging 172.30.0.2 with 32 bytes of data:
Reply from 172.30.0.2: bytes=32 time=2ms TTL=255
Reply from 172.30.0.2: bytes=32 time<1ms TTL=255
Reply from 172.30.0.2: bytes=32 time<1ms TTL=255
Reply from 172.30.0.2: bytes=32 time<1ms TTL=255
Ping statistics for 172.30.0.2:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 2ms, Average = 0ms
C:\Documents and Settings\cyruslok>ping 172.30.0.3
Pinging 172.30.0.3 with 32 bytes of data:
Reply from 172.30.0.3: bytes=32 time=2ms TTL=255
Reply from 172.30.0.3: bytes=32 time<1ms TTL=255
Reply from 172.30.0.3: bytes=32 time<1ms TTL=255
Reply from 172.30.0.3: bytes=32 time<1ms TTL=255
Ping statistics for 172.30.0.3:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 2ms, Average = 0ms
However PC cannot ping to virtual ip address
C:\Documents and Settings\cyruslok>ping 172.30.0.1
Pinging 172.30.0.1 with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for 172.30.0.1:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
refer to the screenshot:
Standby router’s mac address table and arp-cache
3550-2#sh ip arp
Protocol Address Age (min) Hardware Addr Type Interface
Internet 172.30.0.2 0 000b.be08.f480 ARPA Vlan1
Internet 172.30.0.3 – 000c.85e5.5380 ARPA Vlan1
Internet 172.30.0.1 4 0000.0c9f.f001 ARPA Vlan1
Internet 172.30.0.10 0 0016.d324.b3b7 ARPA Vlan1
3550-2#sh mac address-table dynamic
Mac Address Table
——————————————-
Vlan Mac Address Type Ports
—- ———– ——– —–
1 0000.0c9f.f001 DYNAMIC Fa0/1
1 000b.be08.f480 DYNAMIC Fa0/1
1 000b.be08.f481 DYNAMIC Fa0/1
1 0016.d324.b3b7 DYNAMIC Fa0/1
Total Mac Addresses for this criterion: 4
Active router’s mac address table and ARP cache.
3550-1#sh ip arp
Protocol Address Age (min) Hardware Addr Type Interface
Internet 172.30.0.2 – 000b.be08.f480 ARPA Vlan1
Internet 172.30.0.3 1 000c.85e5.5380 ARPA Vlan1
Internet 172.30.0.1 – 0000.0c9f.f001 ARPA Vlan1
Internet 172.30.0.10 1 0016.d324.b3b7 ARPA Vlan1
3550-1#sh mac address-table dynamic
Mac Address Table
——————————————-
Vlan Mac Address Type Ports
—- ———– ——– —–
1 000c.85e5.5380 DYNAMIC Fa0/1
1 000c.85e5.5381 DYNAMIC Fa0/1
1 0016.d324.b3b7 DYNAMIC Fa0/13
Total Mac Addresses for this criterion: 3
Downgrade from version 2 to 1, virtual ip address can be ping. I have only changed the version, nothing else was changed, hence with the same configuration version 1 and 2 behave differently, it seems version 2 is not yet stable in this IOS release, however there’s no mention of such issue on 12.2(50)se release from cisco’s doc.
3550-1(config-if)#standby version 1
3550-2(config-if)#standby version 1
C:\Documents and Settings\cyruslok>ping 172.30.0.1
Pinging 172.30.0.1 with 32 bytes of data:
Reply from 172.30.0.1: bytes=32 time<1ms TTL=255
Reply from 172.30.0.1: bytes=32 time<1ms TTL=255
Reply from 172.30.0.1: bytes=32 time<1ms TTL=255
Reply from 172.30.0.1: bytes=32 time<1ms TTL=255
Ping statistics for 172.30.0.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
cyruslab 