HSRPv2 virtual IP address cannot be ping

3550-2#sh version

Cisco IOS Software, C3550 Software (C3550-IPSERVICESK9-M), Version 12.2(46)SE, RELEASE SOFTWARE (fc2)

3550-1#sh version

Cisco IOS Software, C3550 Software (C3550-IPSERVICESK9-M), Version 12.2(46)SE, RELEASE SOFTWARE (fc2)

Both IOS are the same version. This version onwards contain HSRPv2.

HSRPv2 multicast 224.0.0.102, virtual mac address 0000.0c9f.fxxx where xxx is the group.

HSRPv2 can support up to 255 groups, and can choose HSRP group number up to 4095, this gives user the flexibility to name HSRP group to be the same as its vlan id.

I am testing the HSRPv2 with my two switches and found that HSRPv2 virtual ip address cannot be ping.

On version 1 and 2, the active router is able to ping to its virtual ip address.

3550-1#ping 172.30.0.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.30.0.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms

On version 2, standby router cannot ping to its virtual ip address.

3550-2#ping 172.30.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.30.0.1, timeout is 2 seconds:
…..
Success rate is 0 percent (0/5)

On version 1 standby router can ping to its virtual ip address:

3550-2#ping 172.30.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.30.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/203/1000 ms

While on HSRPv2, pc cannot ping to the virtual ip address. This is the ip information of the pc.

Windows IP Configuration

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :

IP Address. . . . . . . . . . . . : 172.30.0.10

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 172.30.0.1

Pc can ping to the real ip addresses of both the standby and active routers.

C:\Documents and Settings\cyruslok>ping 172.30.0.2

Pinging 172.30.0.2 with 32 bytes of data:

Reply from 172.30.0.2: bytes=32 time=2ms TTL=255

Reply from 172.30.0.2: bytes=32 time<1ms TTL=255

Reply from 172.30.0.2: bytes=32 time<1ms TTL=255

Reply from 172.30.0.2: bytes=32 time<1ms TTL=255

Ping statistics for 172.30.0.2:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 2ms, Average = 0ms

C:\Documents and Settings\cyruslok>ping 172.30.0.3

Pinging 172.30.0.3 with 32 bytes of data:

Reply from 172.30.0.3: bytes=32 time=2ms TTL=255

Reply from 172.30.0.3: bytes=32 time<1ms TTL=255

Reply from 172.30.0.3: bytes=32 time<1ms TTL=255

Reply from 172.30.0.3: bytes=32 time<1ms TTL=255

Ping statistics for 172.30.0.3:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 2ms, Average = 0ms

However PC cannot ping to virtual ip address

C:\Documents and Settings\cyruslok>ping 172.30.0.1

Pinging 172.30.0.1 with 32 bytes of data:

Request timed out.

Request timed out.

Request timed out.

Request timed out.

Ping statistics for 172.30.0.1:

Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

refer to the screenshot:

Standby router’s mac address table and arp-cache

3550-2#sh ip arp

Protocol Address Age (min) Hardware Addr Type Interface

Internet 172.30.0.2 0 000b.be08.f480 ARPA Vlan1

Internet 172.30.0.3 – 000c.85e5.5380 ARPA Vlan1

Internet 172.30.0.1 4 0000.0c9f.f001 ARPA Vlan1

Internet 172.30.0.10 0 0016.d324.b3b7 ARPA Vlan1

3550-2#sh mac address-table dynamic

Mac Address Table

——————————————-

Vlan Mac Address Type Ports

—- ———– ——– —–

1 0000.0c9f.f001 DYNAMIC Fa0/1

1 000b.be08.f480 DYNAMIC Fa0/1

1 000b.be08.f481 DYNAMIC Fa0/1

1 0016.d324.b3b7 DYNAMIC Fa0/1

Total Mac Addresses for this criterion: 4

Active router’s mac address table and ARP cache.

3550-1#sh ip arp

Protocol Address Age (min) Hardware Addr Type Interface

Internet 172.30.0.2 – 000b.be08.f480 ARPA Vlan1

Internet 172.30.0.3 1 000c.85e5.5380 ARPA Vlan1

Internet 172.30.0.1 – 0000.0c9f.f001 ARPA Vlan1

Internet 172.30.0.10 1 0016.d324.b3b7 ARPA Vlan1

3550-1#sh mac address-table dynamic

Mac Address Table

——————————————-

Vlan Mac Address Type Ports

—- ———– ——– —–

1 000c.85e5.5380 DYNAMIC Fa0/1

1 000c.85e5.5381 DYNAMIC Fa0/1

1 0016.d324.b3b7 DYNAMIC Fa0/13

Total Mac Addresses for this criterion: 3

Downgrade from version 2 to 1, virtual ip address can be ping. I have only changed the version, nothing else was changed, hence with the same configuration version 1 and 2 behave differently, it seems version 2 is not yet stable in this IOS release, however there’s no mention of such issue on 12.2(50)se release from cisco’s doc.

3550-1(config-if)#standby version 1

3550-2(config-if)#standby version 1

C:\Documents and Settings\cyruslok>ping 172.30.0.1

Pinging 172.30.0.1 with 32 bytes of data:

Reply from 172.30.0.1: bytes=32 time<1ms TTL=255

Reply from 172.30.0.1: bytes=32 time<1ms TTL=255

Reply from 172.30.0.1: bytes=32 time<1ms TTL=255

Reply from 172.30.0.1: bytes=32 time<1ms TTL=255

Ping statistics for 172.30.0.1:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms

Advertisements
This entry was posted in General stuffs, High Availability and tagged . Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

w

Connecting to %s