Read HSRP state through a failover, a preemption and a split group

short · 40 min · Packet Tracer · Exam topic 3.4

Task

Two routers share one default gateway, 192.168.10.1, with HSRP version 2. You predict and then read show standby brief and show standby on both routers, find the virtual MAC on the PC, and take the active router's interface down to watch the standby take over while the PC's gateway entry stays exactly the same. You then turn preemption off to see HSRP's default behaviour, and plant the lesson's two-active fault by putting one router in the wrong VLAN, which you find from the output alone. At the end you can say from show standby brief which router forwards, which waits, and whether the two can hear each other.

Topology

Devices

Device Model Role
R1 ISR4331 gateway router, intended active
R2 ISR4331 gateway router, intended standby
S1 2960-24TT access switch for VLAN 1
PC1 PC-PT user PC

Links

From To
R1 G0/0/1 S1 G0/1
R2 G0/0/1 S1 G0/2
PC1 Fa0 S1 Fa0/1

Addressing

Device Interface Address Default gateway
R1 G0/0/1 192.168.10.2/24 none
R2 G0/0/1 192.168.10.3/24 none
R1 HSRP group 10 virtual IP 192.168.10.1 none
PC1 NIC 192.168.10.10/24 192.168.10.1

Steps

  1. Drag each device from the Topology onto the workspace and set its display name (click the device, Config tab, Display Name) to the name in the Devices table. Cable the ports the Links table lists: Packet Tracer's automatic connection type picks the right cable, or use a copper cross-over between two routers or between a router and a PC or server. If a router asks whether to enter the initial configuration dialog, answer no. Name S1 at its prompt (hostname S1); it needs nothing else yet.
  2. Configure R1 as the intended active router: priority 110, with preemption.
Router> enable
Router# configure terminal
Router(config)# hostname R1
R1(config)# interface g0/0/1
R1(config-if)# ip address 192.168.10.2 255.255.255.0
R1(config-if)# standby version 2
R1(config-if)# standby 10 ip 192.168.10.1
R1(config-if)# standby 10 priority 110
R1(config-if)# standby 10 preempt
R1(config-if)# no shutdown
R1(config-if)# end
  1. Configure R2 with the default priority of 100 and no preemption:
Router> enable
Router# configure terminal
Router(config)# hostname R2
R2(config)# interface g0/0/1
R2(config-if)# ip address 192.168.10.3 255.255.255.0
R2(config-if)# standby version 2
R2(config-if)# standby 10 ip 192.168.10.1
R2(config-if)# no shutdown
R2(config-if)# end

Watch the console: each router logs its HSRP state changes as it moves toward Standby or Active. Whichever came up first, R1 ends Active, because it outranks R2 and preempts. 4. Give PC1 its address with the virtual IP as its gateway (Desktop > IP Configuration). Work out the virtual MAC first: HSRP version 2 is 0000.0c9f.fXXX, and group 10 is 00a in hex. Then check:

C:\> ping 192.168.10.1
C:\> arp -a

The ARP entry for 192.168.10.1 should be 0000.0c9f.f00a, not either router's own MAC. 5. Read both routers and predict each column before you look:

R1# show standby brief
R2# show standby brief
R1# show standby

R1: State Active, Active local, Standby 192.168.10.3, and a P for preempt. R2: State Standby, Active 192.168.10.2, Standby local, no P. The detailed output on R1 shows Group 10 (version 2), the virtual MAC and Hello time 3 sec, hold time 10 sec. 6. Fail the active router's LAN interface and read the result:

R1# configure terminal
R1(config)# interface g0/0/1
R1(config-if)# shutdown
R1(config-if)# do show standby brief
R2# show standby brief
C:\> ping 192.168.10.1
C:\> arp -a

R1 shows Init: the group is configured but the interface is down. R2 is Active with the standby unknown. PC1 still reaches 192.168.10.1, and its ARP entry is unchanged, because R2 took over the virtual MAC as well as the virtual IP. 7. Bring R1 back. With preemption it takes the active role back as soon as it is ready:

R1(config-if)# no shutdown
R1(config-if)# do show standby brief
  1. Now see HSRP's default, no preemption. Remove it on R1 and repeat the failure:
R1(config-if)# no standby 10 preempt
R1(config-if)# shutdown
R1(config-if)# no shutdown
R1(config-if)# do show standby brief

R1 comes back as Standby at priority 110, and R2 stays Active at 100: a better priority does not take over without preemption. Put it back and watch R1 take over at once:

R1(config-if)# standby 10 preempt
R1(config-if)# end
  1. Break and fix: split the group. Move R2's switch port into a different VLAN:
S1> enable
S1# configure terminal
S1(config)# vlan 20
S1(config-vlan)# exit
S1(config)# interface g0/2
S1(config-if)# switchport access vlan 20
S1(config-if)# end

After about 10 seconds, run show standby brief on both routers. Both say Active, each with the standby unknown: neither hears the other's hellos. Preemption has nothing to do with it. Look for the cause from the switch:

S1# show vlan brief

Gi0/2 is listed under VLAN 20 while Gi0/1 and Fa0/1 are in VLAN 1. Fix it, and R2 drops back to Standby once it hears R1's higher priority:

S1# configure terminal
S1(config)# interface g0/2
S1(config-if)# switchport access vlan 1
S1(config-if)# end

Verify

R1# show standby brief
R2# show standby brief
R1# show standby
C:\> arp -a

Expected output: on R1, the group 10 row reads 110, P, Active, local, 192.168.10.3 and 192.168.10.1. On R2, it reads Standby, 192.168.10.2 and local. show standby on R1 includes Active virtual MAC address is 0000.0c9f.f00a and Preemption enabled. PC1's ARP table maps 192.168.10.1 to 0000.0c9f.f00a.

Save your work

Save the topology as ccna-lab16-hsrp.pkt (File > Save As).

Notes

Packet Tracer 8.2 does not implement VRRP, so this lab reads HSRP only; lesson 16 walks through show vrrp brief from sample output. The lab also leaves out interface tracking: the domain 3 capstone shows why a router that keeps the active role after losing its uplink needs either tracking or a backup route. On a real switch pair the same split-group symptom also comes from an ACL dropping UDP 1985 or a v1/v2 mismatch, which shows as two different virtual MACs for one group.

This is an independent study companion for the Cisco CCNA 200-301 v2.0 exam and is not produced by or endorsed by Cisco. Cisco, CCNA and IOS are trademarks of Cisco Systems, Inc.

This is an independent study companion for Cisco CCNA 200-301 and is not produced by or endorsed by CompTIA.