Automatic Router Failover

[encarter]

Ok i dont have to much expereince with Routers so please bare with this noob. Anyway we have multipe sites. When i shut down the Gig interface on our primary router (the Gig interface connects to the local LAN BTW) Routing automatically switchesover to our Secondary router.

At one of our other locations this is not happening?

We are running EIGRP on the local lan and our connection to our MPLS network we run BGP.

I know this blows the lid wide open but should i be concenrating on the Secondary Router or the Layer 3 (3550's) switches?

If you need more info let me know.

I appreciate the help.

 

[encarter]

HSRP is configured on both LAN connections on the router however as i said above doing a "sh ip route" will display the Primary Routers IP and not the HSRP standby IP.

Yet this the setup the same way in our other sites and failover is working.

 

[encarter]

Would this have anything to do with it:

I found "no keepalive" on the Primary Routers LAN interface?
the others sites Primary routers LAN interface do not have this statement!?!?!

 

[burtsbees]

Please post a show run on the primary and secondary on the site that is not working properly.

Burt

 

[wybnormal]

The keepalive is used by the routers as a "are you there?" packet. When the "are you there" does not come back or is seen, the routers assume there is a failure and try to failover. Once failed over, if the keepalive still does not come back, the routers can not fail back.

http://www.packetattack.com

http://www.packetpress.net

Home of the book "Network Security Using Linux"

 

[encarter]

So should i leave the "no keepalive" or take out?

Here is the sh run for the Primary:



G33#sh run
Building configuration...

Current configuration : 8130 bytes
!
! Last configuration change at 16:31:28 EST Thu May 24 2007 by VV
! NVRAM config last updated at 16:31:31 EST Thu May 24 2007 by VV
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname G33
!
boot-start-marker
boot system flash:c3825-adventerprisek9-mz.124-9.T2.bin
boot-end-marker
!
card type t1 1 1
logging buffered 1000000 debugging
no logging console
enable password 7 07
!
no aaa new-model
!
resource policy
!
clock timezone EST -5
clock summer-time EST recurring
network-clock-participate slot 1
network-clock-participate wic 0
network-clock-participate wic 1
network-clock-select 4 T1 1/0
network-clock-select 5 T1 0/0/0
network-clock-select 6 T1 0/0/1
ip cef
!
!
!
!
ip ftp source-interface GigabitEthernet0/0
ip tftp source-interface GigabitEthernet0/0
no ip domain lookup
ip domain name vvv
!
!
isdn switch-type primary-4ess
voice-card 0
no dspfarm
!
voice-card 1
dspfarm
dsp services dspfarm
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
username VV password 7 07
!
!
controller T1 0/0/0
framing esf
linecode b8zs
pri-group timeslots 1-24 service mgcp
!
controller T1 0/0/1
framing esf
linecode b8zs
!
controller T1 0/1/0
framing esf
linecode b8zs
channel-group 0 timeslots 1-24
!
controller T1 0/1/1
framing esf
linecode b8zs
channel-group 0 timeslots 1-24
!
controller T1 1/0
shutdown
framing esf
linecode b8zs
!
!
class-map match-all ENHANCED
match access-group name ENHANCED
class-map match-any BASIC
match any
class-map match-all PREMIUM
match ip dscp ef
class-map match-any ENHANCED-SIGNALING
match ip dscp cs3
match ip dscp af31
!
!
policy-map QOS-SCHEDULER-S
class PREMIUM
priority 512
class ENHANCED
police 1024000 conform-action set-prec-transmit 2 exceed-action transmit
class ENHANCED-SIGNALING
bandwidth 32
class class-default
set ip precedence 0
fair-queue
!
!
!
!
!
!
!
interface Loopback0
description Management Loopback interface
ip address 145.111.111.111 255.255.255.255
!
interface Multilink1
bandwidth 3000
ip address 146.111.111.111 255.255.255.252
ip route-cache flow
load-interval 30
no cdp enable
ppp multilink
ppp multilink group 1
ppp multilink fragment disable
service-policy output QOS-SCHEDULER-S
!
interface GigabitEthernet0/0
description GM3352 Customer Lan
ip address 192.168.52.134 255.255.255.192
ip route-cache flow
delay 1000
duplex auto
speed auto
media-type rj45
no keepalive
standby 1 ip 192.168.52.130
standby 1 priority 105
standby 1 preempt
standby 1 track Multilink1
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
media-type rj45
no keepalive
!
interface Serial0/0/0:23
no ip address
encapsulation hdlc
isdn switch-type primary-4ess
isdn incoming-voice voice
isdn bind-l3 ccm-manager
no cdp enable
!
interface Serial0/1/0:0
no ip address
encapsulation ppp
ppp multilink
ppp multilink group 1
!
interface Serial0/1/1:0
no ip address
encapsulation ppp
ppp multilink
ppp multilink group 1
!
router eigrp 100
redistribute bgp 64862 metric 10000 1000 255 1 1500
passive-interface default
no passive-interface GigabitEthernet0/0
network 192.168.52.0
distance eigrp 15 200
no auto-summary
!
router bgp 64862
no synchronization
bgp log-neighbor-changes
network 145.111.111.111 mask 255.255.255.255
network 192.168.51.0 backdoor
network 216.185.121.121 mask 255.255.255.255
redistribute eigrp 100 route-map EigrpToBgpMap
neighbor 146.82.55.55 remote-as 6745
neighbor 146.82.55.55 send-community
neighbor 146.82.55.55 default-originate
neighbor 146.82.55.55 soft-reconfiguration inbound
neighbor 146.82.55.55 prefix-list 10 in
no auto-summary
!
ip default-network 0.0.0.0
ip route 0.0.0.0 0.0.0.0 64.222.222.222 255
ip route 64.213.147.147 255.255.255.255 192.168.52.132
!
!
no ip http server
no ip http secure-server
!
ip access-list extended ENHANCED
permit ip host 192.168.50.240 any
permit ip host 192.168.50.241 any
permit ip host 192.168.50.243 any
ip access-list extended EigrpToBgp
permit ip 192.168.50.0 0.0.1.0 host 255.255.255.0
permit ip host 192.168.53.0 host 255.255.255.0
permit ip 192.168.52.0 0.0.0.192 host 255.255.255.192
permit ip host 192.168.54.0 host 255.255.255.0
!
!
ip prefix-list 10 seq 5 deny 0.0.0.0/0
ip prefix-list 10 seq 10 permit 0.0.0.0/0 le 32
logging trap notifications
logging facility local2
logging source-interface Loopback0
snmp-server trap-source Loopback0
snmp-server source-interface informs Loopback0
snmp-server location 1-
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps isdn call-information
snmp-server enable traps isdn layer2
snmp-server enable traps isdn chan-not-avail
snmp-server enable traps isdn ietf
snmp-server enable traps cnpd
snmp-server enable traps config
snmp-server enable traps entity
snmp-server enable traps frame-relay multilink bundle-mismatch
snmp-server enable traps hsrp
snmp-server enable traps rtr
snmp-server enable traps syslog
!
!
!
route-map DENY-MGMT deny 10
match ip address DENY-MGMT
!
route-map DENY-MGMT permit 20
!
route-map EigrpToBgpMap permit 10
match ip address EigrpToBgp
!
!
!
tftp-server flash://c3500xl-c3h2s-tar.120-5.WC15.tar
tftp-server flash:c3560-ipbasek9-tar.122-25.SEE2.tar
!
control-plane
!
!
!
voice-port 0/0/0:23
!
voice-port 0/0/1:23
!
voice-port 1/0/0
!
voice-port 1/0/1
!
voice-port 1/0/2
!
voice-port 1/0/3
!
ccm-manager mgcp
ccm-manager music-on-hold
ccm-manager config server 192.168.52.9 192.168.52.8
ccm-manager config
!
mgcp
mgcp call-agent 192.168.52.8 2427 service-type mgcp version 0.1
mgcp dtmf-relay voip codec all mode out-of-band
mgcp rtp unreachable timeout 1000 action notify
mgcp modem passthrough voip mode nse
mgcp package-capability rtp-package
no mgcp package-capability res-package
mgcp package-capability sst-package
no mgcp package-capability fxr-package
mgcp package-capability pre-package
no mgcp timer receive-rtcp
mgcp sdp simple
mgcp fax rate 14400
mgcp rtp payload-type g726r16 static
mgcp bind control source-interface GigabitEthernet0/0
mgcp bind media source-interface GigabitEthernet0/0
!
mgcp profile default
!
sccp local GigabitEthernet0/0
sccp ccm 192.168.52.9 identifier 10 version 4.1
sccp ccm 192.168.52.8 identifier 11 version 4.1
sccp
!
sccp ccm group 10
associate ccm 10 priority 1
associate ccm 11 priority 4
associate profile 20 register MadisMtpG711u
associate profile 15 register Madisconf
!
dspfarm profile 15 conference
codec g711ulaw
codec g711alaw
codec g729ar8
codec g729abr8
codec g729r8
codec g729br8
maximum sessions 2
associate application SCCP
!
dspfarm profile 20 mtp
codec g711ulaw
maximum sessions software 50
associate application SCCP
!
!
line con 0
exec-timeout 5 0
password 7 01
stopbits 1
line aux 0
modem InOut
transport input all
stopbits 1
line vty 0 4
exec-timeout 120 0
password 7 01
login local
transport input telnet ssh
!
scheduler allocate 20000 1000
ntp clock-period 17179948
ntp source Loopback0
ntp server
ntp server 192.90.42.10
ntp server 192.90.12.10
!


G33#



--------------------------------------
heres the sh run for the secondary:
--------------------------------------






g41#sh run
Building configuration...

Current configuration : 9152 bytes
!
! NVRAM config last updated at 18:06:58 UTC Wed Apr 4 2007 by VV
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname g41
!
boot-start-marker
boot-end-marker
!
logging buffered 4096 debugging
enable secret 5 $
!
no aaa new-model
!
resource policy
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip subnet-zero
no ip cef
!
!
ip telnet source-interface Loopback666
!
!
ip tftp source-interface Loopback0
no ip domain lookup
ip domain name
!
!
!
!
!
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2616
revocation-check none
rsakeypair TP-self-signed-261691611
!
!
crypto pki certificate chain TP-self-signed-2616
certificate self-signed 01
3023434D 303431B6 A0030201 65445101 300D0609 2A812886 F70B1101 04005030
quit
username VV privilege 15 secret 5 $
username VVV password 7 1
!
!
controller T1 0/0/0
framing esf
linecode b8zs
channel-group 0 timeslots 1-24
!
controller T1 0/0/1
framing esf
linecode b8zs
channel-group 0 timeslots 1-24
!
!
class-map match-all ENHANCED
match access-group name ENHANCED
class-map match-any BASIC
match any
class-map match-all PREMIUM
match ip dscp ef
class-map match-any ENHANCED-SIGNALING
match ip dscp cs3
match ip dscp af31
!
!
policy-map QOS-SCHEDULER-S
class PREMIUM
priority 512
class ENHANCED
police 1024000 conform-action set-prec-transmit 2 exceed-action transmit
class ENHANCED-SIGNALING
bandwidth 32
class class-default
set ip precedence 0
fair-queue
!
!
!
!
!
!
interface Loopback0
description Management Loopback interface
ip address 145.111.111.111 255.255.255.255
!
interface Loopback666
no ip address
!
interface Multilink1
description G33
ip address 146.444.444.444 255.255.255.252
no cdp enable
ppp multilink
ppp multilink fragment disable
ppp multilink group 1
service-policy output QOS-SCHEDULER-S
!
interface FastEthernet0/0
description G33 Customer Lan
ip address 192.168.52.135 255.255.255.192
delay 50000
duplex auto
speed auto
standby 1 ip 192.168.52.130
standby 1 preempt
standby 1 track Multilink1
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0:0
description
no ip address
encapsulation ppp
no fair-queue
no cdp enable
ppp multilink
ppp multilink group 1
!
interface Serial0/0/1:0
description
no ip address
encapsulation ppp
no cdp enable
ppp multilink
ppp multilink group 1
!
router eigrp 100
redistribute bgp 64862 metric 512 50000 255 1 1500
passive-interface default
no passive-interface FastEthernet0/0
network 145.233.115.115 0.0.0.0
network 192.168.52.0
distance eigrp 15 200
no auto-summary
!
router bgp 64862
no synchronization
bgp log-neighbor-changes
network 64.213.82.220 mask 255.255.255.255
network 145.233.58.145 mask 255.255.255.255
network 192.168.51.0 backdoor
redistribute eigrp 100 route-map EigrpToBgpMap
neighbor 146.82.26.26 remote-as 6745
neighbor 146.82.26.26 default-originate route-map pad_as_path
neighbor 146.82.26.26 soft-reconfiguration inbound
neighbor 146.82.26.26 prefix-list 10 in
neighbor 146.82.26.26 route-map pad_as_path out
no auto-summary
!
ip classless
ip default-network 0.0.0.0
ip route 64.213.228.228 255.255.255.255 192.168.52.132
ip route 146.82.66.66 255.255.255.255 146.81.26.26
ip route 146.82.74.74 255.255.255.255 146.81.26.26
ip route 209.130.64.64 255.255.255.192 146.81.26.26
!
!
no ip http server
no ip http secure-server
ip tacacs source-interface Loopback0
!
ip access-list standard DENY-MGMT
permit 195.166.70.160 0.0.0.15
permit 145.0.0.0 0.255.255.255
permit 146.0.0.0 0.255.255.255
deny any
!
ip access-list extended ENHANCED
permit ip host 192.168.50.240 any
permit ip host 192.168.50.241 any
permit ip host 192.168.50.243 any
ip access-list extended EigrpToBgp
permit ip 192.168.50.0 0.0.1.0 host 255.255.255.0
permit ip host 192.168.53.0 host 255.255.255.0
permit ip 192.168.52.0 0.0.0.192 host 255.255.255.192
permit ip host 192.168.54.0 host 255.255.255.0
!
!
ip prefix-list 10 seq 5 deny 0.0.0.0/0
ip prefix-list 10 seq 10 permit 0.0.0.0/0 le 32
logging trap notifications
logging facility local2
logging source-interface Loopback0
logging
disable-eadi
!
route-map pad_as_path permit 10
set as-path prepend 64862 64862 65
!
route-map EigrpToBgpMap permit 10
match ip address EigrpToBgp
!
!
!
tacacs-server directed-request
tacacs-server key 7 09671
!
control-plane
!
!
!
!
!
!
line con 0
exec-timeout 5 0
password 7 0
login local
line aux 0
modem InOut
transport input all
stopbits 1
line vty 0 4
exec-timeout 0 0
password
login local
transport input telnet ssh
!
ntp clock-period 17178939
ntp source Loopback0
ntp server
ntp server 192.90.42.10
ntp server 192.90.12.10
end

g41#

 

[voltron1011]

Can you also post a 'show standby brief'

 

[encarter]

Primary Router:

G33#sh stand brief
P indicates configured to preempt.
|
Interface Grp Pri P State Active Standby Virtual IP
Gi0/0 1 105 P Active local 192.168.52.135 192.168.52.130


Secondary Router:

g41#sh standby brief
P indicates configured to preempt.
|
Interface Grp Prio P State Active Standby Virtual IP
Fa0/0 1 100 P Standby 192.168.52.134 local 192.168.52.130

 

[encarter]

So ditch the "no keepalive" ??????