HSRP

[arvindai]

Can anybody help with the configurations. I had been using two cisco 6500 catos switches running in HSRP to connect two different 7200 Cisco routers in primary and secondary mode. Both the switches and routers are running BGP protocol. Now the setup is like this that one of the router has been removed and both the switches should connect to the same router so in the case one switch fails the other would be there to support traffic. what is required to support this configurations. Thanks

 

[waola12]

on the interface that will be connected to routers:

just you need to run this commands on both switches

standby 1 ip 10.10.3.254
standby 1 preempt

and standby 1 priority x where X is > 100

on the switch that you wanna to let it an active switch

 

[arvindai]

The real problem is that the router won't allow us to configure same IP subnet on same router interface and isn't possible for us to connect the same 2 MPLS vlan interface on the same router

 

[lerdalt]

Are you routing between the 6500 and the 7200 or are you trunking? If I'm understanding your topology correctly, you shouldn't need HSRP to run on the interfaces between the 6500 and the 7200.

I had a similar environment where I had a pair of 6500's and a pair of 7200's. Each 6500 was connected to each 7200, and the 6500's were connected to each other via L2 trunk. I had OSPF running between all the devices, with an iBGP session running between my 7200's and eBGP running between each 7200 and our corporate data center.

The connections between the 7200 and the 6500 were just /30 networks that were in OSPF area0. No HSRP on these interfaces. IF one of the 7200 or the 6500 went down, OSPF recalculated and determined the path back out. My preference would have been to use EIGRP, but didn't get a choice in the matter.

 

[PeterHurst]

If you removed one of the HSRP pair you no longer need HSRP - if both connections are into the same switch you need a port trunk - if both ends support LACP trunking you should be able to put the ports at each end in a port-group and run them as a pair.

 

[arvindai]

I am still far away from achieving the desired output. Can I ask for hsrp and BGP configuration between two L3 switches running on hsrp and one port of each switch connecting to the different ports of the same WAN router.

 

[Minue]

Hello
To put this a simple words.Your setup doesn't seem to HSRP capable.
Are your clients hook up to the two layer 3 switches?If you have an access layer for your workstations,you can can setup HSRP with a track on the 2 links that goes to the WAN router.
Regards

 

[lerdalt]

I agree with Minue...sounds more like you need an iBGP configuration between your 7200's and the 6500's.

 

[arvindai]

I am still clueless to achieve this. Clients hook up to Access switches and then these connect to the 6500's each. I can work on BGP but not that Proficiently.

 

[lerdalt]

I think you may have confused some of us as well with what it is you are trying to accomplish. If I'm understanding correctly, you have 2 6500's and 2 7200's that are interconnected (Each 6500 is connected to each 7200), correct?

For example
6500-1 interface gig 5/1 is connected to gig 0/0 on 7200-1
6500-1 interface gig 5/2 is connected to gig 0/0 on 7200-2
6500-2 interface gig 5/1 is connected to gig 0/1 on 7200-1
6500-2 interface gig 5/2 is connceted to gig 0/1 on 7200-2

Sound right?

Do you have loopback addresses on each device?

I'm assuming you do, and that you have them all setup as BGP peers using the loopback address within the same AS (basically meaning your iBGP).
SO...
6500-1 is an iBGP peer with:
6500-2
7200-1
7200-2

6500-2 is an iBGP peer with:
6500-1
7200-1
7200-2

7200-1 is an iBGP peer with:
6500-1
6500-2
7200-2

7200-2 is an iBGP peer with:
6500-1
6500-2
7200-1

That way you have a full mesh between the four devices. With that, you should be able to have any one of the devices fail and all the routing should converge out the other device.....

 

[arvindai]

Yes our setup was similar as stated above but as I have already mention one of the router has been removed and I am looking on the configuration so that both the 6500 should connect to the same 7200. The problem arised here is that the router ethernet port won't take same subnet IP's that I used on earlier two ports of the 7200 router. Now I am thinking to make one more vlan on the second 6500 and connect the 7200. What BGP configuration should I look for now. So I would be basically creating redundancy for the two switches but the router being single

 

[Minue]

Hello
You can't use the same subnet on two different interfaces.You have a few ways to solve your problem.

1.If you want to stick with IBGP for internal routing,setup it up correctly to share all routes.(Note that using a protocol like EIGRP would be a better and easier choice.)
2.Create the HRSP on the ports pointing to the access layer switches.Then use interface tracking on the ports going to 7200.
3.The last option is a bit tricky.This is creating a VLAN between the two switches that will be use only for HRSP.
Please choose the method that you prefer and then we can help you get it running.
Regards

 

[arvindai]

I need to stick to IBGP for internal routing
I believe creating a different vlan for connecting the secondary switch to the 7200 router would be fine.

Port 5/1 primary switch vlan 100 track vlan 100
port 5/2 secondary switch vlan101
In this case when the primary switch fails how traffic would be forwarded to secondary switch and to WAN router.

What additional configuration should I look for

 

[Minue]

Hello
I have reviewed your situation again today.The quickest fix is to create a subnet between the 7200 and secondary switch.Then make sure all the devices routing table are converge.Then create a Vlan between the two layer 3 switches,that will do HSRP.The LAN clients will have the HSRP address as their default-gateway.Here's and example conf pull down from our routers.Mirror the conf for the second switch.

interface Vlan500
description *User access VLAN*
ip address 10.10.10.2 255.255.255.128
ip helper-address 10.xx.xx.xx
no ip redirects
standby 99 ip 10.10.10.1
standby 99 timers 1 3
standby 99 priority 150
standby 99 preempt delay minimum 600
standby 99 authentication vlan500

Regards