One network two routers - one for backup 4

[Montero84]

Hello,

I have two routers in my network.. one is connected to a internet provider with 10MB and the other one to a T1 with another internet provider... the idea is if the router with the 10MB go down.. I suppose to be able to have connectivity thru the T1 in the second router.. well, I tried and didn't work.. any advise or example of how should I do this configuration?

Thanks!

 

[CiscoGuy33]

Montero84,

It might help if we know what kind of Cisco routers you are using and post a copy of the "Show run" for both routers so we can see how they are configed right now!

Then we can tell you what you need to do or change

Just a thought!

E.A. Broda
CCNA, CCDA, CCAI, Network +

 

[North323]

try HSRP

 

[Montero84]

Both routers are cisco 1721

Config for the main router with 10MB

--------------------------------------------
!
! Last configuration change at 11:38:49 CST Tue Oct 7 2008 by localit
! NVRAM config last updated at 11:38:55 CST Tue Oct 7 2008 by localit
!
version 12.3
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname rtr1
!
boot-start-marker
boot-end-marker
!
security authentication failure rate 10 log
security passwords min-length 6
logging buffered 16368 debugging
no logging console
enable secret 5 $1$QM4A$snxMJ2O3DjsenGXd2TbU6.
!
clock timezone central -6
clock summer-time CST recurring
aaa new-model
!
!
aaa authentication login default local
aaa authorization exec default local
aaa accounting update newinfo
aaa session-id common
ip subnet-zero
no ip source-route
ip gratuitous-arps
ip icmp rate-limit unreachable 2000
!
!
ip domain name littlefalls-mn.catholichealth.net
ip name-server 192.168.192.18
ip name-server 192.168.192.8
ip dhcp excluded-address 192.168.4.129 192.168.4.139
!
ip dhcp pool guest
network 192.168.4.128 255.255.255.128
default-router 192.168.4.129
dns-server A.B.C.D A.B.C.D A.B.C.D
domain-name albanyguest
!
no ip bootp server
ip cef
!
!
interface Loopback0
no ip address
!
interface Ethernet0
description CharterConnection
ip address 192.168.244.195 255.255.255.248
load-interval 30
full-duplex
!
interface FastEthernet0
no ip address
ip verify unicast source reachable-via rx
speed auto
!
interface FastEthernet0.1
description Alanby-main
encapsulation dot1Q 1 native
ip address 192.168.244.2 255.255.255.128
ip helper-address 192.168.192.18
ip helper-address 192.168192.8
standby 10 ip 192.168.244.1
standby 10 priority 110
standby 10 preempt delay minimum 60
standby 10 track Ethernet0
!
interface FastEthernet0.100
description Alanby-Rad
encapsulation dot1Q 100
ip address 192.168.244.130 255.255.255.192
standby 100 ip 192.168.244.129
standby 100 priority 110
standby 100 preempt delay minimum 60
standby 100 track Ethernet0
!
interface FastEthernet0.239
description PC Support
encapsulation dot1Q 239
ip address 192.168.239.129 255.255.255.128
ip helper-address 10.111.192.58
!
interface FastEthernet0.999
description Guest
encapsulation dot1Q 999
ip address 192.168.4.129 255.255.255.128
!
router eigrp 100
passive-interface default
no passive-interface Ethernet0
no passive-interface FastEthernet0.1
no passive-interface FastEthernet0.239
no passive-interface FastEthernet0.999
network 192.168.0.0
no auto-summary
!
ip classless
no ip http server
!
!
ip access-list extended Guests
permit ip 192.168.4.128 0.0.0.127 any
route-map GuestTraffic permit 10
match ip address Guests
set ip next-hop 192.168.244.197
------------------------------------------------

Config for second router.. (backup with T1)

---------------------------------------------
!
! Last configuration change at 11:43:43 CST Tue Oct 7 2008 by localit
! NVRAM config last updated at 11:43:52 CST Tue Oct 7 2008 by localit
!
version 12.3
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname rtr2
!
boot-start-marker
boot-end-marker
!
security authentication failure rate 10 log
security passwords min-length 6
logging buffered 16368 debugging
logging console critical
enable secret 5 $1$mClb$7AvZFSnDTYG2eztqLXUrZ1
!
clock timezone CST -6
clock summer-time CST recurring
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
aaa new-model
!
!
aaa authentication login default local
aaa authorization exec default local
aaa accounting update newinfo
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa session-id common
ip subnet-zero
no ip source-route
ip gratuitous-arps
ip icmp rate-limit unreachable 2000
ip cef
!
!
!
no ip bootp server
ip domain name littlefalls-mn.catholichealth.net
ip name-server 192.168.192.18
ip name-server 192.168.192.8
no ftp-server write-enable
!
!
!
!
interface Loopback0
no ip address
!
interface FastEthernet0
no ip address
ip verify unicast source reachable-via rx
no ip redirects
no ip proxy-arp
speed auto
full-duplex
!
interface FastEthernet0.1
description Alanby-main
encapsulation dot1Q 1 native
ip address 192.168.244.3 255.255.255.128
ip helper-address 192.168.192.18
ip helper-address 192.168.192.8
standby 10 ip 192.168.244.1
standby 10 priority 95
standby 10 preempt delay minimum 60
!
interface FastEthernet0.100
description Alanby-Rad
encapsulation dot1Q 100
ip address 192.168.244.131 255.255.255.192
standby 100 ip 192.168.244.129
standby 100 priority 95
standby 100 preempt delay minimum 60
!
interface FastEthernet0.236
!
interface Serial0
description Partial T1
bandwidth 768
ip address 192.168.244.202 255.255.255.252
no fair-queue
!
router eigrp 100
passive-interface default
no passive-interface FastEthernet0.1
network 192.168.0.0
no auto-summary
!
ip classless
no ip http server

THANKS IN ADVANCE!

 

[unclerico]

On one 1721 you have this: standby 10 priority 110
On the second 1721 you have this: standby 10 priority 95

You are performing interface tracking using the default decrement value of 10. When e0 goes down on the main 1720 the priority is decremented to 100. 100 > 95. It will still be the preferred gateway. You need to change the decrement value to something greater than 10 or change the priority values around a bit.

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[Montero84]

unclerico

If you were going to do the change.. how would you set it?

sorry to bother you with that?

Thanks again!

 

[Minue]

Hello
Just change the "standby 10 priority 95" to standby 10 priority 105.
Also post a show standby,so we can verify.
Regards

 

[Montero84]

Minue,

What about the standby 100 priority 95?, should I change that to: standby 100 priority 105 too?

Thanks again!

 

[Minue]

Hello
If you are using the default decrement which is of "10" doing the maths you will need to lower the active standby router, so as to get itunder the backup. So 110 - 105 = 95 or 100 - 95 = 90.
Another way to do this is leave your conf as it is at use the "standby 10 track Ethernet0 25".The "25" means decrement 25 points.
I hope I have made myself clear.
Regards

 

[Montero84]

Hello Minue,

Thanks again for your reply.

I changed the standby 10 priority 95
to: standby 10 priority 105

I did a show standby in the second router.. here is what I got;

rtr2#show standby
FastEthernet0.1 - Group 10
State is Standby
58 state changes, last state change 31w3d
Virtual IP address is 192.168.244.1
Active virtual MAC address is 0110.0c07.ac0a
Local virtual MAC address is 0110.0c07.ac0a (default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 0.276 secs
Preemption enabled, delay min 60 secs
Active router is 192.168.244.2, priority 110 (expires in 8.764 sec)
Standby router is local
Priority 105 (configured 105)
IP redundancy name is "hsrp-Fa0.1-10" (default)
FastEthernet0.100 - Group 100
State is Standby
58 state changes, last state change 31w3d
Virtual IP address is 192.168.244.129
Active virtual MAC address is 0110.0c07.ac64
Local virtual MAC address is 0110.0c07.ac64 (default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 1.820 secs
Preemption enabled, delay min 60 secs
Active router is 192.168.244.130, priority 110 (expires in 8.756 sec)
Standby router is local
Priority 95 (configured 95)
IP redundancy name is "hsrp-Fa0.100-100" (default)

 

[unclerico]

Look at Minue coming in to clean up lol...it's all good...you need to be sure to make priority changes for all of your groups. As you can see group 100 is still at 95.

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[Montero84]

Minue,

I chanched the groups...

Here is what I got after:

rtr2#sh standby
FastEthernet0.1 - Group 10
State is Standby
58 state changes, last state change 31w3d
Virtual IP address is 192.168.244.1
Active virtual MAC address is 0110.0c07.ac0a
Local virtual MAC address is 0110.0c07.ac0a (def
Hello time 3 sec, hold time 10 sec
Next hello sent in 1.280 secs
Preemption enabled, delay min 60 secs
Active router is 192.168.244.2, priority 110 (expir
Standby router is local
Priority 105 (configured 105)
IP redundancy name is "hsrp-Fa0.1-10" (default)
FastEthernet0.100 - Group 100
State is Standby
58 state changes, last state change 31w3d
Virtual IP address is 192.168.244.129
Active virtual MAC address is 0110.0c07.ac64
Local virtual MAC address is 0110.0c07.ac64 (def
Hello time 3 sec, hold time 10 sec
Next hello sent in 0.024 secs
Preemption enabled, delay min 60 secs
Active router is 192.168.244.130, priority 110 (exp
Standby router is local
Priority 105 (configured 105)
IP redundancy name is "hsrp-Fa0.100-100" (default)

 

[Minue]

Hi Unclerico
lol. Saying that reminds me of the film "Pulp Fiction" with Harvey Keital as the cleaner ;-))

Montero84
Can you tell us if the HSRP is working.

Regards

 

[Montero84]

Unclerico and Minue,

Thank you both for helping me on this...

I can't check right now if the HSRP is working right now... I need to schedule a time to try that ... probably next week.. but, I am thinking for what you have explained to me and the changes I made with your help... this should be working next time... , I will let you know.

Thank you so much!...

 

[unclerico]

Montero, I see that you are from Little Falls (at least that's what your domain name says). I'm down in Minneapolis. It looks like we're getting absolutely bombarded with snow right now (I wouldn't know cuz I'm in Miami right now )

Minue, I'll try to stay on your good side. I'd hate to need to be cleaned up lol...

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[Montero84]

Yes, I feel bad I needed to be cleaned up.. with this config.. , but, I am still in the learning curve.. now I learned about this..

By the way.. yes... the snow is covering us.. I went out for lunch and my car got stock.. somebody had to push my car with a truck... too bad!

 

[unclerico]

Yes, I feel bad I needed to be cleaned up.. with this config.. , but, I am still in the learning curve.. now I learned about this..

No need to feel bad, we enjoy helping out. If we didn't we wouldn't be here. As I'm sure you know, one of the best ways to learn is by having problems.

By the way.. yes... the snow is covering us.. I went out for lunch and my car got stock.. somebody had to push my car with a truck... too bad!

No good lol. Looks like you need to get yourself a truck ;-)...I have a flight back to MSP tonight so hopefully it won't be delayed or fall out of the sky. I always look to see if Capt. Sully is the pilot just in case we need to ditch in the water :-D...Wish me luck...

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[Montero84]

Unclerico,

Yes, one of the best way to learn is by having problems...

I have to tell you it's snowing very bad... but I wish you a very good luck the fligt won't be delayed and you have a safe flight back home. Cap. Sully says he will wait a few months before he flight again... but, don't worry.. there are some others magnificent pilots out there.. ...