problem hsrp

[wanyph]

Hi,

Have Nortel Switches in my Network

I have 2 Passports
On each Passport I have 1 Router connected,
The Passports are connected together with a trunk
On the Cisco Routers is HSRP running

Router 1 172.22.254.252
Router 2 172.22.254.253

vitual hsrp adress 172.22.254.254

When I shutdown Router 1, Router 2 is becomming active.

But all my clients are getting invalid MAC address of 172.22.254.254

show arp
172.22.254.254 00-00-00-00-00-00

When I turn on router 1 its all working agin.

Is there a problem with cisco + nortel combination?

Please help

 

[dagnaget]

I have two Cisco routers configured for HSRP and they are plugged into Nortel switches and work fine. You said they are connected "together with a trunk" not sure what you mean by that. Does it work if you plug the Cisco's into another switch/hub?

 

[wanyph]

hi,

I mean the 2 passports are trunked together
No, it doesn´t work, when I plug the routers into another
switch.

thanks,
mewi

 

[lambent]

If possible, please post the HSRP configuration in both routers as well as the VLAN configuration (membership, tagging) on both Passports.

 

[wanyph]

Hi,

I only have the router config from my main-router:
(because the routers are maintained by my provider)

interface FastEthernet0/0
description ***** LAN *****
bandwidth 100000
ip address 172.15.254.253 255.255.0.0
ip ospf message-digest-key 1 md5 7 345345345353455345
ip ospf cost 2500
load-interval 30
speed 100
full-duplex
standby 1 ip 172.15.254.254
standby 1 priority 90
standby 1 preempt
standby 1 track FastEthernet0/1 40
service-policy input xxxxxxx

-----------------------------------------------------------
And this is from the first passport:
#
# MLT CONFIGURATION
#

mlt 1 create
mlt 1 name "MLT ins RZ2"
mlt 1 perform-tagging enable
mlt 1 add ports 7/15-7/16,8/15-8/16,9/15-9/16

#
# STG CONFIGURATION
#

stg 1 add ports 7/15-7/16,8/15-8/16,9/15-9/16
stg 1 priority 4096

#
# VLAN CONFIGURATION
#

vlan 1 add-mlt 1
vlan 1 ip create 172.15.254.241/255.255.0.0 mac_offset 0
vlan 1 ip igmp query-max-resp 1
vlan 1 ip igmp proxy-snoop enable
vlan 1 ip igmp snoop enable
vlan 1 ip igmp mrdisc mrdisc-enable disable

-----------------------------------------------------------
the second passport:

#
# MLT CONFIGURATION
#

mlt 1 create
mlt 1 name "MLT ins RZ1"
mlt 1 perform-tagging enable
mlt 1 add ports 7/15-7/16,8/15-8/16,9/15-9/16
mlt 2 create
mlt 2 name "MLT zu RK2SWI2"
mlt 2 perform-tagging enable
mlt 2 add ports 3/1,4/1
mlt 3 create
mlt 3 name "MLT zu RK8SWI2"
mlt 3 perform-tagging enable
mlt 3 add ports 3/2,4/2
mlt 4 create
mlt 4 name "MLT zu RK5SWI2"
mlt 4 perform-tagging enable
mlt 4 add ports 3/3,4/3

#
# STG CONFIGURATION
#

stg 1 add ports 3/1-3/3,4/1-4/3,7/15-7/16,8/15-8/16,9/15-9/16
stg 1 priority 8000

#
# VLAN CONFIGURATION
#

vlan 1 add-mlt 1
vlan 1 add-mlt 2
vlan 1 add-mlt 3
vlan 1 add-mlt 4
vlan 1 ip create 172.15.254.242/255.255.0.0 mac_offset 0
vlan 1 ip igmp query-max-resp 1
vlan 1 ip igmp proxy-snoop enable
vlan 1 ip igmp snoop enable
vlan 1 ip igmp mrdisc mrdisc-enable disable


thanks a lot,
mewi

 

[lambent]

you better ask your provider to double check the HSRP configuration in Router 2. You have the right to ask them to give you the HSRP configuration.

Also you can try to do a "show standby f0/0" and check if your HSRP group is actually sensing Router 2 as the standby router. You can show us the output.

 

[wanyph]

hi,

have the ethernet-configs of both routers:

main router:

interface FastEthernet0/0
description ***** LAN *****
bandwidth 100000
ip address 172.15.254.253 255.255.0.0
ip ospf message-digest-key 1 md5 7 tertertertet
ip ospf cost 2500
load-interval 30
speed 100
full-duplex
standby 1 ip 172.15.254.254
standby 1 priority 90
standby 1 preempt
standby 1 track FastEthernet0/1 40
service-policy input dfgdfggdg


#sh stand
FastEthernet0/0 - Group 1
State is Active
1 state change, last state change 2d13h
Virtual IP address is 172.15.254.254
Active virtual MAC address is 0000.0c07.ac01
Local virtual MAC address is 0000.0c07.ac01 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 0.436 secs
Preemption enabled
Active router is local
Standby router is 172.15.254.252, priority 80 (expires in 7.404 sec)
Priority 90 (configured 90)
Track interface FastEthernet0/1 state Up decrement 40
IP redundancy name is "hsrp-Fa0/0-1" (default)


----------------------------------------------------------



Backup#

interface FastEthernet0/0
description ***** LAN *****
bandwidth 100000
ip address 172.15.254.252 255.255.0.0
ip ospf message-digest-key 1 md5 7 gdgdfgdgdf
ip ospf cost 12500
speed 100
full-duplex
standby 1 ip 172.15.254.254
standby 1 priority 80
standby 1 preempt
standby 1 track FastEthernet0/1 40
service-policy input sfsdsdfsdfs


Backup#sh standby
FastEthernet0/0 - Group 1
State is Standby
33 state changes, last state change 2d13h
Virtual IP address is 172.15.254.254
Active virtual MAC address is 0000.0c07.ac01
Local virtual MAC address is 0000.0c07.ac01 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 0.076 secs
Preemption enabled
Active router is 172.15.254.253, priority 90 (expires in 9.932 sec)
Standby router is local
Priority 80 (configured 80)
Track interface FastEthernet0/1 state Up decrement 40
IP redundancy name is "hsrp-Fa0/0-1" (default)
Backup#



any idea ?

thanks a lot,
mewi

 

[lambent]

I see that you have policy-based routing on both routers. Do you mind listing the relevant configuration also?

"
Router 1 172.22.254.252
Router 2 172.22.254.253

vitual hsrp adress 172.22.254.254

When I shutdown Router 1, Router 2 is becomming active."

Can you again clarify which router is main, which one is backup? Since from the configuration, seems like Router 2 is in fact the main one.

 

[wanyph]

sorry,
I have changed the IP-adresses for posting.

172.15.254.253 is the main router.
172.15.254.252 is the backup router.


this is the policy part of the main router config (i think):


policy-map P7_40960
class CL-03
bandwidth percent 50
class CL-OAM
bandwidth percent 10
class class-default
shape average 40960000
bandwidth percent 40
policy-map MARK_P7_40960
class CL-HData
police cir 20480000 bc 2560000 be 2560000
conform-action set-prec-transmit 3
exceed-action set-prec-transmit 1
class class-default
set ip precedence 0

 

[lambent]

something worth to try:

Directly connect a PC to the backup router LAN interface using a crossover UTP cable. Since now the backup router cannot see the primary router so it'll assume the primary is dead and it itself becomes active. In this case your PC should be able to ping the VIP and get an arp entry. If your PC cannot ping the VIP, then it looks like something weird is happening inside that backup router.

Also if you are sure that "No, it doesn´t work, when I plug the routers into another switch" is true, then this shouldn't be a problem of Nortel switches.

Anyway let us know the testing result.

 

[wanyph]

ok,

thanks for your help,
I have tried to ping the backup router with a crossover cable. That was successful.

I will try some other thinks in the next weeks,
and will inform you about the result.


best regards,
mewi

 

[wanyph]

Hi,

Sorry for the long time.
The problem is already solved.
A simple reboot of the backup router was the solution.
I found out, that he did´t answered on arp-requests.
Now its working.

mewi