Professional Documents
Culture Documents
Copyright www.ine.com
Implementing Basic HSRP
Enabling HSRP in the interface
Switch(config-if)# standby <group-id> ip <virtual-ip>
Configuring priority
Switch(config-if)# standby <group-id> priority <priority>
Enabling preemption
Switch(config-if)# standby <group-id> preempt
Copyright www.ine.com
HSRP State Machine
Disabled
Initial (INIT)
Learn
Listen
Speak
Standby / Active
Copyright www.ine.com
HSRP Hello Timers
HSRP Hello timer = 3-secs
Dead Timer = 10-secs (or 3x Hello)
Copyright www.ine.com
Modifying Preemption Behavior
HSRP Preemption can be delayed to allow
time for other protocols to re-build their
tables.
Copyright www.ine.com
HSRP Authentication (interface keys)
Authentication supported
Plain text
MD5
Plain-text configuration
Sw1(config-if)#standby <group-id> authentication
<password>
MD5 configuration
Sw1(config-if)#standby <group-id> authentication md5 key-string [0|7]
string
Copyright www.ine.com
HSRP Authentication (key chain keys)
HSRP can obtain current/active MD5 key from a key chain.
NTP should also be configured.
Copyright www.ine.com
HSRP Object Tracking
HSRP can track objects (typically interfaces)
If tracked object fails, HSRP priority is reduced by
configurable amount (default=10)
Active
Standby
Ser0/0
1.1.1.3
My gateway is
1.1.1.1 Virtual Router
1.1.1.1
1.1.1.2
Copyright www.ine.com