-
First Hop Redundancy Protocols (FHRP)
- A class of protocols that includes HSRP, VRRP, and GLBP, which allows multiple redundant routers on the same subnet to act as a single default router (first-hop router).
- FHRPs allows two or more routers to share a virtual IP address that acts as the default gateway for a connected and shared subnet (VLAN).
- Hosts in the subnet (VLAN) use the FHRP virtual IP address as their default gateway.
- The routers connected to the same subnet (VLAN) exchange FHRP messages to determine how to divide the workload between them.
- When a router fails, FHRP re-assigns traffic responsibilities between all routing devices assigned to the FHRP virtual IP address.
-
FHRPs:
-
Hot Standby Router Protocol (HSRP)
- A Cisco-proprietary protocol that allows two (or more) routers to share the duties of being the default router on a subnet, with an active/standby model, with one router acting as the default router and the other sitting by waiting to take over that role if the first router fails.
-
Virtual Router Redundancy Protocol (VRRP)
- A TCP/IP RFC protocol that allows two (or more) routers to share the duties of being the default router on a subnet, with an active/standby model, with one router acting as the default router and the other sitting by waiting to take over that role if the first router fails.
-
VRRP
- Virtual Router Redundancy Protocol (VRRP) uses an (active / standby) redundancy approach, and performs load balancing on a per subnet basis.
-
Gateway Load Balancing Protocol (GLBP)
- A Cisco-proprietary protocol that allows two (or more) routers to share the duties of being the default router on a subnet, with an active/active model, with all routers actively forwarding off-subnet traffic for some hosts in the subnet.
-
GLBP
- Gateway Load Balancing Protocol (GLBP) uses an (active / active) redundancy approach, and performs load balancing on a per host basis.
-
Redundancy:
- The inclusion of extra components that are not strictly necessary to functioning, in case of failure in other components.
-
Availability:
- A user's ability to use a network resource at any time.
-
Single Point of Failure:
- In a network, a single device or link which, if it fails, causes an outage for a given population of users.
-
HSRP
- Hot Standby Router Protocol (HSRP) uses an (active / standby) redundancy approach, and performs load balancing on a per subnet basis.
- When two or more routers are configured to use HSRP, one will be considered the active router, and all others will be considered to be standby routers.
- Only the active router actively supports traffic. All traffic sent to the HSRP virtual IP address is sent to the active router.
-
HSRP Active and Standby State:
-
HSRP Active State:
- A Hot Standby Router Protocol (HSRP) state in which the router actively supports the forwarding of off-subnet packets for hosts in that subnet.
- The HSRP Active router implements a virtual IP address and a matching virtual MAC address.
-
Virtual MAC Address (vMAC):
- For any FHRP protocol, a MAC address that the FHRP uses to receive frames from hosts.
-
HSRP Standby State:
- A Hot Standby Router Protocol (HSRP) state in which the router does not currently support the forwarding of off-subnet packets for hosts in that subnet, instead waiting for the currently active router to fail before taking over that role.
- Two or more routers with HSRP enabled and with at least one interface in a shared VLAN (subnet) will send HSRP messages to each other to negotiate traffic responsibilities (active and standby states).
-
HSRP Failover:
- When HSRP failover occurs, a standby router becomes the HSRP active router, and all traffic sent to the HSRP virtual IP address is sent to it.
- However, any connected LAN switches that forwarded frames to the previous HSRP active router must change their MAC address table to reflect the fact that a new device is performing IP routing as the new HSRP active router.
- Switches are signalled to change to a new vMAC when the new HSRP active router sends a broadcast Ethernet frame with the known vMAC as the source MAC address. The switches in the VLAN perform MAC learning normally, and now associate the vMAC with the port of the new HSRP active router.
-
When HSRP failover occurs, the new HSRP active router sends a broadcast Ethernet frame with new vMAC address information.
- This message is an ARP Reply message, also called a Gratuitous ARP (GARP); it is called this because the router replies without receiving a request.
-
HSRP Load Balancing:
- HSRP performs load balancing between multiple VLANs by designating different HSRP enabled routers as the HSRP active router in different VLANs. This is an effective form of load balancing because sites that would deploy a second router for redundancy are also generally large enough to place their traffic into multiple VLANs (subnets).
-
Command Reference
-
Configuration
-
Configure a router to participate in an HSRP group
- Router(config)# standby <group_number> ip <virtual_ip>
-
Configure the HSRP priority. 0 to 255. Default 100. Higher wins.
- Router(config)# standby <group_number> priority <number>
-
Configure the device to compete for HSRP active status if the current active router fails (preemption)
- Router(config)# standby <group_number> preempt
-
Name and describe the HSRP group
- Router(config)# standby <group_number> <name> <description>
-
Set the HSRP version (1 or 2)
- Router(config)# standby version {1|2}
-
Troubleshooting
-
List information on HSRP processes
- show standby
-
List information on HSRP processes, with one line per interface participating in the process
- show standby brief
-
Troubleshooting
-
Configuration Issues
-
Devices within an HSRP Group must have matching:
- HSRP versions
- HSRP Group numbers
- HSRP Virtual IP Address
-
ACLs may interfere with HSRP if configured to filter:
- UDP port 1985
- HSRPv1 Multicast 224.0.0.2
- HSRPv2 Multicast 224.0.0.102
-
Design Issues
-
The HSRP Virtual IP Address must have these characteristics:
- Must be in the same subnet as an interface address
- Must not be used by any other device
-
Layer 2
- HSRP router interfaces must exist in the same VLAN