[c-nsp] 877 routers and HSRP/VRRP

[Jon Allen Boone]

Brett,

   Does traffic route successfully through the HSRP/VRRP routers?   
Since arp is working correctly, then traffic routing should be fine.

   Can you ping something on the "backside" of the routers?  I'd  
suspect some kind of filter blocking icmp echo/reply on the 877s  
themselves.  That might be why you can ping the virtual IP from the  
master, as the filter would be by-passed on the master device itself.

--jon



On Oct 12, 2005, at 22:55, Brett Looney wrote:

> Greets,
>
> I've got a couple of 877 routers here and I can't get HSRP or VRRP
> running successfully.
>
> If I configure HSRP/VRRP the routers do the whole negotiation thing -
> they can see each other and "show standby brief" or "show vrrp brief"
> shows the correct information - and the routers do the whole
> active/master selection correctly.
>
> However, workstations cannot ping the virtual IP address. Only the
> router that is active/master can ping the virtual IP address.
> Workstations do, however, pick up the correct ARP entry for the
> virtual IP address.
>
> Doing a "debug ip packet", "debug ip icmp" and "debug arp" on the
> routers while trying to ping the vritual IP address shows multicast
> traffic between them (as expected), the ARP requests and replies but
> the router never shows the ICMP echo request coming in.
>
> Traffic to/from the real IP address on the routers works fine.
>
> The only interface I've tried this on is VLAN1. Config is simply:
>
>     interface VLAN1
>       ip address 192.168.x.253
>       standby 1 ip 192.168.x.254
> or
>       vrrp 1 ip 192.168.x.254
>
>
> I've tried 12.3(8)YI1, 12.3(14)YT1 and 12.4(2)T1 just for laughs. All
> version have been the Advanced Security feature set. All have the  
> same issue.
>
> Any ideas? Am I missing something really simple? My next step is to
> raise a TAC call but I thought I'd bounce it around here first.
>
> TIA.
>
> B.
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
>
>