[c-nsp] Sharing HSRP group numbers across multiple HSRP instances
Christian MacNevin
christian.macnevin at gmail.com
Mon Dec 22 14:25:38 EST 2008
As far as I'm aware, the group number is irrelevant. You're still getting a
group per vlan, it's just that the identifier only reaches 255. The
configuration is all local to the
VLAN, so i'm not aware of any shared anything except for number *space*.
ie:
int vlan 1
standby group 1
standby ip 1.2.3.4
standby preempt
!
int vlan 2
standby group 1
standby ip 1.2.3.5
standby preempt
Still results in two completely separate calculations and sets of
advertisements, no?
On Mon, Dec 22, 2008 at 11:18 AM, Justin Shore <justin at justinshore.com>wrote:
> I have a situation in which I'm wondering if I can use the same HSRP group
> number for multiple SVIs on a pair of 7600s. The VLANs all perform similar
> functions in groups of 3; outside of FWSM contexts, inside of FWSM context,
> SVI for terminating client IPSec VPNs. Ie, each customer has 3 VLANs that
> perform these functions. I have multiple customers and each has 3 VLANs in
> VRFs (where applicable) on my 7600s carved out for these specific functions.
>
> Can I use the same HSRP group for each of the individual 3 VLANs across
> multiple customers? ie:
>
> Customer VLAN Purpose
> -------------------------------
> 1 1501 Outside
> 1 1601 Inside
> 1 1701 CVPN
> 2 1502 Outside
> 2 1602 Inside
> 2 1702 CVPN
> 3 1503 Outside
> 3 1603 Inside
> 3 1703 CVPN
>
> Purpose HSRP Group
> ---------------------------
> FWSM outside 100
> FWSM inside 101
> CVPN 102
>
> VLANs 1501-1503 get group 100, 1601-1603 get group 101, 1701-1703 get group
> 102. Each customer VLAN performing that specific role shares that HSRP
> group #. That's worded better. All VLANs share the same L2 infrastructure
> (actually they never leave the 7600s).
>
> Is this doable or should I just use HSRPv2 and one of the 4096 group #s
> available to me? Would sharing group #s result in few HSRP hellos send and
> processed, thus lower RP overhead?
>
> Just curious. Thanks
> Justin
> _______________________________________________
> cisco-nsp mailing list cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
More information about the cisco-nsp
mailing list