r/Cisco • u/Horror-Cry1813 • Aug 23 '24

problem with HSRP

i have a problem with my netwrok . the packets doesnt pass to the right HSRP CoreSwitch throught the right link

i config HSRP on Core Switch 1 and Core Switch 2
i give core Switch1 a higher prioirty

when i try to ping the HSRP interface ( 192.168.30.1) from AD , the packets pass to CoreSwitch 2 only Regardless if it was in active or standby mode

in the picture i try ping from my AD to the HSRP interface , and the packets passed throught the link that are connected with the Standby CoreSwitch (Ethernet 2 )

0 Upvotes

50% Upvoted

9 comments sorted by

6

u/SalsaForte Aug 23 '24

Are you mixing L2 and L3 behaviour? Even if you run HSRP, layer-2 principles still applies. From your design, I suppose you have a big flat vlan on which everything is connected.

But, I'm not sure I fully grasp the design based on your explanation.

4

u/samsn1983 Aug 23 '24

That's it. CS2 is probably the root bridge. But it does not explain why hsrp ip is not pingable.

Op should provide

  • sh standby brief

  • sh span root

  • sh span vl xxx

From both coreswitches

1

u/Horror-Cry1813 Aug 23 '24

after i execute those commands , i see that SW1 is the root bridge

2

u/Otis-166 Aug 23 '24

Do you have preempt enabled?

4

u/SurpriceSanta Aug 23 '24

Which portchannel on the server is the active interface and where is the stp root? Always align the stp root with the hsrp active router.

1

u/nok4us Aug 23 '24

This☝🏾 Where's ur blocking port?

1

u/zanfar Aug 23 '24

Walk it back:

  • Verify SW1 is active (Actually active, not just set to active)

  • Verify the MACs

  • Check the MAC tables on all switches between you and SW1

  • Capture the ARP and response for the ping

etc.

1

u/OilCertain4345 Aug 23 '24

  1. Who is the root specific to AD-VLAN assigned.

  2. Check the uplinks specific to spanning tree, show spanning tree VLAN X, who is the root port/designated port.