Home > Gateway Load Balancing Protocol GLBP Tutorial

Gateway Load Balancing Protocol GLBP Tutorial

May 4th, 2014 Go to comments

The main disadvantage of HSRP and VRRP is that only one gateway is elected to be the active gateway and used to forward traffic whilst the rest are unused until the active one fails. Gateway Load Balancing Protocol (GLBP) is a Cisco proprietary protocol and performs the similar function to HSRP and VRRP but it supports load balancing among members in a GLBP group. In this tutorial, we will learn how GLBP works.

Note: Although we can partially configure load balancing via HSRP or VRRP using multiple groups but we have to assign different default gateways on the hosts. If one group fails, we must reconfigure the default gateways on the hosts, which results in extra administrative burden.

GLBP Election

When the routers are configured to a GLBP group, they first elect one gateway to be the Active Virtual Gateway (AVG) for that group. The election is based on the priority of each gateway (highest priority wins). If all of them have the same priority then the gateway with the highest real IP address becomes the AVG. The AVG, in turn, assigns a virtual MAC address to each member of the GLBP group. Each gateway which is assigned a virtual MAC address is called Active Virtual Forwarder (AVF). A GLBP group only has a maximum of four AVFs. If there are more than 4 gateways in a GLBP group then the rest will become Standby Virtual Forwarder (SVF) which will take the place of a AVF in case of failure. The virtual MAC address in GLBP is 0007.b400.xxyy where xx is the GLBP group number and yy is the different number of each gateway (01, 02, 03…).

+ In this tutorial, the words “gateway” and “router” are use interchangeable. In fact, GLBP can run on both router and switch so the word “gateway”, which can represent for both router and switch, is better to describe GLBP.
+ For switch, GLBP is supported only on Cisco 4500 and 6500 series.

The gateway with the highest priority among the remaining ones is elected the Standby AVG (SVG) which will take the role of the AVG in the case it is down.


For example in the topology above suppose all of the gateways have the same priority and GLBP is turned on at the same time on all gateways (or they are configured with the preempt feature), R4 will be elected AVG because of its highest IP address R3 will be elected SVG because of its second highest IP address ( The AVFs are elected based on the weight so the four highest weight values would win for the four AVFs. In this case we only have four gateways so surely they are all elected AVFs. With GLBP, there is still one virtual IP address which is assigned by the administrator via the “glbp ip …” command (for example glbp 1 ip

How GLBP works


After the election ends, R4 is both the AVG and AVF; R3 is SVG and AVF; R2 & R1 are pure AVFs. R4 assigned the MAC addresses of 0007.b4000101, 0007.b4000102, 0007.b4000103, 0007.b4000104 to R1, R2, R3, R4 respectively; we will abbreviate the MAC addresses as 01, 02, 03 and 04. Let’s see how GLBP works!

The default gateway of PC1, PC2 and PC3 were set to so if they want to send traffic outside they have to send ARP Request first to their default gateway. They broadcast an ARP Request to ask “Hey, I need to know the MAC address of the guy!”. R4, which is the AVG, is responsible for answering the ARP Request. But the trick here is it does not always give the same answer to that question:

For PC1, R4 will answer “The MAC address of the guy is 01!”.
For PC2, R4 will answer “The MAC address of the guy is 02!”.
For PC3, R4 will answer “The MAC address of the guy is 03!”.
For PC4, R4 will answer “The MAC address of the guy is 04!”.

As the result of this, PC1 will send the traffic to R1; PC2 will send traffic to R2; PC3 will send traffic to R3 and PC4 will send traffic to R4! And load balancing is achieved!

When AVG fails

Everything is working smoothly then suddenly R4 (AVG) is down. What will happen now?

As we know R3 was chosen as SVG because of its second highest priority so when R4 is down, R3 becomes the new AVG and is responsible for forwarding traffic sent to the virtual MAC address of R4. In other words, R3 is now responsible for traffic from PC3 & PC4 with two MAC addresses 03, 04. Communication between R4 continues without disruption or change at the host side.


Wait! Maybe you have a question to ask here. So how about the Switch? How can the switch forward the frames to the new SVG on another port? Remember that Switch saved the MAC 04 for the port connecting to R4. Well, the answer here is when the standby becomes the active it will send a gratuitous ARP reply to flush the CAM tables of the switches and the ARP cache of the hosts. So the switch will learn the new port for MAC 04.

Each AVF listens to others, if one AVF can no more forward traffic, all listening AVFs will compete to take the responsibility of the failed AVF vMAC along with its own (AVF with higher weighting wins).

To detect a gateway failure, GLBP members communicate between each other through hello messages sent every 3 seconds to the multicast address, User Datagram Protocol (UDP) port 3222.

GLBP supports up to 1024 virtual routers (GLBP groups) per physical interface of a router.

Load balancing algorithm

GLBP load sharing is done in one of three ways:

Round-robin load-balancing algorithm: Each router MAC is used sequentially to respond to ARP requests. This is the default load balancing mode in GLBP and is suitable for any number of end hosts.
Weighted load-balancing algorithm
: Traffic is balanced proportional to a configured weight. Each GLBP router in the group will advertise its weighting and assignment; the AVG will act based on that value. For example, if there are two routers in a group and R1 has double the forwarding capacity of router B, the weighting value of router A should be configured to be double the amount of R2.
Host-dependent load-balancing algorithm: A given host always uses the same router.

Interface Tracking

Like HSRP, GLBP can be configured to track interfaces. For example, if the WAN link from Router R4 is lost, GLBP detects the failure and decrements the router priority (when a tracked interface fails). The second router then becomes primary. This transition is transparent for the hosts.


GLBP Authentication

GLBP has three authentication types:
+ No authentication
+ MD5 authentication
+ Plain text authentication

MD5 is the most security method so far. With this method, the same keys are configured on both ends. One end will send the encrypted key (called hash, using MD5) to the other. At the other side, the same key is also encrypted and compared with the receiving encrypted key. If the two encrypted keys are the same then authentication is approved. The advantage of this method is only the encrypted key is sent through the link. The key for the MD5 hash can either be given directly in the configuration using a key string or supplied indirectly through a key chain.

Comments (41) Comments
Comment pages
1 2 3 2117
  1. pedro
    December 28th, 2015

    Please send last dumps to {email not allowed}. All peoples who posses tamquem. Thanks.

  2. hello
    December 28th, 2015

    Hello everyone!
    Could anybody please send me the latest dumps with PDF file to my email:
    {email not allowed}
    Thank you so much in advance and have a good day.
    Best regards,

  3. Anonymous
    January 25th, 2016

    hello please send me the latest pdf
    {email not allowed}

  4. Motsiaballade
    March 7th, 2016

    weighted load-balancing algorithm exaplanation i think should read like this: if R1 has double forwarding capacity of R2, the weighting value of R1 should be configured to be double the amount of R2. With a combination of Router A, Router B and R1 and R2 the statement does not make sense.

  5. jackson
    March 21st, 2016

    Hi I’m going to take ccnp routing in two week time ..
    I hope someone kindly to advise how can I get some latest pass exam question

    Thank you so much

  6. theri
    April 21st, 2016

    latest dumps???

  7. Anonymous
    April 23rd, 2016

    Great tutorial. 5*

  8. Navy Moose
    May 15th, 2016

    For you clowns looking for dumps; there is a radical method for passing the exams. This method will require effort, reading, and doing labs. It is called LEARNING IT ON YOUR OWN! Try it sometime and you will be amazed at how well you actually know it.

  9. Anonymous
    May 17th, 2016

    my email shakaa.gmail.com

  10. Anonymous
    May 17th, 2016

    i don’t know what is MD5 ?

  11. Anonymous
    May 17th, 2016

    can anyone help me ?

  12. Jerry
    May 27th, 2016

    thanks :) Simple and understandable

  13. Anonymous
    May 30th, 2016


  14. madsic
    June 12th, 2016

    what is md5?

  15. tobychuks
    June 24th, 2016

    Pls is there anyone with the latest CCNA R&S dumps. kindly forward to my mail am planning to write the exam in two weeks time ugwutobychuks @ gmail. com.

  16. Anonymous
    July 8th, 2016

    Pls is there anyone with the latest CCNA R&S dumps. kindly forward to my mail am planning to take the exam in two weeks time {email not allowed}

  17. Anonymous
    July 8th, 2016

    Pls is there anyone with the latest CCNA R&S dumps. kindly forward to my mail am planning to take the exam in two weeks time narendraacharya @ live . com

  18. Anonymous
    July 8th, 2016

    Pls is there anyone with the latest CCNA R&S dumps. kindly forward to my mail am planning to take the exam in two weeks time narendraacharya @ live . com. au

  19. MD5
    July 12th, 2016

    MD5 is Basically a Hashing algorithm No need to worry about the algorithm in the exam itself… However take note MD5 is not actually an encryption as explained… Sort of annoyed that the author is referring it to an encryption…

    What you might need to know is how to set up Authentication… but i don’t think that is covered in ICND2 i could be wrong though…

  20. Anonymous
    July 16th, 2016

    hye everyone anyone has latest dumps pls send ….my email id…[{email not allowed}]

  21. Anonymous
    July 21st, 2016

    plz how do i get to where i will converse with people doing ccnp

  22. Anonymous
    July 29th, 2016

    When I read about CCNA depreciation in value. I think of these guys. LOL

  23. confused
    August 6th, 2016

    Why are ppl asking for dumps on this site? What do they think is different?

  24. Anonymous
    August 22nd, 2016

    Superb Notes of GLBP..Thanks alot.

  25. Anonymous
    October 17th, 2016

    HI Team,

    Can you tell me how may maximunm router can be participates in GLPBP

  26. Parker Catoggio
    October 26th, 2016
  27. Anonymous
    October 31st, 2016

    No one should be asking for dumps as this is a form of cheating, just saying

  28. Elliot48
    November 1st, 2016

    Very good explanation!

  29. Ben Kamemoto
    November 2nd, 2016
  30. Reagan Mccary
    December 6th, 2016

    Thank you that is very helpful for me, as a new site has been inundated with comments that seem OK at first glance but then get repeated with a slight change of wording. I have something concrete to go on now and will delete quite a lot of them.


  31. Angelica
    December 20th, 2016
  32. Gobba
    April 3rd, 2017

    Pls send me latest dumps…my email rukmal.pathi at gmail dot com….Thanks !!!!

  33. Musa
    April 14th, 2017

    Here is the New 266 Q&As

    DOWNLOAD Files at below link url

  34. RIPv2
    May 11th, 2017

    Can anyone please advise where can i get the 350q dumps ?

  35. RIPv2
    May 11th, 2017

    can someone send me the 350q dumps at ashtilhoo at gmail dot com…. Thanks !!!!

  36. IRIE
    June 10th, 2017

    please send dumps and links to
    I am doing CCNA 200-125 in 8 weeks

  37. Alina
    September 27th, 2017

    Find updated dumps here

  38. Elmer
    November 2nd, 2017

    Passed with the 552q dumps, all questions were from there.

  39. Srujan
    November 17th, 2017

    Hey superb explanation.

    if the WAN link from Router R4 is lost, GLBP detects the failure and decrements the router priority (when a tracked interface fails). The second router then becomes primary.

    Q.1) What if one of the AVF up-link fails, is that become SVF and other AVF take the responsibility of the failed AVF vMAC along with its own right ..?

    Q.2) If Question 2 is correct, the AVF which took the responsibility of the failed AVF vMAC will send a Gratuitous ARP to switch to update the vMAC in switch CAM table ..?

  40. Kris
    December 10th, 2017

    GLBP is not in the objectives of 200-125v3 anymore, right ?

  41. student
    December 24th, 2017

    Passed 200-125 Cisco Certified Network Associate (CCNA v3.0) Exam with great score thanks https://www.braindumpscerts.com

Comment pages
1 2 3 2117
Add a Comment