Home > Hot Standby Router Protocol HSRP Tutorial

Hot Standby Router Protocol HSRP Tutorial

November 7th, 2013 Go to comments

In this tutorial we will learn what is HSRP and the need of HSRP in a network.

Most of the company in the world has a connection to the Internet. The picture below shows a most simple topology of such a company:

Simple_company_topology.jpg

To make above topology work we need to:

+ Configure IP addresses on two interfaces of the Router. Suppose the IP address of Fa0/0 interface (the interface connecting to the switch) is 192.168.1.1.
+ Assign the IP addresses, default gateways and DNS servers on all PCs. In this case we have to set the default gateways to Fa0/0 interface (with the IP address 192.168.1.1) of the router. This can be done manually or automatically via DHCP.

After some time, your boss wants to implement some redundant methods so that even the Router fails, all PCs can still access the Internet without any manual configuration at that time. So we need one more router to connect to the Internet as the topology below:

HSRP_company_topology.jpg

But now we have a problem: There is only one default gateway on each host, so if Router1 is down and we want to access the Internet via Router2, we have to change the default gateway (to 192.168.1.2). Also, when Router1 comes back we have to manually change back to the IP address on Router1. And no one can access to the Internet in the time of changing the default gateway. HSRP can solve all these problems!

HSRP Operation

With HSRP, two routers Router1 and Router2 in this case will be seen as only one router. HSRP uses a virtual MAC and IP address for the two routers to represent with hosts as a single default gateway. For example, the virtual IP address is 192.168.1.254 and the virtual MAC is 0000.0c07.AC0A. All the hosts will point their default gateway to this IP address.

HSRP_virtual_router.jpg

One router, through the election process, is designated as active router while the other router is designated as standby router. Both active and standby router listen but only the active router proceeds and forwards packets. Standby router is backup when active router fails by monitoring periodic hellos sent by the active router (multicast to 224.0.0.2, UDP port 1985) to detect a failure of the active router.

HSRP_active_standby_router.jpgWhen a failure on the active router detected, the standby router assumes the role of the forwarding router. Because the new forwarding router uses the same (virtual) IP and MAC addresses, the hosts see no disruption in communication. A new standby router is also elected at that time (in the case of there are more than two routers in a HSRP group).

Note: All routers in a HSRP group send hello packets. By default, the hello timer is set to 3 seconds and the dead timer is set to 10 seconds. It means that a hello packet is sent between the HSRP standby group devices every 3 seconds, and the standby device becomes active when a hello packet has not been received for 10 seconds

HSRP_active_fail.jpg

Note: The virtual MAC address of HSRP version 1 is 0000.0C07.ACxx, where xx is the HSRP group number in hexadecimal based on the respective interface. For example, HSRP group 10 uses the HSRP virtual MAC address of 0000.0C07.AC0A. HSRP version 2 uses a virtual MAC address of 0000.0C9F.FXXX (XXX: HSRP group in hexadecimal). But please notice that the virtual MAC address can be configured manually.

HSRP version 1 hello packets are sent to multicast address 224.0.0.2 while HSRP version 2 hello packets are sent to multicast address 224.0.0.102. Currently HSRPv1 is the default version when running HSRP on Cisco devices.

HSRP States

HSRP consists of 6 states:

State Description
Initial This is the beginning state. It indicates HSRP is not running. It happens when the configuration changes or the interface is first turned on
Learn The router has not determined the virtual IP address and has not yet seen an authenticated hello message from the active router. In this state, the router still waits to hear from the active router.
Listen The router knows both IP and MAC address of the virtual router but it is not the active or standby router. For example, if there are 3 routers in HSRP group, the router which is not in active or standby state will remain in listen state.
Speak The router sends periodic HSRP hellos and participates in the election of the active or standby router.
Standby In this state, the router monitors hellos from the active router and it will take the active state when the current active router fails (no packets heard from active router)
Active The router forwards packets that are sent to the HSRP group. The router also sends periodic hello messages

Please notice that not all routers in a HSRP group go through all states above. In a HSRP group, only one router reaches active state and one router reaches standby state. Other routers will stop at listen state.

Now let’s take an example of a router passing through these states. Suppose there are 2 routers A and B in the network; router A is turned on first. It enters the initial state. Then it moves to listen state in which it tries to hear if there are already active or standby routers for this group. After learning no one take the active or standby state, it determines to take part in the election by moving to speak state. Now it starts sending hello messages containing its priority. These messages are sent to the multicast address 224.0.0.2 (which can be heard by all members in that group). When it does not hear a hello message with a higher priority it assumes the role of active router and moves to active state. In this state, it continues sending out periodic hello messages.

Now router B is turned on. It also goes through initial and listen state. In listen state, it learns that router A has been already the active router and no other router is taking standby role so it enters speak state to compete for the standby router -> it promotes itself as standby router.

Suppose router A is in active state while router B is in standby state. If router B does not hear hello messages from router A within the holdtime (10 seconds by default), router B goes into speak state to announce its priority to all HSRP members and compete for the active state. But if at some time it receives a message from the active router that has a lower priority than its priority (because the administrator change the priority in either router), it can take over the active role by sending out a hello packet with parameters indicating it wants to take over the active router. This is called a coup hello message.

Quick summarization:

+ HSRP is Cisco proprietary which allows several routers or multilayer switches to appear as a single gateway IP address.
+ HSRP has 5 states: Initial, listen, speak, standby and active.
+ HSRP allows multiple routers to share a virtual IP and MAC address so that the end-user hosts do not realize when a failure occurs.
+ The active (or Master) router uses the virtual IP and MAC addresses.
+ Standby routers listen for Hellos from the Active router. A hello packet is sent every 3 seconds by default. The hold time (dead interval) is 10 seconds.
+ Virtual MAC of 0000.0C07.ACxx , where xx is the hexadecimal number of HSRP group.
+ The group numbers of HSRP version 1 range from 0 to 255. HSRP does support group number of 0 (we do check it and in fact, it is the default group number if you don’t enter group number in the configuration) so HSRP version 1 supports up to 256 group numbers. HSRP version 2 supports 4096 group numbers.

(Reference and good resource: http://www.cisco.com/en/US/tech/tk648/tk362/technologies_tech_note09186a0080094a91.shtml)

We wrote a GNS3 lab of HSRP and you can read it here: http://www.networktut.com/hsrp-ip-route-tracking.

Comments (26) Comments
Comment pages
1 3 4 5 1997
  1. Anonymous
    March 16th, 2017

    Passed CCNA 200-125
    Studied Latest dumps 171+182+191
    https://docs.google.com/uc?export=download&id=0BwepsouMuqCjUnBBcFpWaVFFcEU

  2. Anonymous
    March 17th, 2017

    ye

  3. aea_abbas@hotmail.com
    March 20th, 2017

    hi,please give me ccna r&s dumps in me email {email not allowed}

  4. nuraksilp
    March 28th, 2017

    how many standby router in hsrp ????

  5. New*Dumps
    April 4th, 2017

    DOWNLOAD Files at below link url
    100%, guaranteed passing material get Download package, (AllinONE) that you need to clear exam.
    All LABS in Packet Tracer
    VCE Player and PDF

    http://bridgeurl.com/ccna

  6. Mahdi Obsiyeh
    April 10th, 2017

    please any one can help me last question of ccna
    where i can get

  7. Tonny
    April 11th, 2017

    Hello guys… i am planning to do my CCNA exam end month, Please someone share the latest dumps. reach me on antony.nganga gmail.com

  8. Anonymous
    April 14th, 2017

    Hi Guys please someone kindly send me the newest dumps for CCNA R&S on domagnie @ yahoo .fr Please remove space.

  9. Maximo Mccooey
    April 15th, 2017

    This is the very best search engine in the planet

    http://google.com

  10. bhavesh
    May 3rd, 2017

    hello guys i have exam that Friday so any one have ccna final dumps so please send it my mail bhaveshpatel7096 gmail.com

  11. Anonymous
    May 7th, 2017

    is the damp 200-125 change????

  12. jennyjfoy
    May 15th, 2017

    Yes @Anonymous it was changed into 200-125 from 200-120 dumps…

  13. Revan
    May 16th, 2017

    If CCIE Routing and Switching Lab is seems difficult to prepare and you have shortage of time. Then lab4ccie is the best source for you to get 100% real CCIE Routing and Switching Lab Workbook dumps. All the CCIE Routing and Switching Lab Questions Answers are in CCIE Routing and Switching Lab PDF file format, which can be easily accessible and printable. This allows CCIE Routing and Switching Exam candidates to conveniently prepare for their Cisco CCIE Routing and Switching Lab exam without switching to the other resources. In this way, lab4ccie make learning and preparation process more efficient with CCIE Routing and Switching Lab dumps. For more details about CCIE Routing and Switching lab visit: https://www.lab4ccie.com/ccie-routing-and-switching-written-lab-workbook

  14. ALAWI
    May 21st, 2017

    last bumps ccna 200-125 ?

  15. ALAWI
    May 21st, 2017

    please i have exam in 3Jan i need last dump for ccna 200-125

  16. ALAWI
    May 21st, 2017

    my mail : {email not allowed}

  17. ALAWI
    May 21st, 2017

    ali-toooob@hotmail

  18. Mahmoud Elmesawy
    May 22nd, 2017

    hi guys can anyone tell me which dump is valid to CCNA R&S >>>>please anyone info me

  19. sunny
    May 25th, 2017

    i need latest ccna dumps..

  20. Arst
    June 22nd, 2017

    Please, send me a dump… andrerst3 at gmail DOT com
    Tkx!

  21. Anonymous
    July 2nd, 2017

    Hey I need Ccna latest dumps can you help me please

  22. Anonymous
    July 13th, 2017

    hi every pody

  23. Jorge
    July 24th, 2017

    Passed today, used the 747q dumps.

  24. Anonymous
    July 25th, 2017

    Great job.

  25. Cuong Ngo Van
    August 5th, 2017

    Dear All brothers,

    My nam is Ngo Van Cuong, First name: Cuong. I come from Vietnam.
    I already finished CCNA course and preparing for CCNA Certificate (intend join test in November this year).
    To best get result for CCNA. Could any brothers sharing for me CCNA 200-125 ?

    My email: {email not allowed}

    Thank you so much for your help.

    Sincerely,

    Ngo Van Cuong.

  26. Antoine
    August 31st, 2017

    Terrific!

    e343453.com

Comment pages
1 3 4 5 1997
Add a Comment