Enjoy Our Free HSRP Lab - howtonetwork.com

Copyright Paul Browning 2021 – www.howtonetwork.com

Enjoy Our Free HSRP Lab

Some commands won’t work on Packet Tracer which has

limited capability. Please check out our books on Amazon as

well as our IT certification website:

www.howtonetwork.com

http://www.howtonetwork.com/


Hot Standby Redundancy Protocol (HSRP)

Lab Objective:

The objective of this lab exercise is for you to learn and understand how to implement and

verify the operation of the Cisco Hot Standby Router Protocol

Lab Topology:

S0/0

.1

ALS2ALS1

DLS2DLS1

Fa0/11

Fa0/7

Fa0/9

Fa0/11

Fa0/12 Fa0/12

Fa0/9

Fa0/7

Fa0/7

Fa0/7

Fa0/9

Fa0/9

IMPORTANT NOTE

If you are using the http://www.howtonetwork.com/ racks, please begin

each and every lab by shutting down all interfaces on all switches and

then manually re-enabling the interfaces that are illustrated in this

topology.

http://www.howtonetwork.com/


Task 1

Configure VTP domain name FHRP for all switches. Enable VTP v2 on all switches. Configure a

VTP password of REDUNDANCY on all switches. Disable VTP on all switches

Task 2

Configure an LACP Etherchannel between switches DLS1 and DLS2. This Etherchannel should

be configured as an ISL trunk

Task 3

Configure 802.1Q trunks on the switches within the network as follows:

▪ Configure an 802.1Q trunk between DLS1 and ALS1




Task 4

Configure Switched Virtual Interfaces on the Distribution layer switches as follows:

▪ Configure SVI 100 on switch DLS1. Assign this interface IP address 192.168.100.1/24




Verify that the Distribution layer switches can ping each other using these SVIs

Task 5

Configure Switched Virtual Interfaces on the Access layer switches as follows:

▪ Configure SVI 100 on switch ALS1. Assign this interface IP address 192.168.100.5/24

▪ Configure SVI 200 on switch ALS2. Assign this interface IP address 192.168.200.5/24

Configure the switches with a gateway address of 192.168.100.254 (ALS1) and 192.168.200.254

(ALS2). Verify that the Access layer switches can ping both of the distribution switches


Task 6

Configure HSRP between switches DLS1 and DLS2 as follows:

▪ Ensure that HSRP uses IP Multicast group address 224.0.0.102 to send packets

▪ Configure HSRP group 100 for SVI 100

▪ Authenticate HSRP using the password CISCO for plain text authentication

▪ Configure switch DLS1 as the primary (active) gateway using any priority value

▪ Configure HSRP to use a virtual address of 192.168.100.254

▪ Switch DLS1 should assume the role of active (primary) switch upon re-initialization

Verify your configuration using the appropriate commands

Task 7

Configure HSRP between switches DLS1 and DLS2 as follows:

▪ Ensure that HSRP uses IP Multicast group address 224.0.0.102 to send packets

▪ Configure HSRP group 200 for SVI 200

▪ Authenticate HSRP using the password CISCO for MD5 authentication

▪ Configure switch DLS2 as the primary (active) gateway using any priority value

▪ Configure HSRP to use a virtual address of 192.168.100.254

▪ Switch DLS2 should assume the role of active (primary) switch upon re-initialization

Verify your configuration using the appropriate commands

Task 8

Synchronize your Layer 2 and Layer 3 topologies using best practices

Task 9

Configure the Access layer switches so that the backup port transitions to the Forwarding state

in less than 5 seconds after the switch has detected that the primary link has failed. You are

required to only use a single command to complete this task


Lab Validation

Task 1 DLS1(config)#vtp domain FHRP

DLS1(config)#vtp password REDUNDANCY

DLS1(config)#vtp mode transparent

DLS2(config)#vtp domain FHRP

DLS2(config)#vtp password REDUNDANCY

DLS2(config)#vtp mode transparent

ALS1(config)#vtp domain FHRP

ALS1(config)#vtp password REDUNDANCY

ALS1(config)#vtp mode transparent

ALS2(config)#vtp domain FHRP

ALS2(config)#vtp password REDUNDANCY

ALS2(config)#vtp mode transparent

Task 2 DLS1(config)#interface range f0/11 - 12

DLS1(config-if-range)#switchport

DLS1(config-if-range)#switchport trunk encapsulation isl

DLS1(config-if-range)#switchport mode trunk

DLS1(config-if-range)#channel-group 1 mode on

Creating a port-channel interface Port-channel 1

DLS1(config-if-range)#no shutdown

DLS1(config-if-range)#exit

DLS2(config)#interface range f0/11 - 12


DLS2(config-if-range)#switchport trunk encap isl


DLS2(config-if-range)#channel-group 1 mode on

Creating a port-channel interface Port-channel 1



Verify your configuration as follows:

DLS1#show etherchannel 1 summary

Flags: D - down P - in port-channel

I - stand-alone s - suspended

H - Hot-standby (LACP only)

R - Layer3 S - Layer2


U - in use f - failed to allocate aggregator

u - unsuitable for bundling

w - waiting to be aggregated

d - default port

Number of channel-groups in use: 1

Number of aggregators: 1

Group Port-channel Protocol Ports

------+-------------+-----------+-------------------------------------------

-

1 Po1(SU) - Fa0/11(P) Fa0/12(P)

DLS2#show etherchannel 1 summary

Flags: D - down P - bundled in port-channel

I - stand-alone s - suspended

H - Hot-standby (LACP only)

R - Layer3 S - Layer2

U - in use f - failed to allocate aggregator

M - not in use, minimum links not met

u - unsuitable for bundling

w - waiting to be aggregated

d - default port

Number of channel-groups in use: 1

Number of aggregators: 1

Group Port-channel Protocol Ports

------+-------------+-----------+-------------------------------------------

1 Po1(SU) - Fa0/11(P) Fa0/12(P)

Task 3 DLS1(config)#int range f0/7 , f0/9


DLS1(config-if-range)#switchport trunk encapsulation dot1q


DLS1(config-if-range)#no shut


DLS2(config)#int range f0/7 , f0/9


DLS2(config-if-range)#switchport trunk encapsulation dot1q




ALS1(config)#int range f0/7 , f0/9

ALS1(config-if-range)#switchport mode trunk

ALS1(config-if-range)#no shut

ALS1(config-if-range)#exit


ALS2(config)#int range f0/7 , f0/9

ALS2(config-if-range)#switchport mode trunk

ALS2(config-if-range)#no shutdown

ALS2(config-if-range)#exit

Task 4 DLS1(config)#vlan 100,200

DLS1(config-vlan)#exit

DLS1(config)#interface vlan 100

DLS1(config-if)#ip address 192.168.100.1 255.255.255.0

DLS1(config-if)#exit

DLS1(config)# exit interface vlan 200


DLS1(config-if)#no shut

DLS1(config-if)#

DLS2(config)#vlan 100,200

DLS2(config-vlan)#exit



DLS2(config-if)#no shutdown




DLS2(config-if)#no shutdown



DLS1#ping 192.168.100.2

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.100.2, timeout is 2 seconds:

.!!!!

Success rate is 80 percent (4/5), round-trip min/avg/max = 1/1/1 ms

DLS1#ping 192.168.200.2



.!!!!


DLS2#ping 192.168.100.1



!!!!!


DLS2#ping 192.168.200.1




!!!!!


Task 5 ALS1(config)#vlan 100

ALS1(config-vlan)#exit

ALS1(config)#interface vlan 100

ALS1(config-if)#ip address 192.168.100.5 255.255.255.0

ALS1(config-if)#no shutdown

ALS1(config-if)#exit

ALS1(config)#ip default-gateway 192.168.100.254

ALS2(config)#vlan 200

ALS2(config-vlan)#exit

ALS2(config)#interface vlan 200

ALS2(config-if)#ip address 192.168.200.5 255.255.255.0

ALS2(config-if)#no shut

ALS2(config-if)#exit

ALS2(config)#ip default-gateway 192.168.200.254


ALS1#ping 192.168.100.1



.!!!!


ALS2#ping 192.168.200.2



.!!!!


Task 6 DLS1(config)#int vlan 100

DLS1(config-if)#standby version 2

DLS1(config-if)#standby 100 authentication text CISCO

DLS1(config-if)#standby 100 priority 105

DLS1(config-if)#standby 100 ip 192.168.100.254

DLS1(config-if)#standby 100 preempt





DLS2(config-if)#standby 100 authentication text CISCO




DLS1#show standby brief

P indicates configured to preempt.

|

Interface Grp Prio P State Active Standby Virtual IP

Vl100 100 105 Active local 192.168.100.2

192.168.100.254

DLS2#show standby

Vlan100 - Group 100 (version 2)

State is Standby

1 state change, last state change 00:00:21

Virtual IP address is 192.168.100.254

Active virtual MAC address is 0000.0c9f.f064

Local virtual MAC address is 0000.0c9f.f064 (v2 default)

Hello time 3 sec, hold time 10 sec

Next hello sent in 2.620 secs

Authentication text "CISCO"

Preemption disabled

Active router is 192.168.100.1, priority 105 (expires in 8.748 sec)

Standby router is local

Priority 100 (default 100)

IP redundancy name is "hsrp-Vl100-100" (default)

Task 7 DLS1(config)#interface vlan 200


DLS1(config-if)#standby 200 authentication md5 key-string CISCO



DLS2(config)#int vlan 200


DLS2(config-if)#standby 200 authentication md5 key-string CISCO


DLS2(config-if)#standby 200 preempt

DLS2(config-if)#standby 200 priority 105



DLS1#show stand brief


|


Vl100 100 105 P Active local 192.168.100.2

192.168.100.254


Vl200 200 100 Standby 192.168.200.2 local

192.168.200.254

DLS2#show standby brief


|


Vl100 100 100 Standby 192.168.100.1 local

192.168.100.254

Vl200 200 105 P Active local 192.168.200.1

192.168.200.254

Task 8 DLS1(config)#spanning-tree vlan 100 priority 0

DLS2(config)#spanning-tree vlan 200 priority 0

Task 9 ALS1(config)#spanning-tree uplinkfast

ALS2(config)#spanning-tree uplinkfast


ALS1#show spanning-tree vlan 100

VLAN0100

Spanning tree enabled protocol ieee

Root ID Priority 100

Address 000d.291e.7f00

Cost 3019

Port 7 (FastEthernet0/7)

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 49252 (priority 49152 sys-id-ext 100)

Address 000b.5f9e.4dc0


Aging Time 300

Uplinkfast enabled

Interface Role Sts Cost Prio.Nbr Type

---------------- ---- --- --------- -------- -------------------------------

-

Fa0/7 Root FWD 3019 128.7 P2p

Fa0/9 Altn BLK 3019 128.9 P2p

ALS1#show spanning-tree summary

Switch is in pvst mode

Root bridge for: none

EtherChannel misconfig guard is enabled


Extended system ID is enabled

Portfast Default is disabled

PortFast BPDU Guard Default is disabled

Portfast BPDU Filter Default is disabled

Loopguard Default is disabled

UplinkFast is enabled

BackboneFast is disabled

Pathcost method used is short

Name Blocking Listening Learning Forwarding STP Active

---------------------- -------- --------- -------- ---------- ----------

VLAN0001 1 0 0 1 2

VLAN0100 1 0 0 1 2

---------------------- -------- --------- -------- ---------- ----------

2 vlans 2 0 0 2 4

Station update rate set to 150 packets/sec.

UplinkFast statistics

-----------------------

Number of transitions via uplinkFast (all VLANs) : 2

Number of proxy multicast addresses transmitted (all VLANs) : 8

ALS2#show spanning-tree vlan 200

VLAN0200

Spanning tree enabled protocol ieee

Root ID Priority 200

Address 000f.24ce.0d80

Cost 3019

Port 7 (FastEthernet0/7)


Bridge ID Priority 49352 (priority 49152 sys-id-ext 200)

Address 0008.21a9.4f80


Aging Time 300

Uplinkfast enabled

Interface Role Sts Cost Prio.Nbr Type

---------------- ---- --- --------- -------- -------------------------------

-

Fa0/7 Root FWD 3019 128.7 P2p

Fa0/9 Altn BLK 3019 128.9 P2p

ALS2#show spanning-tree summary

Switch is in pvst mode

Root bridge for: none

EtherChannel misconfig guard is enabled

Extended system ID is enabled

Portfast Default is disabled

PortFast BPDU Guard Default is disabled

Portfast BPDU Filter Default is disabled

Loopguard Default is disabled

UplinkFast is enabled

BackboneFast is disabled


Pathcost method used is short

Name Blocking Listening Learning Forwarding STP Active

---------------------- -------- --------- -------- ---------- ----------

VLAN0001 1 0 0 1 2

VLAN0200 1 0 0 1 2

---------------------- -------- --------- -------- ---------- ----------

2 vlans 2 0 0 2 4

Station update rate set to 150 packets/sec.

UplinkFast statistics

-----------------------

Number of transitions via uplinkFast (all VLANs) : 0

Number of proxy multicast addresses transmitted (all VLANs) : 0

Final Switch Configurations

DLS1 DLS1#show running-config

Building configuration...

Current configuration : 4836 bytes

!

version 12.2

no service pad

service timestamps debug uptime

service timestamps log uptime

no service password-encryption

!

hostname DLS1

!

!

no aaa new-model

no standby redirect

ip subnet-zero

ip routing

!

vtp domain FHRP

vtp mode transparent

!

!

!

!

!

no file verify auto

!

spanning-tree mode pvst

spanning-tree extend system-id

spanning-tree vlan 100 priority 0

!

vlan internal allocation policy ascending

!


vlan 100,200

!

!

interface Port-channel1

switchport trunk encapsulation isl

switchport mode trunk

!

interface FastEthernet0/1

switchport mode dynamic desirable

shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!


switchport trunk encapsulation dot1q


!



shutdown

!




!



shutdown

!




channel-group 1 mode on

!





!




shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!

interface GigabitEthernet0/1


!



!

interface Vlan1

no ip address

shutdown

!

interface Vlan100

ip address 192.168.100.1 255.255.255.0

standby version 2

standby 100 ip 192.168.100.254

standby 100 priority 105

standby 100 preempt

standby 100 authentication CISCO

!

interface Vlan200

ip address 192.168.200.1 255.255.255.0

standby version 2

standby 200 ip 192.168.200.254

standby 200 authentication md5 key-string CISCO

!

ip classless

ip http server

ip http secure-server


!

!

!

control-plane

!

!

line con 0

line vty 0 4

no login

line vty 5 15

no login

!

!

end

DLS1#

DLS2 DLS2#show running-config



!

version 12.2

no service pad




!

hostname DLS2

!

!

no aaa new-model

ip subnet-zero

ip routing

!

vtp domain FHRP


!

!

!

!

!

!



spanning-tree vlan 200 priority 0

!

vlan internal allocation policy ascending

!

vlan 100,200

!

!

!


!

!

!

interface Port-channel1



!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!




!



shutdown

!




!



shutdown

!





!





!




shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



shutdown

!



!



!

interface Vlan1

no ip address

shutdown

!

interface Vlan100

ip address 192.168.100.2 255.255.255.0

standby version 2

standby 100 ip 192.168.100.254

standby 100 authentication CISCO

!

interface Vlan200

ip address 192.168.200.2 255.255.255.0

standby version 2

standby 200 ip 192.168.200.254

standby 200 priority 105

standby 200 preempt

standby 200 authentication md5 key-string CISCO

!

ip classless

ip http server

ip http secure-server


!

!

!

control-plane

!

!

line con 0

line vty 0 4

login

line vty 5 15

login

!

end

DLS2#

ALS1 ALS1#show running-config



!

version 12.1

no service pad




!

hostname ALS1

!

no logging console

!

ip subnet-zero

!

no ip domain-lookup

ip ssh time-out 120

ip ssh authentication-retries 3

vtp domain FHRP


!

!


no spanning-tree optimize bpdu transmission


spanning-tree uplinkfast

!

!

!

!

vlan 100

!


shutdown

!



shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!



!



!



!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!



shutdown

!


shutdown

!


shutdown

!


shutdown

!


!


!

interface Vlan1

no ip address

no ip route-cache

shutdown

!

interface Vlan100

ip address 192.168.100.5 255.255.255.0

no ip route-cache

!

interface Vlan200

ip address 192.168.200.15 255.255.255.0

no ip route-cache

shutdown

!

ip default-gateway 192.168.100.254

ip http server

!

line con 0

line vty 0 4

login

line vty 5 15

login

!

!

end

ALS1#

ALS2 ALS2#show running-config



!

version 12.1

no service pad





!

hostname ALS2

!

no logging console

!

ip subnet-zero

!

ip ssh time-out 120

ip ssh authentication-retries 3

vtp domain FHRP


!

!


no spanning-tree optimize bpdu transmission


spanning-tree uplinkfast

!

!

!

!

vlan 200

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!



!


shutdown

!



!


shutdown

!


shutdown

!



shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!



shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


shutdown

!


!



!

interface Vlan1

no ip address

no ip route-cache

shutdown

!

interface Vlan200

ip address 192.168.200.5 255.255.255.0

no ip route-cache

!

ip default-gateway 192.168.200.254

ip http server

!

line con 0

line vty 0 4

login

line vty 5 15

login

!

!

end

ALS2#

Enjoy Our Free HSRP Lab - howtonetwork.com

Documents

Transcript of Enjoy Our Free HSRP Lab - howtonetwork.com