+
Gateway Redundancy (VRRP, GLBP, HSRP)
+ PLAN
WHAT IS GATEWAY REDUNDANCY
PROTOCOLS
HSRP
VRRP
GLBP
+
So what is gateway redundancy?
+ So what is gateway redundancy?
+
+
+
+ PROTOCOLS
There are three differents protocols that can create a virtual gateway:
HSRP (Hot Standby Router Protocol)
VRRP (Virtual Router Redundancy Protocol)
GLBP (Gateway Load Balancing Protocol)
+ HSRP
Hot Standby Router Protocol (HSRP) is a Cisco proprietary protocol. Cisco
developed this to allow multiple routers or multilayer switches to masquerade as a
single gateway. This is accomplished by assigning a virtual IP and MAC address to
all routers participating in an HSRP group.
+ HSRP
Routers within the same HSRP group must be assigned the same group number,
which can range from 0 to 255. However, most Cisco platforms only support 16
configured HSRP groups. HSRP routers are elected to specific roles:
Active Router – router currently serving as the gateway.
Standby Router – backup router to the Active Router.
Listening Router – all other routers participating in HSRP.
Only one active and one standby router are allowed per HSRP group.
+ HSRP
Hello packets are used to elect HSRP roles and to ensure all routers are
functional. If the current active router fails, the standby router will immediately
take over as active, and a new standby is elected. By default, hello packets are
sent every 3 seconds. The role of an HSRP router is dictated by its priority.
The priority can range from 0 – 255, with a default of 100. A higher priority is
preferred.
+ HSRP
The router with the highest priority is
elected the active router. The router with
the second highest priority becomes the
standby router. If all priorities are equal,
whichever router has the highest IP
Address on its HSRP interface is
elected the active router.
+ HSRP
Each HSRP router will go through a number of states before it ends up as an
active or standby router, this is what will happen:
+ HSRP
HSRP uses the 0000.0c07.acXX MAC address where XX is the HSRP group
number.
+ Configuration
SwitchA(config)#interface fa0/17
SwitchA(config-if)#standby 1 ip 192.168.1.3
SwitchB(config)#interface fa0/19
SwitchB(config-if)#standby 1 ip 192.168.1.3
SwitchB(config-if)# standby 1 priority 150
SwitchB(config-if)# standby 1 preempt
The preempt parameter will allow a router to forcibly assume the role of active router, if
it has the highest priority.
+ Configuration
SwitchB(config-if)# standby 1 timers 3 10
By default, hello packets are exchanged every 3 seconds and the holddown timer is
three times the hello timer, or 10 seconds.
SwitchA# show standby
+ Configuration
Depending on the router or switch model you might have the option to use HSRP
version 2. You can change the version by using the command :
SwitchB(config)#interface fa0/19
SwitchB(config-if)#standby version 2
If you want you can enable authentication for HSRP. You can choose between
plaintext and MD5:
SwitchB(config)#interface fa0/19
SwitchB(config-if)#standby 1 authentication text secret
SwitchB(config)#interface fa0/19
SwitchB(config-if)#standby 1 authentication md5 key-string md5pass
+ HSRP1 and HSRP2
+ VRRP
The Virtual Router Redundancy Protocol (VRRP) is an industry-standard originally
defined in RFC 3768. VRRP is nearly identical to HSRP, with some notable
exceptions:
The router with the highest priority becomes the master router.
All other routers become backup routers.
The virtual MAC address is the reserved 0000.5e00.01xx, with xx representing
the hexadecimal group number.
+ VRRP
Hello packets are sent every 1 second, by default, and sent to multicast address
224.0.0.18.
VRRP will preempt by default.
VRRP cannot directly track interfaces – it can track an object which is tied to an
interface, though.
+ VRRP
Configuration
+
SwitchA(config)#interface fa0/17
SwitchA(config-if)#vrrp 1 ip 192.168.1.3
SwitchA(config-if)#vrrp 1 priority 150
SwitchA(config-if)#vrrp 1 authentication md5 key-string mykey
SwitchA#show vrrp
+ GLBP
Gateway Load Balancing Protocol (GLBP) is a proprietary Cisco. Unlike HSRP
and VRRP, multiple GLBP routers can be active, achieving both redundancy and
load balancing. All devices running GLBP will elect an AVG (Active Virtual
Gateway). There will be only one AVG for a single group running GLBP but other
devices can take over this rule if the AVG fails. The role of the AVG is to assign a
virtual MAC address to all other devices running GLBP.
+ GLBP
All devices will become an AVF (Active Virtual Forwarder) including the AVG.
Whenever a computer sends an ARP Request the AVG will respond with one of the
virtual MAC addresses of the available AVFs. Because of this mechanism all
devices running GLBP will be used to forward IP packets.
+ GLBP
GLBP supports three load balancing methods:
Round Robin is the default load balancing method. Traffic from hosts is distributed equally
across all routers in the GLBP group. The AVG will respond to the first host ARP request
with the first virtual MAC address. The second ARP request will receive the second virtual
MAC address, etc.
Weighted load balancing method will distribute traffic proportionally, based on a router’s
weight. Routers with a higher weight will receive a proportionally higher percentage of
traffic.
Host-dependent load balancing will provide a host device with the same virtual MAC
address every time it performs an ARP request.
+ Configuration
SwitchA(config)#interface f0/17
SwitchA(config-if)#glbp 1 ip 192.168.1.3
SwitchA(config-if)#glbp 1 priority 150
SwitchB(config-if)#interface f0/19
SwitchB(config-if)#glbp 1 ip 192.168.1.3
+ Configuration
Use the show glbp brief command to verify your configuration. There are a couple
of things we can see here:
Virtual MAC address
Who is AVG.
+
Another thing to retain about GLBP:
Hello packets are sent every 3 seconds. Hello packets are sent to multicast
address 224.0.0.102.
The default holddown time is 10 seconds.
The virtual MAC address is the reserved 0007.b400.xxyy, with xx representing the
GLBP group number, and yy representing the AVF number
+
MERCI
