{"id":207,"date":"2020-09-26T13:28:13","date_gmt":"2020-09-26T13:28:13","guid":{"rendered":"https:\/\/dft.wiki\/?p=207"},"modified":"2026-06-09T14:51:06","modified_gmt":"2026-06-09T18:51:06","slug":"hsrp-on-cisco-routers","status":"publish","type":"post","link":"https:\/\/dft.wiki\/?p=207","title":{"rendered":"HSRP on Cisco Routers"},"content":{"rendered":"

The only way out of a network is through the Default Gateway, and there is no alternative or dynamic way to reroute traffic when the gateway router goes down.<\/p>\n

That is where HSRP comes in. It negotiates between two or more routers to elect a virtual router, providing high availability through redundancy.<\/p>\n

Given the scenario:<\/p>\n

\n
\"\"<\/figure>\n<\/div>\n

Even with two routers on the same network, each has a different IP address, and half the computers exit through Router1<\/strong> while the other half exit through Router2<\/strong> (see the configured Gateway on the PCs). If one router goes down, the other will not pick up its traffic.<\/p>\n

With HSRP, all PCs share the same default gateway pointing to a virtual router at 192.168.1.254<\/strong>:<\/p>\n

\n
\n

Switch<\/p>\n

No configuration at all.\r\nAll the ports are part of VLAN1.<\/pre>\n
PC-1<\/p>\n
IP Address: 192.168.1.101\r\nDefault Gateway: 192.168.1.254<\/pre>\n
PC-n<\/p>\n
IP Address: 192.168.1.1n\r\nDefault Gateway: 192.168.1.254<\/pre>\n
PC-24<\/p>\n
IP Address: 192.168.1.124\r\nDefault Gateway: 192.168.1.254<\/pre>\n<\/div>\n
\n
Router Internet<\/p>\n
enable \r\nconfigure terminal \r\nhostname Internet\r\nno ip domain lookup\r\nline con 0\r\nlogging synchronous<\/pre>\n
interface g0\/0
\nip address 10.0.0.1 255.255.255.252
\nno shutdown
\ninterface g0\/1
\nip address 10.0.1.1 255.255.255.252
\nno shutdown
\ninterface lo0
\nip address 8.8.8.8 255.255.255.0
\nno shutdown
\ninterface lo1
\nip address 8.8.4.4 255.255.255.0
\nno shutdown<\/p>\n
router rip
\nversion 2
\nno auto-summary
\nnetwork 8.8.8.8
\nnetwork 8.8.4.4
\nnetwork 10.0.0.0
\nnetwork 10.0.1.0
\npassive-interface lo0
\npassive-interface lo1<\/p>\n
The Loopback interfaces simulate the internet.<\/p>\n<\/div>\n<\/div>\n
\n
\n
Router1<\/p>\n
enable \r\nconfigure terminal \r\nhostname Router1\r\nno ip domain lookup\r\nline con 0\r\nlogging synchronous<\/pre>\n
interface g0\/0
\nip address 10.0.0.2 255.255.255.252
\nno shutdown
\ninterface g0\/1
\nip address 192.168.1.1 255.255.255.0
\nno shutdown<\/p>\n
router rip
\nversion 2
\nno auto-summary
\nnetwork 192.168.1.0
\nnetwork 10.0.0.0
\nnetwork 10.0.1.0
\npassive-interface g0\/1<\/p>\n<\/div>\n
\n
Router2<\/p>\n
enable \r\nconfigure terminal \r\nhostname Router2\r\nno ip domain lookup\r\nline con 0\r\nlogging synchronous<\/pre>\n
interface g0\/0
\nip address 10.0.1.2 255.255.255.252
\nno shutdown
\ninterface g0\/1
\nip address 192.168.1.2 255.255.255.0
\nno shutdown<\/p>\n
router rip
\nversion 2
\nno auto-summary
\nnetwork 192.168.1.0
\nnetwork 10.0.0.0
\nnetwork 10.0.1.0
\npassive-interface g0\/1<\/p>\n<\/div>\n<\/div>\n
Setting up HSRP on Routers 1 and 2:<\/strong><\/p>\n
\n
\n
Router1<\/p>\n
interface g0\/1\r\nstandby version 2\r\nstandby 1 ip 192.168.1.254<\/pre>\n
Optional commands on Router1:<\/p>\n
standby 1 priority 150\r\nstandby 1 preempt<\/pre>\n<\/div>\n
\n
By default, the priority is 100, and the router with the highest priority becomes the active router for the HSRP group. If there is a tie, the router with the highest IP address wins.<\/p>\n
Router2<\/p>\n
interface g0\/1\r\nstandby version 2\r\nstandby 1 ip 192.168.1.254<\/pre>\n<\/div>\n<\/div>\n
The commands above create standby group 1 on both routers, sharing the same virtual IP. Router1 has a priority of 150 while Router2 uses the default of 100, making Router1 the Active router. The preempt<\/code> command ensures Router1 reclaims the Active role when it recovers.<\/p>\n
The route from the PCs to the Internet can be verified with:<\/p>\n
tracert 8.8.8.8<\/pre>\n
OR<\/p>\n
tracert 8.8.4.4<\/p>\n
To check the HSRP configuration on each router:<\/p>\n
show standby\r\nshow standby brief<\/pre>\n
To configure interface tracking, use:<\/p>\n
standby 1 track G0\/0<\/pre>\n
This tells the router which interface to monitor.<\/p>\n","protected":false},"excerpt":{"rendered":"
The only way out of a network is through the Default Gateway, and there is […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-207","post","type-post","status-publish","format-standard","hentry","category-ccna"],"_links":{"self":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts\/207","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=207"}],"version-history":[{"count":9,"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts\/207\/revisions"}],"predecessor-version":[{"id":5839,"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts\/207\/revisions\/5839"}],"wp:attachment":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=207"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=207"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=207"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}