Solved

VLAN VRF and HSRP configuration: Unable to ping gateway from a laptop

Posted on 2013-06-16
8
1,934 Views
Last Modified: 2013-06-18
Hello, I built a int vlan with a vrf domain and a HSRP with a virtual gateway. The core switch is configured with DHCP server. Once the lap top gets its ip from the  server. I'm unable to ping the HSRP gateway. Can anyone assist with this on.

ex.
ip dhcp-excluded 1.1.1.1 - 1.1.1.2

ip dhcp pool_200
network 1.1.1.0 255.255.255.0
default-gateway 1.1.1.1

int vlan 200
description test1
ip vrf forwarding webaccess
ip address 1.1.1.2 255.255.255.0
 standby 1 ip 1.1.1.1
 standby 1 timers 1 3
 standby 1 priority 110
 standby 1 preempt


Laptop grabs 1.1.1.5, but I'm unable to ping the gateway?
0
Comment
Question by:aldavis26
8 Comments
 
LVL 17

Expert Comment

by:pergr
ID: 39252783
According to the RFC for VRRP a router should not respond to ping to the VIP.
Perhaps you have the same here?

Can you ping .2?
0
 
LVL 9

Expert Comment

by:Sandeep Gupta
ID: 39253189
try this

ping vrf webaccess 1.1.1.1
0
 
LVL 17

Expert Comment

by:surbabu140977
ID: 39253364
Please paste the full config. What is the use of vrf here? where is the vrf config? What are you trying to achieve by putting vrf in a single switch?
0
 

Author Comment

by:aldavis26
ID: 39253684
The use of the VRF on this vlan is to isolate it's traffic. The workstations receives it's ip from the DHCP server from the switch.

Once the workstation receives it's ip. I'm unable to ping vlan(HSRP) gateway from the workstation. I believe the DHCP needs to be in the vrf for me to ping it...Please advise


Here's the initial config.



ex: initial config:

ip dhcp pool_200
network 1.1.1.0 255.255.255.0
default-gateway 1.1.1.1

int vlan 200
description test1
ip vrf forwarding webaccess
ip address 1.1.1.2 255.255.255.0
 standby 1 ip 1.1.1.1
 standby 1 timers 1 3
 standby 1 priority 110
 standby 1 preempt



Workaround config:

ip dhcp use vrf connected

ip dhcp pool_200
vrf  webacces
network 1.1.1.0 255.255.255.0
default-gateway 1.1.1.1

int vlan 200
description test1
ip vrf forwarding webaccess
ip address 1.1.1.2 255.255.255.0
 standby 1 ip 1.1.1.1
 standby 1 timers 1 3
 standby 1 priority 110
 standby 1 preempt
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 
LVL 17

Expert Comment

by:surbabu140977
ID: 39254269
ip vrf webaccess

interface FastEthernet0
ip vrf forwarding webaccess
ip address 1.1.1.2 255.255.255.0

no ip dhcp use vrf connected

ip dhcp excluded-address 1.1.1.1 - 1.1.1.2


ip dhcp pool pool_200
   network 1.1.1.0 255.255.255.0

   default-router 1.1.1.2
##############################
The above one works. However it's not what you are looking for with respect to dhcp. I will try use the vlan and hsrp shortly.

Best,
0
 
LVL 17

Accepted Solution

by:
surbabu140977 earned 500 total points
ID: 39254455
Ok, I did not have any switch in my possession. So here is what I did trying to replicate the closest possible scenario. I took a router-->configured it as dhcp server/VRF/HSRP. Took another router as a DHCP client(instead of laptop) and was pinging the HSRP IP of 1.1.1.100 in the dhcp server. Attaching the 2 configuration files.
Client router (consider laptop) can successfully ping the HSRP IP.
Hopefully the author can replicate the solution now.
server.txt
client.txt
0
 
LVL 9

Expert Comment

by:Sandeep Gupta
ID: 39255154
aldavis26

did u see my comment
0
 
LVL 17

Expert Comment

by:surbabu140977
ID: 39255240
just curious,  how ping vrf <vrfname> <ip> is possible from laptop or pc?
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
Configuring network clients can be a chore, especially if there are a large number of them or a lot of itinerant users.  DHCP dynamically manages this process, much to the relief of users and administrators alike!
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now