Cisco NX-OS/IOS HSRP Comparison

From DocWiki

(Difference between revisions)
Jump to: navigation, search
 
(9 intermediate revisions not shown)
Line 1: Line 1:
-
<font size = "3">'''Objective'''</font>  
+
<font size="3">'''Objective'''</font>  
-
This tech note outlines the main differences in Hot Standby Routing Protocol (HSRP) (IPv4) support between Cisco® NX-OS Software and Cisco IOS® Software. Sample configurations are included for Cisco NX-OS and Cisco IOS Software for some common features to demonstrate the similarities and differences. Please refer to the [http://www.cisco.com/en/US/products/ps9402/products_installation_and_configuration_guides_list.html NX-OS documentation on Cisco.com] for a complete list of supported features.
+
This tech note outlines the main differences in Hot Standby Routing Protocol (HSRP) (IPv4) support between Cisco® NX-OS Software and Cisco IOS® Software. Sample configurations are included for Cisco NX-OS and Cisco IOS Software for some common features to demonstrate the similarities and differences. Please refer to the [http://www.cisco.com/en/US/products/ps9402/products_installation_and_configuration_guides_list.html NX-OS documentation on Cisco.com] for a complete list of supported features.  
 +
<br> <font size="3">'''HSRP Overview'''</font>
-
<font size = "3">''' Hot Standby Routing Protocol (HSRP) Overview'''</font>
+
HSRP is a Cisco proprietary First Hop Redundancy Protocol (FHRP) designed to allow transparent failover for an IP client’s default gateway (first-hop router).
-
HSRP is a Cisco roprietary First Hop Redundancy Protocol (FHRP) designed to allow transparent failover for an IP client’s default gateway (first-hop router).
+
<br> <font size="3">'''Important Cisco NX-OS and Cisco IOS Software Differences'''</font>
 +
In Cisco NX-OS:
-
<font size = "3">'''Important Cisco NX-OS and Cisco IOS Software Differences'''</font>
+
*HSRP command-line interface (CLI) configuration and verification commands are not available until you enable the HSRP feature with the '''feature''' '''hsrp''' command.
 +
*HSRP is hierarchical. All related commands for an HSRP group are configured under the group number.
 +
*The HSRP configuration commands use the format '''hsrp '''''&lt;option&gt;'' instead of '''standby''' ''&lt;option&gt;''.
 +
*The HSRP verification commands use the format '''show hsrp '''''&lt;option&gt;'' instead of '''show standby '''''&lt;option&gt;''.
 +
*HSRP supports stateful process restarts, and switchovers if two supervisor modules are present.
 +
*The hello and hold-time timer ranges for the millisecond options are different. In Cisco NX-OS, hello = 250 to 999 milliseconds, and hold time = 750 to 3000 milliseconds. In Cisco IOS Software, hello = 15 to 999 milliseconds, and hold time = 50 to 3000 milliseconds.
 +
*Proxy-ARP&nbsp;is not supported when configuring multiple HSRP&nbsp;groups on a physical or logical interface.&nbsp; Cisco IOS Software supports proxy-ARP when configuring multiple HSRP&nbsp;groups on an interface.
 +
*HSRP supports Bidirectional Forwarding Detection (BFD). Cisco IOS Software does not support BFD for HSRP.
-
In Cisco NX-OS:
+
<br>  
-
* HSRP command-line interface (CLI) configuration and verification commands are not available until you enable the HSRP feature with the '''feature''' '''hsrp''' command.
+
-
* HSRP is hierarchical. All related commands for an HSRP group are configured under the group number.
+
-
* The HSRP configuration commands use the format '''hsrp '''''<option>'' instead of '''standby''' ''<option>''.
+
-
* The HSRP verification commands use the format '''show hsrp '''''<option>'' instead of '''show standby '''''<option>''.
+
-
* HSRP supports stateful process restart by default.
+
-
* The hello and hold-time timer ranges for the millisecond options are different. In Cisco NX-OS, hello = 250 to 999 milliseconds, and hold time = 750 to 3000 milliseconds. In Cisco IOS Software, hello = 15 to 999 milliseconds, and hold time = 50 to 3000 milliseconds.
+
 +
<font size="3">'''Things You Should Know'''</font>
-
<font size = "3">'''Things You Should Know'''</font>
+
The following list provides some additional facts about Cisco NX-OS that should be helpful when designing, configuring, and maintaining HSRP-enabled networks.
-
The following list provides some additional facts about Cisco NX-OS that should be helpful when designing, configuring, and maintaining HSRP-enabled networks.
+
<br>
 +
*If you remove the '''feature''' '''hsrp''' command, all relevant HSRP configuration information is also removed.
 +
*HSRPv1 is enabled by default (HSRPv2 can be enabled per interface).
 +
*HSRPv1 supports 256 group numbers (0 to 255). HSRPv2 supports 4096 group numbers (0 to 4095).
 +
*HSRPv1 and HSRPv2 are not compatible. However, a device can be configured to run a different version on different interfaces.
 +
*The '''show running-config hsrp''' command displays the current HSRP configuration.
 +
*Configuration of more than one FHRP on an interface is not recommended.
 +
*Both HSRP&nbsp;devices forward traffic when configured in a vPC domain.
 +
*HSRP timers should not be adjusted when configured on SVI’s in a vPC domain since both vPC peers will forward traffic destined to the HSRP virtual IP address and the timers only determine which peer is responsible for managing the control-plane functionality of HSRP.<br>
 +
*Object tracking is supported. Tracking can be configured for an interface’s line protocol state, IP address state, and for IP route reachability (determining whether a route is available in the routing table).
 +
*Object Tracking can be enabled using Boolean or threshold list types for finer fail-over granularity.<br>
 +
*An interface HSRP&nbsp;group can track multiple objects by referencing more than one tracked object.<br>
 +
*Secondary IP addresses are supported in the same or a different group as the interface’s primary IP address.
 +
*Load sharing can be accomplished by using multiple HSRP groups per interface (Proxy-ARP&nbsp;is not supported as documented in the previous section)<br>
 +
*HSRP has been enhanced for vPC environments, so both the active and standby router can forward data traffic. The primary router (higher priority) responds to ARP requests.
 +
*Extended hold timers can be configured globally ('''hsrp timers extended-hold''') to temporarily extend timeout values during an In Service Software Upgrade (ISSU). This prevents unnecessary HSRP switch-overs in environments that use aggressive hello/hold timers.
-
* If you remove the '''feature''' '''hsrp''' command, all relevant HSRP configuration information is also removed.
+
<br>
-
* HSRPv1 is enabled by default (HSRPv2 can be enabled per interface).
+
-
* HSRPv1 supports 256 group numbers (0 to 255). HSRPv2 supports 4096 group numbers (0 to 4095).
+
-
* HSRPv1 and HSRPv2 are not compatible. However, a device can be configured to run a different version on different interfaces.
+
-
* The '''show running-config hsrp''' command displays the current HSRP configuration.
+
-
* Configuration of more than one FHRP on an interface is not recommended.
+
-
* Object tracking is supported. Tracking can be configured for an interface’s line protocol state, IP address state, and for IP route reachability (determining whether a route is available in the routing table).
+
-
* An interface can track multiple objects.
+
-
* Secondary IP addresses are supported in the same or a different group as the interface’s primary IP address.
+
-
* Load sharing can be accomplished by using multiple HSRP groups per interface.
+
 +
<br> <font size="3">'''Configuration Comparison'''</font>
 +
The following sample code shows configuration similarities and differences between the Cisco NX-OS and Cisco IOS Software CLIs. There are two significant differences: Cisco NX-OS uses a hierarchical configuration, and it uses the '''hsrp''' keyword instead of the '''standby''' keyword for configuration and verification commands. The enhancements make the configuration easier to read and work with.
-
<font size = "3">'''Configuration Comparison'''</font>
+
<br>  
-
The following sample code shows configuration similarities and differences between the Cisco NX-OS and Cisco IOS Software CLIs. There are two significant differences: Cisco NX-OS uses a hierarchical configuration, and it uses the '''hsrp''' keyword instead of the '''standby''' keyword for configuration and verification. Both enhancements make the configuration easier to read.
+
{| cellspacing="6" cellpadding="2" border="0"
-
 
+
-
 
+
-
 
+
-
{| border="0" cellpadding="2" cellspacing="6"
+
-
!width="475" align="center" |<font size = "5">'''''Cisco IOS CLI'''''</font>
+
-
!width="475" align="center" |<font size = "5">'''''Cisco NX-OS CLI'''''</font>
+
|-
|-
-
|<font size = "3">'''Enabling the HSRP Feature'''</font>
+
! width="475" align="center" | <font size="5">'''''Cisco IOS CLI'''''</font>
 +
! width="475" align="center" | <font size="5">'''''Cisco NX-OS CLI'''''</font>
|-
|-
-
{| border="0" cellpadding="2" cellspacing="6"
+
| <font size="3">'''Enabling the HSRP Feature'''</font>
-
!width="475" align="left" style="background:#ED9121;" |<font color="white">'''Cisco IOS Software does not have the ability to enable or disable HSRP.'''
+
|}
-
!width="475" align="left" style="background:#99CCFF;" |'''feature hsrp'''
+
 
 +
{| cellspacing="6" cellpadding="2" border="0"
|-
|-
-
{| border="0" cellpadding="2" cellspacing="6"
+
! width="475" align="left" style="background:#ED9121;" | <font color="white">'''Cisco IOS Software does not have the ability to enable or disable HSRP.'''</font>  
-
|<font size = "3">'''Configuring HSRP on an Interface'''</font>
+
! width="475" align="left" style="background:#99CCFF;" | '''feature hsrp'''
 +
|}
 +
 
 +
{| cellspacing="6" cellpadding="2" border="0"
|-
|-
-
{| border="0" cellpadding="2" cellspacing="6"
+
| <font size="3">'''Configuring HSRP on an Interface'''</font>
-
!width="475" align="left" style="background:#ED9121;" |<font color="white">'''interface Ethernet2/1
+
|}
-
ip address 192.168.10.2 255.255.255.0
+
{| cellspacing="6" cellpadding="2" border="0"
 +
|-
 +
! width="475" align="left" style="background:#ED9121;" | <font color="white">'''interface Ethernet2/1''' </font>
 +
<font color="white">ip address 192.168.10.2 255.255.255.0 </font> <font color="white">standby 0 ip 192.168.10.1 </font>
-
standby 0 ip 192.168.10.1'''
+
! width="475" align="left" style="background:#99CCFF;" | '''interface Ethernet2/1'''
-
!width="475" align="left" style="background:#99CCFF;" |'''interface Ethernet2/1
+
ip address 192.168.10.2/24
-
ip address 192.168.10.2/24
+
hsrp 0
-
hsrp 0
+
ip 192.168.10.1  
-
   
+
 
-
ip 192.168.10.1 '''
+
|}
 +
 
 +
{| cellspacing="6" cellpadding="2" border="0"
|-
|-
-
{| border="0" cellpadding="2" cellspacing="6"
+
| <font size="3">'''Configuring the priority and preempt Options'''</font>
-
|<font size = "3">'''Configuring the priority and preempt Options'''</font>
+
|}
 +
 
 +
{| cellspacing="6" cellpadding="2" border="0"
|-
|-
-
{| border="0" cellpadding="2" cellspacing="6"
+
! width="475" align="left" style="background:#ED9121;" | <font color="white">'''interface Ethernet2/1'''
-
!width="475" align="left" style="background:#ED9121;" |<font color="white">'''interface Ethernet2/1
+
ip address 192.168.10.2 255.255.255.0  
-
ip address 192.168.10.2 255.255.255.0
+
standby 0 ip 192.168.10.1
standby 0 ip 192.168.10.1
 +
</font>
 +
<font color="white">standby 0 priority 110 </font> <font color="white">standby 0 preempt </font>
-
standby 0 priority 110
+
! width="475" align="left" style="background:#99CCFF;" | '''interface Ethernet2/1'''
 +
ip address 192.168.10.2/24
-
standby 0 preempt'''
+
hsrp 0  
-
!width="475" align="left" style="background:#99CCFF;" |'''interface Ethernet2/1
+
-
ip address 192.168.10.2/24
+
-
 
+
-
hsrp 0
+
preempt  
preempt  
-
priority 110
+
priority 110  
-
ip 192.168.10.1'''
+
ip 192.168.10.1  
-
|-
+
 
-
{| border="0" cellpadding="2" cellspacing="6"
+
|}
-
|<font size = "3">'''Modifying the Hello and Holdtime Timers (Seconds)'''</font>
+
 
 +
{| cellspacing="6" cellpadding="2" border="0"
|-
|-
-
{| border="0" cellpadding="2" cellspacing="6"
+
| <font size="3">'''Modifying the Hello and Holdtime Timers (Seconds)'''</font>
-
!width="475" align="left" style="background:#ED9121;" |<font color="white">interface Ethernet2/1
+
|}
 +
{| cellspacing="6" cellpadding="2" border="0"
 +
|-
 +
! width="475" align="left" style="background:#ED9121;" | <font color="white">interface Ethernet2/1
ip address 192.168.10.2 255.255.255.0
ip address 192.168.10.2 255.255.255.0
 +
</font>
 +
<font color="white">standby 0 ip 192.168.10.1 </font> <font color="white">standby 0 timers 1 3 </font>
-
standby 0 ip 192.168.10.1
+
! width="475" align="left" style="background:#99CCFF;" | interface Ethernet2/1
 +
ip address 192.168.10.2/24
-
standby 0 timers 1 3'''
+
hsrp 0  
-
!width="475" align="left" style="background:#99CCFF;" |interface Ethernet2/1
+
 
-
 
+
timers 1 3  
-
ip address 192.168.10.2/24
+
 
-
 
+
ip 192.168.10.1
-
hsrp 0
+
 
-
   
+
|}
-
timers  1  3
+
 
-
   
+
{| cellspacing="6" cellpadding="2" border="0"
-
ip 192.168.10.1'''
+
|-
|-
-
{| border="0" cellpadding="2" cellspacing="6"
+
| <font size="3">'''Modifying the Hello and Holdtime Timers (Milliseconds)'''</font>
-
|<font size = "3">'''Modifying the Hello and Holdtime Timers (Milliseconds)'''</font>
+
|}
 +
 
 +
{| cellspacing="6" cellpadding="2" border="0"
|-
|-
-
{| border="0" cellpadding="2" cellspacing="6"
+
! width="475" align="left" style="background:#ED9121;" | <font color="white">'''interface Ethernet2/1'''
-
!width="475" align="left" style="background:#ED9121;" |<font color="white">'''interface Ethernet2/1
+
ip address 192.168.10.2 255.255.255.0
ip address 192.168.10.2 255.255.255.0
-
+
</font>
-
standby 0 ip 192.168.10.1
+
<font color="white">standby 0 ip 192.168.10.1 </font> <font color="white">standby 0 timers msec 250 msec 750 </font>
-
+
 
-
standby 0 timers msec 250 msec 750'''
+
! width="475" align="left" style="background:#99CCFF;" | '''interface Ethernet2/1'''
-
!width="475" align="left" style="background:#99CCFF;" |'''interface Ethernet2/1
+
ip address 192.168.10.2/24  
-
 
+
 
-
ip address 192.168.10.2/24
+
hsrp 0  
-
 
+
 
-
hsrp 0
+
timers msec 250 msec 750  
-
   
+
 
-
timers msec 250 msec 750
+
ip 192.168.10.1  
-
   
+
 
-
ip 192.168.10.1'''
+
|}
 +
 
 +
{| cellspacing="6" cellpadding="2" border="0"
|-
|-
-
{| border="0" cellpadding="2" cellspacing="6"
+
| <font size="3">'''Configuring MD5 Authentication'''</font>
-
|<font size = "3">'''Configuring MD5 Authentication'''</font>
+
|}
-
|-
+
 
-
{| border="0" cellpadding="2" cellspacing="6"
+
{| cellspacing="6" cellpadding="2" border="0"
-
!width="475" align="left" style="background:#ED9121;" |<font color="white">'''interface Ethernet2/1
+
-
+
-
ip address 192.168.10.2 255.255.255.0
+
-
+
-
standby 0 ip 192.168.10.1
+
-
+
-
standby 0 authentication md5 key-string cisco123'''
+
-
!width="475" align="left" style="background:#99CCFF;" |'''interface Ethernet2/1
+
-
 
+
-
ip address 192.168.10.2/24
+
-
 
+
-
hsrp 0
+
-
   
+
-
authentication md5 key-string cisco123
+
-
   
+
-
ip 192.168.10.1'''
+
-
|-
+
-
{| border="0" cellpadding="2" cellspacing="6"
+
-
|<font size = "3">'''Configuring HSRP Version 2 on an Interface'''<font>
+
|-
|-
-
{| border="0" cellpadding="2" cellspacing="6"
+
! width="475" align="left" style="background:#ED9121;" | <font color="white">'''interface Ethernet2/1'''
-
!width="475" align="left" style="background:#ED9121;" |<font color="white">'''interface Ethernet2/1
+
-
+
ip address 192.168.10.2 255.255.255.0
ip address 192.168.10.2 255.255.255.0
-
+
</font>
-
standby version 2'''
+
<font color="white">standby 0 ip 192.168.10.1 </font> <font color="white">standby 0 authentication md5 key-string cisco123 </font>
-
!width="475" align="left" style="background:#99CCFF;" |'''interface Ethernet2/1
+
-
ip address 192.168.10.2/24
+
! width="475" align="left" style="background:#99CCFF;" | '''interface Ethernet2/1'''
 +
ip address 192.168.10.2/24  
-
hsrp version 2'''
+
hsrp 0
 +
 
 +
authentication md5 key-string cisco123
 +
 
 +
ip 192.168.10.1
 +
 
 +
|}
 +
 
 +
{| cellspacing="6" cellpadding="2" border="0"
|-
|-
-
{| border="0" cellpadding="2" cellspacing="6"
+
| <font size="3">'''Configuring HSRP Version 2 on an Interface'''<font></font></font>
-
|<font size = "3">'''Configuring Minimum and Reload Initialization Delay'''<font>
+
|}
 +
 
 +
{| cellspacing="6" cellpadding="2" border="0"
|-
|-
-
{| border="0" cellpadding="2" cellspacing="6"
+
! width="475" align="left" style="background:#ED9121;" | <font color="white">'''interface Ethernet2/1''' </font>
-
!width="475" align="left" style="background:#ED9121;" |<font color="white">'''interface Ethernet2/1
+
<font color="white">ip address 192.168.10.2 255.255.255.0 </font> <font color="white">standby version 2 </font>
-
ip address 192.168.10.2 255.255.255.0
+
! width="475" align="left" style="background:#99CCFF;" | '''interface Ethernet2/1'''
 +
ip address 192.168.10.2/24
-
standby delay minimum 5 reload 10'''
+
hsrp version 2
-
!width="475" align="left" style="background:#99CCFF;" |'''interface Ethernet2/1
+
-
ip address 192.168.10.2/24
+
|}
-
hsrp delay minimum 5 reload 10'''
+
{| cellspacing="6" cellpadding="2" border="0"
|-
|-
-
{| border="0" cellpadding="2" cellspacing="6"
+
| <font size="3">'''Configuring Minimum and Reload Initialization Delay'''<font></font></font>
-
|<font size = "3">'''Configuring Object Tracking (Interface Line-Protocol)'''<font>
+
|}
 +
 
 +
{| cellspacing="6" cellpadding="2" border="0"
|-
|-
-
{| border="0" cellpadding="2" cellspacing="6"
+
! width="475" align="left" style="background:#ED9121;" | <font color="white">'''interface Ethernet2/1''' </font>
-
!width="475" align="left" style="background:#ED9121;" |<font color="white">'''track 1 interface Ethernet2/2 line-protocol
+
<font color="white">ip address 192.168.10.2 255.255.255.0 </font> <font color="white">standby delay minimum 5 reload 10 </font>
 +
! width="475" align="left" style="background:#99CCFF;" | '''interface Ethernet2/1'''
 +
ip address 192.168.10.2/24
-
interface Ethernet2/1
+
hsrp delay minimum 5 reload 10  
-
+
-
ip address 192.168.10.2 255.255.255.0
+
-
+
-
standby 0 ip 192.168.10.1
+
-
+
-
standby 0 track 1 decrement 20'''
+
-
!width="475" align="left" style="background:#99CCFF;" |'''track 1 interface ethernet 2/2 line-protocol
+
 +
|}
-
interface Ethernet2/1
+
{| cellspacing="6" cellpadding="2" border="0"
-
 
+
-
ip address 192.168.10.2/24
+
-
 
+
-
hsrp 0
+
-
   
+
-
track 1 decrement 20
+
-
   
+
-
ip 192.168.10.1'''
+
|-
|-
 +
| <font size="3">'''Configuring Object Tracking (Interface Line-Protocol)'''<font></font></font>
|}
|}
 +
{| cellspacing="6" cellpadding="2" border="0"
 +
|-
 +
! width="475" align="left" style="background:#ED9121;" | <font color="white">'''track 1 interface Ethernet2/2 line-protocol'''
 +
<br> interface Ethernet2/1
 +
ip address 192.168.10.2 255.255.255.0
 +
</font>
 +
<font color="white">standby 0 ip 192.168.10.1 </font> <font color="white">standby 0 track 1 decrement 20 </font>
 +
! width="475" align="left" style="background:#99CCFF;" | '''track 1 interface ethernet 2/2 line-protocol'''
 +
<br> interface Ethernet2/1
-
<font size = "3">'''Verification Command Comparison'''</font>
+
ip address 192.168.10.2/24
-
The following table compares some useful '''show''' commands for verifying and troubleshooting an HSRP configuration.
+
hsrp 0
 +
track 1 decrement 20
 +
ip 192.168.10.1
-
{| border="1" cellpadding="2"
+
|}
-
!width="225" align="left" style="background:#99CCFF;" |'''Cisco NX-OS HSRP'''
+
 
-
!width="225" align="left" style="background:#99CCFF;" |'''Cisco IOS Software HSRP'''
+
<br>
-
!width="450" align="left" style="background:#99CCFF;" |'''Command Description'''
+
 
 +
<br> <font size="3">'''Verification Command Comparison'''</font>
 +
 
 +
The following table compares some useful '''show''' commands for verifying and troubleshooting an HSRP configuration.
 +
 
 +
<br>
 +
 
 +
{| cellpadding="2" border="1"
 +
|-
 +
! width="225" align="left" style="background:#99CCFF;" | '''Cisco NX-OS HSRP'''  
 +
! width="225" align="left" style="background:#99CCFF;" | '''Cisco IOS Software HSRP'''  
 +
! width="450" align="left" style="background:#99CCFF;" | '''Command Description'''
 +
|-
 +
| '''show hsrp'''
 +
| show standby
 +
| Displays detailed information for all HSRP groups
 +
|-
 +
| '''show hsrp active'''
 +
| -
 +
| Displays all of the groups in the “active” state
|-
|-
-
|'''show hsrp'''|| show standby ''<#>'' || Displays detailed information for all HSRP groups
+
| '''show hsrp all'''  
 +
| show standby all
 +
| Displays all of the groups including groups in the disabled state
|-
|-
-
|'''show hsrp active'''|| - || Displays all of the groups in the “active” state
+
| '''show hsrp bfd-sessions'''  
 +
| -  
 +
| Displays all BFD sessions
|-
|-
-
|'''show hsrp brief'''|| show standby brief || Displays a summary of all the HSRP groups
+
| '''show hsrp brief'''  
 +
| show standby brief  
 +
| Displays a summary of all the HSRP groups
|-
|-
-
|'''show hsrp delay'''|| - || Displays minimum and maximum delay times for preempting
+
| '''show hsrp delay'''  
 +
| show standby delay
 +
| Displays minimum and maximum delay times for preempting
|-
|-
-
|'''show hsrp group'''|| - || Displays detailed information for a specified group
+
| '''show hsrp detail'''  
 +
| -  
 +
| Displays detailed information
|-
|-
-
|'''show hsrp init'''|| - || Displays all the groups in the "init" state
+
| '''show hsrp group ''&lt;#&gt;'''''
 +
| -  
 +
| Displays detailed information for a specified group
|-
|-
-
|'''show hsrp interface'''|| - || Displays detailed information for a specific interface
+
| '''show hsrp init'''  
 +
| -  
 +
| Displays all the groups in the "init" state
|-
|-
-
|'''show hsrp learn'''|| - || Displays all the groups in the "learn" state
+
| '''show hsrp interface'''  
 +
| show standby ''int-type''
 +
| Displays detailed information for a specific interface
|-
|-
-
|'''show hsrp listen'''|| - || Displays all the groups in the "listen" state
+
| '''show hsrp learn'''  
 +
| -  
 +
| Displays all the groups in the "learn" state
|-
|-
-
|'''show hsrp speak'''|| - || Displays all the groups in the "speak" state
+
| '''show hsrp listen'''  
 +
| -  
 +
| Displays all the groups in the "listen" state
|-
|-
-
|'''show hsrp standby'''|| - || Displays all the groups in the "standby" state
+
| '''show hsrp speak'''  
 +
| -  
 +
| Displays all the groups in the "speak" state
|-
|-
-
|'''show hsrp summary'''|| - || Displays summary information for HSRP groups
+
| '''show hsrp standby'''  
 +
| -  
 +
| Displays all the groups in the "standby" state
|-
|-
-
| <font color="white"> - || <font color="white"> - || <font color="white"> -
+
| '''show hsrp summary'''
 +
| -  
 +
| Displays summary information for HSRP groups
|-
|-
-
|'''show track'''|| show track || Displays the configured tracked objects
+
| <font color="white">-</font>
 +
| <font color="white">-</font>
 +
| <font color="white">-</font>
|-
|-
-
|'''show track brief'''|| show track brief || Displays a brief list of tracked objects
+
| '''show track'''  
 +
| show track  
 +
| Displays the configured tracked objects
|-
|-
-
|'''show track interface'''|| show track interface || Displays the status of tracked interfaces
+
| '''show track brief'''  
 +
| show track brief
 +
| Displays a brief list of tracked objects
|-
|-
-
|'''show track ip'''|| show track ip || Displays the IP protocol objects that are tracked
+
| '''show track interface'''  
 +
| show track interface
 +
| Displays the status of tracked interfaces
|-
|-
 +
| '''show track ip'''
 +
| show track ip
 +
| Displays the IP protocol objects that are tracked
|}
|}

Latest revision as of 22:22, 1 June 2012

Objective

This tech note outlines the main differences in Hot Standby Routing Protocol (HSRP) (IPv4) support between Cisco® NX-OS Software and Cisco IOS® Software. Sample configurations are included for Cisco NX-OS and Cisco IOS Software for some common features to demonstrate the similarities and differences. Please refer to the NX-OS documentation on Cisco.com for a complete list of supported features.


HSRP Overview

HSRP is a Cisco proprietary First Hop Redundancy Protocol (FHRP) designed to allow transparent failover for an IP client’s default gateway (first-hop router).


Important Cisco NX-OS and Cisco IOS Software Differences

In Cisco NX-OS:

  • HSRP command-line interface (CLI) configuration and verification commands are not available until you enable the HSRP feature with the feature hsrp command.
  • HSRP is hierarchical. All related commands for an HSRP group are configured under the group number.
  • The HSRP configuration commands use the format hsrp <option> instead of standby <option>.
  • The HSRP verification commands use the format show hsrp <option> instead of show standby <option>.
  • HSRP supports stateful process restarts, and switchovers if two supervisor modules are present.
  • The hello and hold-time timer ranges for the millisecond options are different. In Cisco NX-OS, hello = 250 to 999 milliseconds, and hold time = 750 to 3000 milliseconds. In Cisco IOS Software, hello = 15 to 999 milliseconds, and hold time = 50 to 3000 milliseconds.
  • Proxy-ARP is not supported when configuring multiple HSRP groups on a physical or logical interface.  Cisco IOS Software supports proxy-ARP when configuring multiple HSRP groups on an interface.
  • HSRP supports Bidirectional Forwarding Detection (BFD). Cisco IOS Software does not support BFD for HSRP.


Things You Should Know

The following list provides some additional facts about Cisco NX-OS that should be helpful when designing, configuring, and maintaining HSRP-enabled networks.


  • If you remove the feature hsrp command, all relevant HSRP configuration information is also removed.
  • HSRPv1 is enabled by default (HSRPv2 can be enabled per interface).
  • HSRPv1 supports 256 group numbers (0 to 255). HSRPv2 supports 4096 group numbers (0 to 4095).
  • HSRPv1 and HSRPv2 are not compatible. However, a device can be configured to run a different version on different interfaces.
  • The show running-config hsrp command displays the current HSRP configuration.
  • Configuration of more than one FHRP on an interface is not recommended.
  • Both HSRP devices forward traffic when configured in a vPC domain.
  • HSRP timers should not be adjusted when configured on SVI’s in a vPC domain since both vPC peers will forward traffic destined to the HSRP virtual IP address and the timers only determine which peer is responsible for managing the control-plane functionality of HSRP.
  • Object tracking is supported. Tracking can be configured for an interface’s line protocol state, IP address state, and for IP route reachability (determining whether a route is available in the routing table).
  • Object Tracking can be enabled using Boolean or threshold list types for finer fail-over granularity.
  • An interface HSRP group can track multiple objects by referencing more than one tracked object.
  • Secondary IP addresses are supported in the same or a different group as the interface’s primary IP address.
  • Load sharing can be accomplished by using multiple HSRP groups per interface (Proxy-ARP is not supported as documented in the previous section)
  • HSRP has been enhanced for vPC environments, so both the active and standby router can forward data traffic. The primary router (higher priority) responds to ARP requests.
  • Extended hold timers can be configured globally (hsrp timers extended-hold) to temporarily extend timeout values during an In Service Software Upgrade (ISSU). This prevents unnecessary HSRP switch-overs in environments that use aggressive hello/hold timers.



Configuration Comparison

The following sample code shows configuration similarities and differences between the Cisco NX-OS and Cisco IOS Software CLIs. There are two significant differences: Cisco NX-OS uses a hierarchical configuration, and it uses the hsrp keyword instead of the standby keyword for configuration and verification commands. The enhancements make the configuration easier to read and work with.


Cisco IOS CLI Cisco NX-OS CLI
Enabling the HSRP Feature
Cisco IOS Software does not have the ability to enable or disable HSRP. feature hsrp
Configuring HSRP on an Interface
interface Ethernet2/1

ip address 192.168.10.2 255.255.255.0 standby 0 ip 192.168.10.1

interface Ethernet2/1

ip address 192.168.10.2/24

hsrp 0

ip 192.168.10.1

Configuring the priority and preempt Options
interface Ethernet2/1

ip address 192.168.10.2 255.255.255.0

standby 0 ip 192.168.10.1 standby 0 priority 110 standby 0 preempt

interface Ethernet2/1

ip address 192.168.10.2/24

hsrp 0

preempt

priority 110

ip 192.168.10.1

Modifying the Hello and Holdtime Timers (Seconds)
interface Ethernet2/1

ip address 192.168.10.2 255.255.255.0 standby 0 ip 192.168.10.1 standby 0 timers 1 3

interface Ethernet2/1

ip address 192.168.10.2/24

hsrp 0

timers 1 3

ip 192.168.10.1

Modifying the Hello and Holdtime Timers (Milliseconds)
interface Ethernet2/1

ip address 192.168.10.2 255.255.255.0 standby 0 ip 192.168.10.1 standby 0 timers msec 250 msec 750

interface Ethernet2/1

ip address 192.168.10.2/24

hsrp 0

timers msec 250 msec 750

ip 192.168.10.1

Configuring MD5 Authentication
interface Ethernet2/1

ip address 192.168.10.2 255.255.255.0 standby 0 ip 192.168.10.1 standby 0 authentication md5 key-string cisco123

interface Ethernet2/1

ip address 192.168.10.2/24

hsrp 0

authentication md5 key-string cisco123

ip 192.168.10.1

Configuring HSRP Version 2 on an Interface
interface Ethernet2/1

ip address 192.168.10.2 255.255.255.0 standby version 2

interface Ethernet2/1

ip address 192.168.10.2/24

hsrp version 2

Configuring Minimum and Reload Initialization Delay
interface Ethernet2/1

ip address 192.168.10.2 255.255.255.0 standby delay minimum 5 reload 10

interface Ethernet2/1

ip address 192.168.10.2/24

hsrp delay minimum 5 reload 10

Configuring Object Tracking (Interface Line-Protocol)
track 1 interface Ethernet2/2 line-protocol


interface Ethernet2/1

ip address 192.168.10.2 255.255.255.0 standby 0 ip 192.168.10.1 standby 0 track 1 decrement 20

track 1 interface ethernet 2/2 line-protocol


interface Ethernet2/1

ip address 192.168.10.2/24

hsrp 0

track 1 decrement 20

ip 192.168.10.1



Verification Command Comparison

The following table compares some useful show commands for verifying and troubleshooting an HSRP configuration.


Cisco NX-OS HSRP Cisco IOS Software HSRP Command Description
show hsrp show standby Displays detailed information for all HSRP groups
show hsrp active - Displays all of the groups in the “active” state
show hsrp all show standby all Displays all of the groups including groups in the disabled state
show hsrp bfd-sessions - Displays all BFD sessions
show hsrp brief show standby brief Displays a summary of all the HSRP groups
show hsrp delay show standby delay Displays minimum and maximum delay times for preempting
show hsrp detail - Displays detailed information
show hsrp group <#> - Displays detailed information for a specified group
show hsrp init - Displays all the groups in the "init" state
show hsrp interface show standby int-type Displays detailed information for a specific interface
show hsrp learn - Displays all the groups in the "learn" state
show hsrp listen - Displays all the groups in the "listen" state
show hsrp speak - Displays all the groups in the "speak" state
show hsrp standby - Displays all the groups in the "standby" state
show hsrp summary - Displays summary information for HSRP groups
- - -
show track show track Displays the configured tracked objects
show track brief show track brief Displays a brief list of tracked objects
show track interface show track interface Displays the status of tracked interfaces
show track ip show track ip Displays the IP protocol objects that are tracked

Rating: 4.5/5 (12 votes cast)

Personal tools