HSRP

Similar Questions

• Nexus 5600 HSRP design question for VLAN stretched between 2 areas of vPc.

  To our new data center network, I have 4 5672UP Nexus in two data centers. Between data centers is a redundant vPc with fiber 2x10Gb. I have configured two areas VPC, one for each data center. I read that HSRP within a VPC domain is active/inactive, but I wonder what would be the right way to configure the HSRP configuration for the VLAN tense because they are two areas different vPc?

  datacenter_example.PNG

  

  If you need isolation of FHRP between sites, this can be achieved by configuring the HSRP authentication in the same place so stop the HSRP Hellos between the treatment sites and allow each site to act in active / standby. Due to the HW on the 5600 Nexus architecture, control plane packets multicast are punted to the CPU, ignoring any PACL or MAC - ACL. So with a PACKAGE, you will not be able to filter the Hellos HSRP, ARP, BPDU, etc. that need to go to the CPU, because there is an ACL predefined to redirect traffic to control CPU and this ACL that overrides the ACL configured by the user. It is advisable to set up "no arp ip free hsrp duplicate" to repress unnecessary GARPs at each location in this design as well. Note 4-way HSRP is supported only on the latest versions of NX - OS, see also CSCuy89705.

  Another solution is to run FabricPath DCI with Anycast HSRP, which will allow all the 5600 to act as an active gateway by default, refer to page 22 of the FabricPath Cisco best practices.

  -Jeffords Tyler

• Best practices HSRP

  Hello

  I wonder which of these 2 configurations would be preferable to provide bridges of high availability for the client's Office.

  I have a working configuration right now composed of 2 SRI configured with HSRP as a proof of concept.  The question is what is the best solution to scale for the production.  I have a gigabit link between the customer gateway and my gateway so that their LAN traffic can be routed through my internet connection failure in the service of their in their border router or Internet service provider.

  Option 1. 2 layer 3 switches (cisco 3650)

  Option 2. 2 routers (cisco 2911)

  HSRP.png

  

  I can provide more if necessary context.

  Thanks for your help!

  A 2911 Cisco is not likely to deal with 1 Gbps of load.  Highly unlikely.

  If you need to do NAT, IPSec, or something like that you will need a router.  Probably something SRI 4000 series.

  Otherwise, use the switch Cisco 3650.  It will connect dish a Gbps link without any problem.

• Simple question about HSRP

  capture.PNG

  

  Hello world

  In a HSRP scenario where the router is active router and router B is the standby router, what happen if the connection between the switch two fails?

  data traffic is split in two?

  Thanks Paolo

  Hello

  It should go active active on each side

• HSRP with Inter-vlan

  Hi I want to cnfigure 2 Distr_1 and Distr_2 with HSRP routers

  Router Distr_1 must be an active router for VLAN 1 and 10 and router Distr_2 must be an active router for VLAN 20 and 30

  im stuck to ask me if I have to configure this on int vlan or on the router?

  Hello!

  * FOR VLAN 1 *.

  interface Vlan1
  R1(Config-if) #ip address 10.1.1.1 255.255.255.0
  R1(Config-if) ip #standby 1 10.1.1.10<  =""  r1="" and="" r2="" must="" have="" this="" same="" ip="">
  R1(Config-if) #standby 1 priority 110<  r1="" has="" higher="" priority="" than="" r2.="" so="" r1="" will="" be=""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  =""  ="">

  interface Vlan1
  R2(Config-if) #ip address 10.1.1.2 255.255.255.0
  R2(Config-if) ip #standby 1 10.1.1.10
  R2(Config-if) #standby 1 priority 100

  * FOR VLAN 10 (IDENTICAL TO THE VLAN 1). *

  interface Vlan10
  R1(Config-if) #ip address 10.1.10.1 255.255.255.0
  R1(Config-if) ip #standby 1 10.1.10.10
  R1(Config-if) #standby 1 priority 110

  interface Vlan10
  R2(Config-if) #ip address 10.1.10.2 255.255.255.0
  R2(Config-if) ip #standby 1 10.1.10.10
  R2(Config-if) #standby 1 priority 100

  * FOR VLAN 20 *.

  interface Vlan20
  R1(Config-if) #ip address 10.1.20.1 255.255.255.0
  R1(Config-if) ip #standby 1 10.1.20.10
  R1(Config-if) #standby 1 priority 100

  interface Vlan20
  R2(Config-if) #ip address 10.1.20.2 255.255.255.0
  R2(Config-if) ip #standby 1 10.1.20.10
  R2(Config-if) #standby 1 priority 110

  * REPEAT VLAN 20 CONFIG FOR VLAN 30 *.

  I hope this can help, greetings!

  JC

• Design of switching two ISP and HSRP/VRRP

  Hey Cisco community,

  We have two ISP currently in use, divide us its routes to two routers with a sleep using HSRP active routers and also try VRRP. But the passive router / Eve cannot receive all packages in other ways we are testing using route determination.

  Is it possible to activate the active HSRP/VRRP configuration so that when a router is in standby mode or passive it can still receive packets from other routers.

  Please do not hesitate to suggest or comment

  Thank you

  Hello
  standby-passive router just wait for failure of the active router and then take the notes the active role.

  Try using GLBP (Gateway Load Balance Protocol) which can achieve what you mentioned above.

  Or you can configure two groups VRRP and 1 group first active router and 2nd group the second router will be active. And then, you statically configure hosts on the network who should use what virtual gateway. This isn't a smart solution.

  HSRP can balance only at the level of VLAN. This means that you need to divide your customers into multiple VIRTUAL LANs.

  Please anyone correct me if I'm wrong.

• DHCP-discover with HSRP

  Hello

  I have a general question about DHCP and HSRP.

  I configured two redundant CISCO routers with (active) address IP 10.0.0.2 and 10.0.0.3 (standby).

  Their virtual HSRP address is 10.0.0.1.

  When my clients send DHCP package to the DHCP server on the routers, they send a DHCP-discover 10.0.0.2 and 10.0.0.3 discovery but not 10.0.0.1.

  What is the right way or shouldn´t that the package go to the HSRP address?

  Thanks for your help.

  Hello

  DHCP detects are usually broadcast, not targeted on a specific IP address?

  If clients attempt to renew and do not get a response from something they are unicast to, they'll do a DHCP Discover broadcast and get picked up by what on the local subnet that is interested in their service... so it shouldn't matter.

  Aaron

• Only AAS, 2 inside the kernel switches (HSRP) Best Practice Design

  Hello

  I design a N/W with following equipment.

  1: 2 * carrots (4503)

  2: single Firewall ASA 5520

  I have following design options;

  DRAWING 1:

  1. Basic switches use HSRP
  2. VLANs are active on a (primary) switch at a time
  3. CONNECT THE TWO CŒURS WITH ASA
  • ASA E0 - outside (routers) switch
  • ASA (redundant interface = E1 + E3) R1 - the two nuclei (HSRP)
  • ASA E1 - Core 1 (F3/48) + ASA E3 - Core 2 (F3/48)
  • ASA E2 - switch DMZ

  DESIGN 2:

  1. Basic switches use HSRP
  2. VLANs are active on a (primary) switch at a time
  3. CONNECT THE TWO CŒURS FOR LAYER 2 SWITCH (INNER AREA)
  4. CONNECT THE LAYER 2 SWITCH TO ASA E1

  The first options looks better avoid me point single failure (Layer 2 of insdie switch).

  Unfortunately, I'm short on time and do not currently have access to the LAB.

  Please

  1. Share your experience and suggest which option is preferable
  2. Advantages, disadvantages during the failover hsrp, other features, etc.
  3. indicate if there is an alternate option
  4. Precautions

  BR,

  ABDUL MAJID KHAN

  Your "redundant ASA interface" is not really. Only one ASA has no real redundancy. I guess you could make a "inside the 1" and "inside 2", but they would have separate IP addresses and within hosts would not automatically from one to the other. " I would say that the complexity that introduced more than offset the second idea to have a small switch L2 VLAN between your ASA unique within the interface and your L3 core switches.

  That's why I prefer the second option. A switch L2 deemed unchanged configuration being done is quite reliable - I regularly fall on them with years of availability. You can also add a quasi redundancy in option 2 by tying together your ASA E1 interfaces and E3 in an etherchannel (requires a Software ASA 8.4 or later version). that option is not possible with option 1 (at least not in the two basic switches) as an Etherchannel are two IOS switches at one end.

• HSRP between Cisco 4321 and Cisco 887VA

  Hi all

  I am looking to install the following and I was wondering if anyone could answer a few questions I have.

  Installation program:

  • A subsidiary, our ISP gives us 20/100 leased line and ADSL circuit use for failover.
  • We plan to connect the line leased to a Cisco 4321 or a G2 Cisco 2921/2951
  • We intend to connect the ADSL circuit to the Cisco 887VA G2
  • We will have a pair of HA of the ASA firewall 5506 x connected routers (be it via a dedicated L2 switch or a VLAN on a switch L3).
  • The LAN is sitting behind the firewall.

  We want to run BGP on both routers (the one that connects to the leased line and ADSL line) and configure them as a pair of HSRP/VRRP, while if the leased line LAN users cannot always access internet and you connect to the main office through a VPN S2S which ends on the firewall. BGP will be used to announce our public subnet to the ISP

  Questions

  1. Can a 4321 and a 887VA form an HSRP/VRRP pair as they are running IOS XE and IOS?
  2. How much RAM and Flash is recommended on each router for BGP?

  Thanks in advance for your time.

  Ranil

  Hello

  Can a 4321 and a 887VA form an HSRP/VRRP pair as they are running IOS XE and IOS?

  This isn't a problem, it will work between two routers

  1. How much RAM and Flash is recommended on each router for BGP?

     Flash is only an isuse to the size of an image, both routers should have enough speace in support of the default image size

     800 s cannot support full BGP table they can not handle cpu or ram and 4321 same with 8 GB of ram can fight a bit with full table, you plan on reducing what is learned inform your ISP regarding prefixes?  route map and prefix filtering?

     the leased line is 100 to download 20 upward, 4321 media and aggregate of 50 - 100mps may need to get the 100mpbs for her performance / request

  http://www.Cisco.com/c/dam/en/us/products/collateral/routers/4000-series...

• Cisco IOS IPSec failover | Route based VPN with HSRP

  I can find the redundancy of vpn IPSec using policy based VPN with HSRP.

  Any document which ensures redundancy of the road-base-vpn with HSRP?

  OK, I now understand the question. Sorry, I have no documents for this task.

  I can see in the crypto ipsec profile that you will use under the Tunnel interface configuration to enable the protection, you can configure the redundancy:

  cisco(config)#crypto ipsec profile VTIcisco(ipsec-profile)#?Crypto Map configuration commands: default Set a command to its defaults description Description of the crypto map statement policy dialer Dialer related commands exit Exit from crypto map configuration mode no Negate a command or set its defaults redundancy Configure HA for this ipsec profile responder-only Do not initiate SAs from this device set Set values for encryption/decryption

  cisco(ipsec-profile)#redundancy ? WORD Redundancy group name

  cisco(ipsec-profile)#redundancy MRT ? stateful enable stateful failover

  I suggest that it is the same as redundancy card crypto. But no documentation or examples found...

• Beat HSRP query

  We have a facility at a client, in which case a Cisco 887-GOES-K9 and a 887-GOES-SEC-K9 Cisco are all connected to their own ADSL connections in our clients MPLS cloud.

  We have HSRP running sideways LAN between these routers and the active router (SEC - K9) keeps track of our MPLS sponge (10.10.10.1) address. The HSRP priority will increase from 110 to 80 if the tracker goes down.

  The configuration is the following:

  Configuration (887-GOES-SEC-K9)

  follow 123 accessibility of als 1 ip

  auto discovering IP sla
  ALS IP 1
  10.10.10.1 ICMP echo source-interface Dialer0
  frequency 10
  IP SLA annex 1 point of life to always start-time now

  interface Vlan1
  IP address 192.168.1.252 255.255.255.0
  NBAR IP protocol discovery
  sleep 10 ip 192.168.1.254
  standby priority 10 110
  10 standby preempt
  waiting 10 to see 123 decrement 30

  Watch Config (887-SEC-K9)

  interface Vlan1
  IP 192.168.1.253 255.255.255.0
  NBAR IP protocol discovery
  sleep 10 ip 192.168.1.254
  10 90 standby priority
  10 standby preempt

  Our client is not is not complaining of any performance issues. However when I look at the logs of the primary, I see severe HSRP beat.

  June 10-13:21:16 CEST: % FOLLOW-UP-5-STATE: accessibility of als 1 ip 123 Up-> down
  June 10-13:21:16 CEST: % HSRP-5-STATECHANGE: Vlan1 Grp 10 active state-> Speak
  June 10-13:21:21 CEST: % FOLLOW-UP-5-STATE: accessibility of als 1 ip 123 Down-> Up
  June 10-13:21:22 CEST: % HSRP-5-STATECHANGE: Vlan1 Grp 10 State Speak-> Active
  June 10 at 13:36:26 CEST: % FOLLOW-UP-5-STATE: accessibility of als 1 ip 123 Up-> down
  June 10 at 13:36:28 BST: % HSRP-5-STATECHANGE: Vlan1 Grp 10 active state-> Speak
  June 10 at 13:36:31 CEST: % FOLLOW-UP-5-STATE: accessibility of als 1 ip 123 Down-> Up
  June 10-13:36:34 CEST: % HSRP-5-STATECHANGE: Vlan1 Grp 10 State Speak-> Active

  My understanding of the above config is that assets will be poll IP MPLS sponge at intervals of 10 seconds using ICMP. However based on the log above, it seems that the active router detects that a ping fails 13:36:26 but realizes then he returned at 13:36:31 only 5 seconds later. But if only, he asks every 10 seconds, wouldn't he at LEAST 10 seconds until what he questions again to see that it is?

  Given the length and line noise on some of these sites MPLS, a small piece of packet loss and reduced speed is acceptable. However, I want to assure you that I understand perfectly followed works before I watch his sensitivity to allow perhaps more tolerance of adjustment.

  Thanks for any help in advance. :)

  Hello

  Tracking queries ip SLA I think that every 5 sec (not sure on that) and your sending a ping every 10 seconds via ip sla

  So if als Miss ping then the follow-up question again before an another sla ping and the follow-up will kick down your state of hrsp.

  You have verified that the destination address sla is indeed available, then maybe try adding a delay to the State track down.

  follow 123
  deadline 30 down

  RES

  Paul

• HSRP support on the cisco SMB switches

  Hello!

  Just a question.

  One of the Cisco Small Business L3 switches support the failover as HSRP, VRRP, and GLBP entry protocols?

  Thanks in advance

  Hi Dejan,

  Oops, I overlooked the fact that you need L3 switches.

  In this case, indeed the Catalyst 3560 would be the best choice.

  Thank you for your trust to Cisco!

  Best regards

  Nico glacier

  Senior Network Engineer - CCNA

  PS: Could mark you it as answered? Thank you

• HSRP authentication problem.

  Hello

  We have 2 devices configured with HSRP in a single interface. Associated with a vlan.

  Switch 1:

  !
  interface Vlan16
  Description HSRP for VMware HA - November 13, 2015
  IP 10.10.10.5 255.255.255.128
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  Watch 11 ip 10.10.10.7
  standby priority 11 110
  11 standby preempt
  Watch 11 authentication md5 key ring globo123
  !

  Switch 2:

  !
  interface Vlan16
  Description HSRP for VMware HA - November 13, 2015
  IP 10.10.10.6 255.255.255.128
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  Watch 11 ip 10.10.10.7
  11 standby preempt
  Watch 11 authentication md5 key ring globo123
  !

  The thing is that we have the following message from switch 1:

  370222: 02:29:20.439 Jan 19 UTC: % HSRP-4-BADAUTH: bad 10.10.10.6 authentication, Group 11, remote Active state

  And the switch 2:

  1308504: 02:30:11.823 Jan 19 UTC: % HSRP-4-BADAUTH: bad authentication of 10.10.10.5, Group 11, remote Active state

  And also, switch 1:

  370242: 02:29:39.290 Jan 19 UTC: HSRP: Vl16 Grp 11 Hello in 10.10.10.6 active pri 100 vIP 10.10.10.7
  370243: 02:29:39.290 Jan 19 UTC: HSRP: Vl16 Grp 11 Auth failed for Hello 129.39.189.3 pkt, no key for this key ID
  370244: 02:29:39.354 Jan 19 UTC: HSRP: Vl16 Grp 11 Hello on 10.10.10.2 pri Active 110 vIP 10.10.10.7
  370245: 02:29:40.946 Jan 19 UTC: HSRP: Vl16 Grp 11 ARP CBC 129.39.189.36 tgt 10.10.10.7, answer with mac 0000.0c07.ac0b
  370246: 02:29:42.058 Jan 19 UTC: HSRP: Vl166 Grp 11 Hello in 10.10.10.6 active pri 100 vIP 10.10.10.7
  370247: 02:29:42.058 Jan 19 UTC: HSRP: Vl16 Grp 11 Auth failed for Hello 129.39.189.3 pkt, no key for this key ID
  370248: 02:29:42.110 Jan 19 UTC: HSRP: Vl16 Grp 11 Hello to 10.10.10.5 pri Active 110 vIP 10.10.10.7
  370249: 02:29:44.682 Jan 19 UTC: HSRP: Vl16 Grp 11 Hello to 10.10.10.5 pri Active 110 vIP 10.10.10.7
  370250: 02:29:44.858 Jan 19 UTC: HSRP: Vl16 Grp 11 Hello in 10.10.10.6 active pri 100 vIP 10.10.10.7
  370251: 02:29:44.858 Jan 19 UTC: HSRP: Vl16 Grp 11 Auth failed for Hello 10.10.10.6 pkt, no key for this key ID
  370252: 02:29:47.306 Jan 19 UTC: HSRP: Vl16 Grp 11 Hello to 10.10.10.5 pri Active 110 vIP 10.10.10.7
  370253: 02:29:47.318 Jan 19 UTC: HSRP: Vl16 Grp 11 Hello in 10.10.10.6 active pri 100 vIP 10.10.10.7
  370254: 02:29:47.318 Jan 19 UTC: HSRP: Vl16 Grp 11 Auth failed for Hello 10.10.10.6 pkt, no key for this key ID
  370255: 02:29:47.630 Jan 19 UTC: HSRP: Vl16 Grp 11 ARP CBC 172.16.1.41 tgt 10.10.10.7, answer with mac 0000.0c07.ac0b

  and also to 2:

  1308614: 02:31:47.308 Jan 19 UTC: HSRP: Vl16 Grp 11 Hello 10.10.10.6 pri Active 100 vIP 10.10.10.7
  1308615: 02:31:48.668 Jan 19 UTC: HSRP: Vl16 Grp 11 Hello 10.10.10.5 pri Active 110 vIP 10.10.10.7
  1308616: 02:31:48.668 Jan 19 UTC: HSRP: Vl16 Grp 11 Auth failed for Hello 10.10.10.5 pkt, no key for this key ID
  1308617: 02:31:48.668 Jan 19 UTC: % HSRP-4-BADAUTH: bad authentication of 10.10.10.5, Group 11, remote Active state
  1308618: 02:31:50.276 Jan 19 UTC: HSRP: Vl16 Grp 11 Hello 129.39.189.3 pri activates 10.10.10.6 100 vIP
  1308619: 02:31:51.280 Jan 19 UTC: HSRP: Vl16 Grp 11 Hello in 129.39.189.2 pri activates 10.10.10.6 110 vIP
  1308620: 02:31:51.280 Jan 19 UTC: HSRP: Vl16 Grp 11 Auth failed for Hello 129.39.189.2 pkt, no key for this key ID
  1308621: 02:31:51.892 Jan 19 UTC: HSRP: Vl16 Grp 11 ARP CBC 172.16.1.48 tgt 10.10.10.6, answer with mac 0000.0c07.ac0b
  1308622: 02:31:52.916 Jan 19 UTC: HSRP: Vl16 Grp 11 Hello 129.39.189.3 pri activates 10.10.10.6 100 vIP
  1308623: 02:31:53.856 Jan 19 UTC: HSRP: Vl16 Grp 11 Hello in 129.39.189.2 pri activates 10.10.10.6 110 vIP
  1308624: 02:31:53.856 Jan 19 UTC: HSRP: Vl16 Grp 11 Auth failed for Hello 10.10.10.5 pkt, no key for this key ID

  The command "Display sleep" I have to switch 1:

  Vlan16 - Group 11
  The State is active
  2 state changes, last status change 9w3d
  Virtual IP address is 10.10.10.7
  Active virtual MAC address is 0000.0c07.ac0b
  Local virtual MAC address is 0000.0c07.ac0b (the default value of the v1)
  Hello time 3 sec, hold time 10 sec
  Next morning sent in 0,560 seconds
  Authentication MD5, key 'GSNIFri13unh4ck4bl3 '.
  Preemption enabled
  Active router is local
  Standby router is unknown
  Priority 110 (110 configured)
  The group name is 'hsrp-Vl16-11' (default)

  And to pass 2:

  Vlan16 - Group 11
  The State is active
  2 state changes, last status change 9w3d
  Virtual IP address is 10.10.10.7
  Active virtual MAC address is 0000.0c07.ac0b
  Local virtual MAC address is 0000.0c07.ac0b (the default value of the v1)
  Hello time 3 sec, hold time 10 sec
  Next morning sent in 0,832 sec
  Authentication MD5, key 'GSNIFri13unh4ck4bl3 '.
  Preemption enabled
  Active router is local
  Standby router is unknown
  Priority 100 (default value 100)
  The group name is 'hsrp-Vl16-11' (default)

  Could someone tell me if this situation could cause the network to stop working?
  Alternatively, what kind of problem do I have?

  Thank you

  Rui Capao

  Don't blame IOS for space, blame Windows copy and paste.

  It would be awesome if you mark my answer as correct if you think this has helped you.

• HSRP in Cisco IOS - XE

  Hi, just got our Cisco 3850 switch newly shipped with IOS - XE. Here is an example of the command 'show version '.

  Switch(Config-if) #do show worm
  Cisco IOS software, IOS - XE software, catalyst L3 Switch (CAT3K_CAA-UNIVERSALK9-M), Version 03.02.03.SE VERSION SOFTWARE (fc2)
  Technical support: http://www.cisco.com/techsupport
  Copyright (c) 1986-2013 by Cisco Systems, Inc.
  Last update Mon 23 - Sep - 13 18:24 by prod_rel_team

  Cisco IOS Software - XE, Copyright (c) 2005-2013 by cisco Systems, Inc.
  All rights reserved.  Some components of the Cisco IOS - XE software are
  distributed under the GNU General Public License ("GPL") Version 2.0.  The
  software licensed code GPL Version 2.0 is a free software that comes
  WITHOUT ANY WARRANTY.  You can redistribute it and/or modify it
  Code GPL under the terms of the GPL Version 2.0.
  (http://www.gnu.org/licenses/gpl-2.0.html) For more details, see the
  documentation or "Mention of license" file that accompanies the IOS - XE software.
  or the applicable URL listed on the brochure that accompanies the IOS - XE
  software.

  ROM: IOS - XE ROMMON
  BOOTLDR: CAT3K_CAA Boot Loader (CAT3K_CAA-HBOOT-M) 1.18 Version, SOFTWARE VERSION (P)
           
  The availability of HK-CSW001 is 4 hours, 0 minutes
  Availability for this command processor is 4 hours, 3 minutes
  System return to the ROM to reload
  System image file is "flash: packages.conf.
  Reload last reason: reload the command

  This product contains cryptographic features and is under the United States
  States and local laws governing the import, export, transfer and
  use. Delivery of Cisco cryptographic products does not imply
  third party approval to import, export, distribute or use encryption.
  Importers, exporters, distributors and users are responsible for
  compliance with U.S. laws and local countries. By using this product you
  agree to comply with the regulations and laws in force. If you are unable
  to satisfy the United States and local laws, return the product.

  A summary of U.S. laws governing Cisco cryptographic products to:
  http://www.Cisco.com/WWL/export/crypto/tool/stqrg.html

  If you need assistance please contact us by mail at
  [email protected] / * /.

  License level: Ipbase
  License type: Permanent
  Then reload license level: Ipbase

  Cisco WS-C3850-24 t (MIPS) processor with K 4194304 bytes of physical memory.
  Card processor ID FOC2007U0YG
  2 virtual Ethernet interfaces
  28 gigabit Ethernet interfaces
  4 ten interfaces Ethernet Gigabit
  2048K bytes of non-volatile configuration memory.
  K 4194304 bytes of physical memory.
  250456K bytes of Crash crashinfo files:.
  1609272K bytes of Flash Flash:.
  0K bytes of Flash model to usbflash0:.
  0K bytes of to webui::.

  MAC Ethernet base address: 00:cc:fc:d1:55:80
  Motherboard Assembly number: 73-16297-04
  Motherboard serial number: FOC20061W6G
  Revision number of the model: Z0
  Motherboard revision number: B0
  Model number: WS-C3850-24 t
  System serial number: XXXXXXXXXXX

  My problem is, I tried to HSRP 1 before using a plotter package and thought since he succeeded, I could do it here in this new switch, but after reading a few articles 1 HSRP went and here HSRP 2 but after I typed in the

  "interface vlan XXX".

  "ip address subnet XXX.XXX.XXX.XXX.

  command "watch version 2" is not available or the day before ipXXX XX. is not available either.

  I'm stuck with this problem now, appreciate any help from you guys.

  Thank you

  The f

  Hello Jeff,.

  We were also quite surprised at the point where we realized, that our brand new 3850 did not support HSRP. This feature was introduced in a second version of the IOS - XE. Currently, we run 03.06.00.E on our WS-C3850-24 t and this version support HSRP.

  I don't understand absolutely, why Cisco released such a combo of software/switch isn't over.

  So, please try a newer version of the software.

  See you soon

  Ichnafi

  Supplement: Cisco Feature Navigator (http://tools.cisco.com/ITDIT/CFN/jsp/by-feature-technology.jsp) said: HSRP is supported since Version 3.3.0

• ASA supports hsrp?

  Not ASA 5505 with IOS 8.x media HSRP? How to configure it?

  Hello

  Not the ASA does not support HSRP. It will pass the HSRP packets if the SAA is in transparent mode, but it's not the same.

  What you're trying to do. The ASA supports failover - see attached link for more details

  http://www.Cisco.com/en/us/docs/security/ASA/asa80/configuration/guide/failover.html

  Jon