Comments in line. Washington Rico wrote:
> Cisco People I need you help... > > I would appreciate any help. I have a 6500Cat running Redundant Supervisor > engines and two MSFC installed one on each supervisor engine. > ***** > Mod Slot Ports Module-Type Model Sub Status > --- ---- ----- ------------------------- ------------------- --- -------- > 1 1 2 1000BaseX Supervisor WS-X6K-SUP2-2GE yes ok > 15 1 1 Multilayer Switch Feature WS-F6K-MSFC2 no ok > 2 2 2 1000BaseX Supervisor WS-X6K-SUP2-2GE yes standby > 16 2 1 Multilayer Switch Feature WS-F6K-MSFC2 no ok > 3 3 8 1000BaseX Ethernet WS-X6408A-GBIC no ok > 4 4 8 1000BaseX Ethernet WS-X6408A-GBIC no ok > 6 6 48 10/100BaseTX Ethernet WS-X6348-RJ-45 no ok > 7 7 48 10/100BaseTX Ethernet WS-X6348-RJ-45 no ok > 8 8 48 10/100BaseTX Ethernet WS-X6348-RJ-45 no ok > 9 9 48 10/100BaseTX Ethernet WS-X6348-RJ-45 no ok > ***** > > I created one vlan (Vlan 20) and I want to use HSRP across the MSFC so the > clients can have a steady Gateway. > > Default vlan 1 works fine, I can ping accross to the other MSFC. But > Vlan20 the one I created on the switch does give me connectivity accoss > MFSC. I assume here you really mean "does NOT give me connectivity.." , right? Did it work before you added HSRP commands? Try removing the HSRP config and just work on simple connectivity from router to router (MSFC to MSFC) on Vlan 20. > > MSFC#1 > interface Vlan20 > ip address 10.224.173.3 255.255.255.0 > no ip redirects > ip route-cache flow > standby priority 80 preempt > standby authentication XXXX > standby ip 10.224.173.1 > MSFC#2 > interface Vlan20 > mac-address 0012.3456.7891 > ip address 10.224.173.2 255.255.255.0 > no ip redirects > ip route-cache flow > standby priority 90 preempt > standby authentication XXXX > standby ip 10.224.173.1 Don't omit the group number, although the documentation says it is optional. I have had the experience where omitting it causes problems in some versions of IOS. Also, if you go to a multi-HSRP config it makes things clearer. standby 1 priority 90 preempt standby 1 ip 10.224.173.1 Remove the authentication until you get HSRP working - it's another unneeded variable at this stage. Take a look at the output of the "show standby" command. Look at your routing table - "show ip route". Look at your ARP cache - "show arp". > > ******** > Test-6500-MSFC2#ping 10.224.173.1 Looks like you are pinging the HSRP virtual IP address from one of the MSFC routers. Well, this ought to work but you really should be doing your pinging from a workstation plugged into Vlan 20, which is what HSRP is meant for.... Back up a step and find out if the problem is with IP connectivity or with the HSRP config. Can you ping the real IP address from each MSFC? That is, can you ping MSFC2 (10.224.173.2) from MSFC1? > > > Type escape sequence to abort. > Sending 5, 100-byte ICMP Echos to 10.224.173.1, timeout is 2 seconds: > ..... > Success rate is 0 percent (0/5) > Test-6500-MSFC2# > ------ > ****** > On the switch trunks shows this... > > Test-6500> (enable) show trunk > * - indicates vtp domain mismatch > Port Mode Encapsulation Status Native vlan > -------- ----------- ------------- ------------ ----------- > 15/1 nonegotiate isl trunking 1 > 16/1 nonegotiate isl trunking 1 > > Port Vlans allowed on trunk > -------- > --------------------------------------------------------------------- > 15/1 1-1005,1025-4094 > 16/1 1-1005,1025-4094 > > Port Vlans allowed and active in management domain > -------- > --------------------------------------------------------------------- > 15/1 1 (enable) > > ********** > Show Vlan > VLAN Name Status IfIndex Mod/Ports, Vlans > ---- -------------------------------- --------- ------- > ------------------------ > 1 default active 199 1/1-2 > 2/1-2 > 20 TEST-VLAN active 208 > 30 VLAN30 active 207 > 999 Dead-Vlan active 225 3/1-8 > 4/1-8 > 6/1-48 > 7/1-48 > 8/1-48 > 9/1-48 > 1002 fddi-default active 200 > 1003 token-ring-default active 203 > 1004 fddinet-default active 201 > 1005 trnet-default active 202 > *********************************************************************** > > Question 1.----- > Why isn't vlan 20 and 30 and 999 in the Management domain? (Above Show > trunk command) This is working okay. You want to keep control traffic on the management Vlan (which is Vlan 1 by default) and end-to-end user traffic on other Vlans. > > Question 2.----- > Becuase Vlan 20 and 30 aren't in the Management domain, Is this the reason > why I am getting no Msfc connectivity for those Vlans.. No. This has nothing to do with it. Concentrate on the IP connectivity issue and HSRP config (which actually looks okay). > > > Sorry for the long letter, appreciate any info you have.. > > Regards, > Eric > > _________________________________________________________________ > $B$+$o$$$$(B & $B;H$($k%V%i%&%6$G!"%$%s%?! http://explorer.msn.co.jp/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=23749&t=23744 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
