HSRP object tracking

[stevenjwilliams83]

Any known IOL issues on L3 image dealing with HSRP tracking?

I am having an issue where interface tracking is decrementing the priority but not switching over to the HSRP peer.

01#show standby
Ethernet0/0 - Group 100
State is Active
2 state changes, last state change 00:30:55
Virtual IP address is 10.100.100.1
Active virtual MAC address is 0000.0c07.ac64
Local virtual MAC address is 0000.0c07.ac64 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 1.552 secs
Authentication MD5, key-string
Preemption enabled
Active router is local
Standby router is 10.100.100.3, priority 90 (expires in 9.408 sec)
Priority 89 (default 100)
Track object 10 state Down decrement 11
Group name is "hsrp-Et0/0-100" (default)

[ecze]

let me remind you that into a virtual context, interface are never physically down . only admin down is possible...

E.

[stevenjwilliams83]

Yes and even when doing that it doesn't fail over.

R01#show run | inc track
track 1 interface Ethernet0/1 line-protocol
track 15 ip route 10.77.77.0 255.255.255.0 reachability
standby 100 track 1 decrement 10
R01#show ip int br
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 10.100.100.2 YES TFTP up up
Ethernet0/1 172.16.3.2 YES TFTP up up
Ethernet0/2 unassigned YES TFTP administratively down down
Ethernet0/3 unassigned YES TFTP administratively down down
Loopback0 1.1.1.1 YES TFTP up up
R01#show run int eth0/0
Building configuration...

Current configuration : 230 bytes
!
interface Ethernet0/0
ip address 10.100.100.2 255.255.255.0
standby 100 ip 10.100.100.1
standby 100 priority 105
standby 100 preempt
standby 100 authentication md5 key-string cisco123
standby 100 track 1 decrement 10
end

R01#show stand
R01#show standby
Ethernet0/0 - Group 100
State is Active
5 state changes, last state change 00:16:58
Virtual IP address is 10.100.100.1
Active virtual MAC address is 0000.0c07.ac64
Local virtual MAC address is 0000.0c07.ac64 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 0.672 secs
Authentication MD5, key-string
Preemption enabled
Active router is local
Standby router is 10.100.100.3, priority 100 (expires in 9.584 sec)
Priority 105 (configured 105)
Track object 1 state Up decrement 10
Group name is "hsrp-Et0/0-100" (default)
R01#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R01(config)#int eth0/1
R01(config-if)#shut
R01(config-if)#
*Jul 5 19:10:08.812: %TRACK-6-STATE: 1 interface Et0/1 line-protocol Up -> Down
R01(config-if)#
*Jul 5 19:10:08.817: %BGP-5-NBR_RESET: Neighbor 172.16.3.1 reset (Interface flap)
*Jul 5 19:10:08.817: %BGP-5-ADJCHANGE: neighbor 172.16.3.1 Down Interface flap
*Jul 5 19:10:08.817: %BGP_SESSION-5-ADJCHANGE: neighbor 172.16.3.1 IPv4 Unicast topology base removed from session Interface flap
R01(config-if)#
*Jul 5 19:10:10.815: %LINK-5-CHANGED: Interface Ethernet0/1, changed state to administratively down
*Jul 5 19:10:11.819: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0/1, changed state to down
R01(config-if)#do show standby
Ethernet0/0 - Group 100
State is Active
5 state changes, last state change 00:17:19
Virtual IP address is 10.100.100.1
Active virtual MAC address is 0000.0c07.ac64
Local virtual MAC address is 0000.0c07.ac64 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 2.416 secs
Authentication MD5, key-string
Preemption enabled
Active router is local
Standby router is 10.100.100.3, priority 100 (expires in 9.456 sec)
Priority 95 (configured 105)
Track object 1 state Down decrement 10
Group name is "hsrp-Et0/0-100" (default)
R01(config-if)#
*Jul 5 19:10:21.019: %TRACK-6-STATE: 15 ip route 10.77.77.0/24 reachability Up -> Down
R01(config-if)#do show standby
Ethernet0/0 - Group 100
State is Active
5 state changes, last state change 00:17:25
Virtual IP address is 10.100.100.1
Active virtual MAC address is 0000.0c07.ac64
Local virtual MAC address is 0000.0c07.ac64 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 2.320 secs
Authentication MD5, key-string
Preemption enabled
Active router is local
Standby router is 10.100.100.3, priority 100 (expires in 8.224 sec)
Priority 95 (configured 105)
Track object 1 state Down decrement 10
Group name is "hsrp-Et0/0-100" (default)
R01(config-if)#
R01(config-if)#do show ip int br
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 10.100.100.2 YES TFTP up up
Ethernet0/1 172.16.3.2 YES TFTP administratively down down
Ethernet0/2 unassigned YES TFTP administratively down down
Ethernet0/3 unassigned YES TFTP administratively down down
Loopback0 1.1.1.1 YES TFTP up up

[Uldis (UD)]

which ios is used, sh vers please..
and try other IOS version.
sometimes bugs on HSRP was observed

UD

[stevenjwilliams83]

I have used:

L3-ADVENTERPRISEK9-M-15.2-M5.3.bin
L3-ADVENTERPRISEK9-M-15.4-2T.bin

Thats all I have.

[ecze]

show us config hsrp for both router please

[stevenjwilliams83]

R1:

track 1 interface Ethernet0/1 line-protocol
!
track 15 ip route 10.77.77.0 255.255.255.0 reachability
!
!
!
!
interface Loopback0
no shutdown
ip address 1.1.1.1 255.255.255.255
!
interface Ethernet0/0
no shutdown
ip address 10.100.100.2 255.255.255.0
standby 1 ip 10.100.100.1
standby 1 priority 105
standby 1 authentication md5 key-string cisco123
standby 1 track 1 decrement 10
!
interface Ethernet0/1
no shutdown
ip address 172.16.3.2 255.255.255.252
!
!
router ospf 10
router-id 1.1.1.1
network 10.100.100.2 0.0.0.0 area 0
!
router bgp 12
bgp log-neighbor-changes
network 172.16.3.0 mask 255.255.255.252
redistribute ospf 10 metric 1500 route-map RM_OSPF_INTO_BGP
neighbor 172.16.3.1 remote-as 3
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
ip prefix-list BGP_INTO_OSPF seq 10 permit 172.16.3.0/30
!
ip prefix-list OSPF_INTO_BGP seq 5 permit 10.100.100.0/24
ip prefix-list OSPF_INTO_BGP seq 10 permit 10.0.0.0/24
access-list 10 permit any
!
route-map RM_OSPF_INTO_BGP permit 10
match ip address prefix-list OSPF_INTO_BGP
!
route-map RM_BGP_INTO_OSPF permit 10
match ip address prefix-list BGP_INTO_OSPF
!
route-map LOCAL_PREF permit 10
match ip address 10
set local-preference 200

----------------------------------------------------------------------------------------------
R2:

interface Loopback0
no shutdown
ip address 2.2.2.2 255.255.255.255
!
interface Ethernet0/0
no shutdown
ip address 10.100.100.3 255.255.255.0
standby 1 ip 10.100.100.1
standby 1 authentication md5 key-string cisco123
!
interface Ethernet0/1
no shutdown
no ip address
shutdown
!
interface Ethernet0/2
no shutdown
no ip address
shutdown
!
interface Ethernet0/3
no shutdown
ip address 172.16.5.6 255.255.255.252
no ip redirects
no ip unreachables
no ip proxy-arp
!
router ospf 10
router-id 2.2.2.2
network 10.100.100.3 0.0.0.0 area 0
!
router bgp 12
bgp log-neighbor-changes
network 172.16.5.4 mask 255.255.255.252
redistribute ospf 10 metric 1500 route-map RM_OSPF_INTO_BGP
neighbor 172.16.5.5 remote-as 5
neighbor 172.16.5.5 route-map PREPEND_OUT out
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
ip prefix-list OSPF_INTO_BGP seq 5 permit 10.100.100.0/24
ip prefix-list OSPF_INTO_BGP seq 10 permit 10.0.0.0/24
access-list 10 permit any
!
route-map RM_OSPF_INTO_BGP permit 10
match ip address prefix-list OSPF_INTO_BGP
!
route-map PREPEND_OUT permit 10
match ip address 10
set as-path prepend 12 12 12

[Uldis (UD)]

Actually best would be do wr your lab, then export cfg.
and export lab, post here.
It will be easier to check bugs

UD

[stevenjwilliams83]

Same result with both IOL and vIOS.

[Uldis (UD)]

first mistake,
track 1 interface Ethernet0/1 line-protocol

line protocol will be never down mate...
On virtual devices simply does not exist layer 1 !!!!!!!!!!!!!

such state on any virtual node like up/down NEVER will be!
it has only up/up state
or admistratively down/down

It is not EVE issue, but such is specific of virtual routers and switches mate

use something else like reachability tracking etc