Re: HSRP and VRRP

From: garry baker <baker.garry_at_gmail.com>
Date: Thu, 19 May 2011 22:10:05 +0300

I guess a high level comparison would start out of course with the Vendor
Proprietary thing (you said please to not mention these things, but not sure
how you do not mention them in a comparison?) , and a couple of ways to look
at that, would you ever have a mixed environment, or another thought would
be to use VRRP in case you switched vendors from Cisco and you had been
running VRRP then your learning curve is lessened...

I pulled the Benefits below from the Cisco doccd for HSRP and VRRP:

HSRP Benefits
Redundancy

HSRP employs a redundancy scheme that is time proven and deployed
extensively in large networks.

Fast Failover

HSRP provides transparent fast failover of the first-hop router.

Preemption

Preemption allows a standby router to delay becoming active for a
configurable amount of time.

Authentication

HSRP message digest 5 (MD5) algorithm authentication protects against
HSRP-spoofing software and uses the industry-standard MD5 algorithm for
improved reliability and security.

VRRP Benefits
Redundancy

VRRP enables you to configure multiple routers as the default gateway
router, which reduces the possibility of a single point of failure in a
network.

Load Sharing

You can configure VRRP in such a way that traffic to and from LAN clients
can be shared by multiple routers, thereby sharing the traffic load more
equitably among available routers.

Multiple Virtual Routers

VRRP supports up to 255 virtual routers (VRRP groups) on a router physical
interface, subject to the platform supporting multiple MAC addresses.
Multiple virtual router support enables you to implement redundancy and load
sharing in your LAN topology.

Multiple IP Addresses

The virtual router can manage multiple IP addresses, including secondary IP
addresses. Therefore, if you have multiple subnets configured on an Ethernet
interface, you can configure VRRP on each subnet.

Preemption

The redundancy scheme of VRRP enables you to preempt a virtual router backup
that has taken over for a failing virtual router master with a higher
priority virtual router backup that has become available.

Authentication

VRRP message digest 5 (MD5) algorithm authentication protects against
VRRP-spoofing software and uses the industry-standard MD5 algorithm for
improved reliability and security.

Advertisement Protocol

VRRP uses a dedicated Internet Assigned Numbers Authority (IANA) standard
multicast address (224.0.0.18) for VRRP advertisements. This addressing
scheme minimizes the number of routers that must service the multicasts and
allows test equipment to accurately identify VRRP packets on a segment. The
IANA assigned VRRP the IP protocol number 112.

VRRP Object Tracking

VRRP object tracking provides a way to ensure the best VRRP router is
virtual router master for the group by altering VRRP priorities to the
status of tracked objects such as interface or IP route states.

MORE TECHNICAL would be comparing the basic running configurations and
outputs from an HSRP and VRRP setup, did a copy past straight out of the
configuration guide from the doccd, just for a quick comparison view:

HSRP:
 interface f0/0
 ip address 10.1.0.21 255.255.0.0
 standby 1 priority 110
 standby 1 preempt
 standby 1 ip 10.1.0.1
 standby 2 priority 95
 standby 2 preempt
 standby 2 ip 10.1.0.2

interface f0/0
 ip address 10.1.0.22 255.255.0.0
 standby 1 preempt
 standby 1 priority 105
 standby 1 ip 10.1.0.1
 standby 2 priority 110
 standby 2 preempt
 standby 2 ip 10.1.0.2

HSRP1#sh standby
FastEthernet0/0 - Group 1
  State is Active
    2 state changes, last state change 00:00:31
  Virtual IP address is 10.1.0.1
  Active virtual MAC address is 0000.0c07.ac01
    Local virtual MAC address is 0000.0c07.ac01 (v1 default)
  Hello time 3 sec, hold time 10 sec
    Next hello sent in 1.036 secs
  Preemption enabled
  Active router is local
  Standby router is 10.1.0.22, priority 105 (expires in 9.536 sec)
  Priority 110 (configured 110)
  Group name is "hsrp-Fa0/0-1" (default)
FastEthernet0/0 - Group 2
  State is Standby
    1 state change, last state change 00:00:06
  Virtual IP address is 10.1.0.2
  Active virtual MAC address is 0000.0c07.ac02
    Local virtual MAC address is 0000.0c07.ac02 (v1 default)
  Hello time 3 sec, hold time 10 sec
    Next hello sent in 2.600 secs
  Preemption enabled
  Active router is 10.1.0.22, priority 110 (expires in 8.140 sec)
  Standby router is local
  Priority 95 (configured 95)
  Group name is "hsrp-Fa0/0-2" (default)

HSRP2#sh standby
FastEthernet0/0 - Group 1
  State is Standby
    1 state change, last state change 00:00:33
  Virtual IP address is 10.1.0.1
  Active virtual MAC address is 0000.0c07.ac01
    Local virtual MAC address is 0000.0c07.ac01 (v1 default)
  Hello time 3 sec, hold time 10 sec
    Next hello sent in 2.924 secs
  Preemption enabled
  Active router is 10.1.0.21, priority 110 (expires in 8.452 sec)
  Standby router is local
  Priority 105 (configured 105)
  Group name is "hsrp-Fa0/0-1" (default)
FastEthernet0/0 - Group 2
  State is Active
    2 state changes, last state change 00:00:46
  Virtual IP address is 10.1.0.2
  Active virtual MAC address is 0000.0c07.ac02
    Local virtual MAC address is 0000.0c07.ac02 (v1 default)
  Hello time 3 sec, hold time 10 sec
    Next hello sent in 1.536 secs
  Preemption enabled
  Active router is local
  Standby router is 10.1.0.21, priority 95 (expires in 9.156 sec)
  Priority 110 (configured 110)
  Group name is "hsrp-Fa0/0-2" (default)

VRRP:
 interface f0/0
 ip address 10.1.0.2 255.0.0.0
 vrrp 1 priority 120
 vrrp 1 authentication cisco
 vrrp 1 timers advertise 3
 vrrp 1 timers learn
 vrrp 1 ip 10.1.0.10
 vrrp 5 priority 100
 vrrp 5 timers advertise 30
 vrrp 5 timers learn
 vrrp 5 ip 10.1.0.50
 vrrp 100 timers learn
 no vrrp 100 preempt
 vrrp 100 ip 10.1.0.100
 no shutdown

 interface f0/0
 ip address 10.1.0.1 255.0.0.0
 vrrp 1 priority 100
 vrrp 1 authentication cisco
 vrrp 1 timers advertise 3
 vrrp 1 timers learn
 vrrp 1 ip 10.1.0.10
 vrrp 5 priority 200
 vrrp 5 timers advertise 30
 vrrp 5 timers learn
 vrrp 5 ip 10.1.0.50
 vrrp 100 timers learn
 no vrrp 100 preempt
 vrrp 100 ip 10.1.0.100
 no shutdown

VRRP1#sh vrrp
FastEthernet0/0 - Group 1
  State is Master
  Virtual IP address is 10.1.0.10
  Virtual MAC address is 0000.5e00.0101
  Advertisement interval is 3.000 sec
  Preemption enabled
  Priority is 120
  Authentication text "cisco"
  Master Router is 10.1.0.2 (local), priority is 120
  Master Advertisement interval is 3.000 sec
  Master Down interval is 9.531 sec

FastEthernet0/0 - Group 5
  State is Backup
  Virtual IP address is 10.1.0.50
  Virtual MAC address is 0000.5e00.0105
  Advertisement interval is 30.000 sec
  Preemption enabled
  Priority is 100
  Master Router is 10.1.0.1, priority is 200
  Master Advertisement interval is 30.000 sec
  Master Down interval is 90.609 sec (expires in 80.437 sec) Learning

FastEthernet0/0 - Group 100
  State is Backup
  Virtual IP address is 10.1.0.100
  Virtual MAC address is 0000.5e00.0164
  Advertisement interval is 1.000 sec
  Preemption disabled
  Priority is 100
  Master Router is 10.1.0.1, priority is 100
  Master Advertisement interval is 1.000 sec
  Master Down interval is 3.609 sec (expires in 3.069 sec) Learning

VRRP2#sh vrrp
FastEthernet0/0 - Group 1
  State is Backup
  Virtual IP address is 10.1.0.10
  Virtual MAC address is 0000.5e00.0101
  Advertisement interval is 3.000 sec
  Preemption enabled
  Priority is 100
  Authentication text "cisco"
  Master Router is 10.1.0.2, priority is 120
  Master Advertisement interval is 3.000 sec
  Master Down interval is 9.609 sec (expires in 9.457 sec) Learning

FastEthernet0/0 - Group 5
  State is Master
  Virtual IP address is 10.1.0.50
  Virtual MAC address is 0000.5e00.0105
  Advertisement interval is 30.000 sec
  Preemption enabled
  Priority is 200
  Master Router is 10.1.0.1 (local), priority is 200
  Master Advertisement interval is 30.000 sec
  Master Down interval is 90.218 sec

FastEthernet0/0 - Group 100
  State is Master
  Virtual IP address is 10.1.0.100
  Virtual MAC address is 0000.5e00.0164
  Advertisement interval is 1.000 sec
  Preemption disabled
  Priority is 100
  Master Router is 10.1.0.1 (local), priority is 100
  Master Advertisement interval is 1.000 sec
  Master Down interval is 3.609 sec

 --
Garry L. Baker

"With sufficient thrust, pigs fly just fine..." - RFC 1925

On Thu, May 19, 2011 at 8:14 PM, Routing Freak <routingfreak_at_gmail.com>wrote:

> What is the difference between HSRP and VRRP in operation wise
> Please no timers and other proprietary things
> Just need the operational difference between these two protocols
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Thu May 19 2011 - 22:10:05 ART

This archive was generated by hypermail 2.2.0 : Wed Jun 01 2011 - 09:01:11 ART