How to perform hot standby on Cisco core switches

Use Cisco's Hot Standby Router Protocol (HSRP) to configure active and standby routers for high availability on core switches.

Overview of HSRP

HSRP is a Cisco proprietary protocol that provides gateway redundancy by allowing multiple routers or Layer 3 switches to share a virtual IP and MAC address. One device is elected as the active router to forward traffic, while another becomes the standby router, ready to take over if the active router fails. This ensures uninterrupted connectivity for hosts using the virtual gateway as their default route ( ).

Step-by-Step Configuration

1. Access the Switch Connect via console, SSH, or Telnet and enter privileged EXEC mode:

   enableconfigure terminal

2. Select the Interface HSRP is configured on Layer 3 interfaces, such as VLAN interfaces (SVIs):

   interface vlan 10

3. Configure HSRP Group and Virtual IP Assign a group number and a virtual IP address:

   standby 1 ip 192.168.1.254 The group number must match on all switches participating in HSRP.

4. Set Priority and Enable Preemption The priority determines which switch becomes active (higher value wins). Enable preemption to allow a higher-priority router to reclaim active status after recovery:

   standby 1 priority 120standby 1 preempt

5. Optional: Interface Tracking Track interfaces or IP SLA objects to adjust HSRP priority dynamically if a link fails:

   standby 1 track GigabitEthernet0/1 20 This reduces priority by 20 if the tracked interface goes down, triggering failover if necessary ( ).

6. Verify HSRP Status Use the following commands to check HSRP operation:

   show standbyshow standby brief These commands display the active and standby routers, HSRP state, and timers.

7. Test Failover Simulate a failure by shutting down the active interface or switch:

   shutdown Verify that the standby router assumes the virtual IP and MAC address, maintaining connectivity for hosts ( ).

HSRP Timers and Optimization

• Hello Timer: Default 3 seconds (time between hello messages)
• Hold Timer: Default 10 seconds (time to declare active router down)
• These can be tuned for faster failover:

standby 1 timers 1 3

This sets hello to 1 second and hold to 3 seconds for quicker convergence ( ).

Key Considerations

• HSRP works on SVIs or routed ports, not physical access ports.
• Ensure IP connectivity between switches on the same VLAN.
• Use HSRPv2 for IPv6 or larger group numbers.
• Multiple HSRP groups can be configured for load sharing across interfaces ( ). By following these steps, you can implement hot standby on Cisco core switches, ensuring high availability and seamless failover for your network's default gateway.