HSRP Fundamentals

We are going to configure HSRP together, step by step.
You need to understand every mechanism, so we will walk through them one by one.

By the end of this module, you will configure everything yourself.

The HSRP Group

HSRP starts by grouping router interfaces into an HSRP group, identified by a group number.

Figure 1 – R1 and R2 form HSRP Group 1

In the topology, R1 and R2 both join HSRP group 1 on their LAN interface.

The HSRP Virtual IP

The group then shares one Virtual IP address (VIP).
That address belongs to no physical interface: the group itself answers for it.

Figure 2 – The Virtual IP becomes the default gateway

• Here the group uses 192.168.10.3 as the VIP, while R1 keeps .1 and R2 keeps .2 on their physical interfaces.

• Every host in 192.168.10.0/24 points its default gateway at .3.

Let's configure HSRP on R1 first:

R1# conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R1(config)# int g0/0
R1(config-if)# ip address 192.168.10.1 255.255.255.0
R1(config-if)# no shut
R1(config-if)# standby 1 ip 192.168.10.3

%HSRP-6-STATECHANGE: GigabitEthernet0/0 Grp 1 state Init -> Init
%HSRP-6-STATECHANGE: GigabitEthernet0/0 Grp 1 state Speak -> Standby
%HSRP-6-STATECHANGE: GigabitEthernet0/0 Grp 1 state Standby -> Active
R1(config-if)# end

R1 walked through the states on its own and took the Active role: no other router answered.
The three commands did the work: they set the physical IP address, brought the interface up, and created HSRP group 1 with the VIP 192.168.10.3.

R1 is Active because it is alone in the group for now: with no other router to compete against, it wins the election by default.

Now do the same on R2:

R2# conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R2(config)# int g0/0
R2(config-if)# ip address 192.168.10.2 255.255.255.0
R2(config-if)# no shut
R2(config-if)# standby 1 ip 192.168.10.3

%HSRP-6-STATECHANGE: GigabitEthernet0/0 Grp 1 state Init -> Init
%HSRP-6-STATECHANGE: GigabitEthernet0/0 Grp 1 state Speak -> Standby
R2(config-if)# end

R2 settled into Standby: the Active role was already taken.

Verify it on R1:

R1# show standby
GigabitEthernet0/0 - Group 1 (HSRP-V1)
  State is Active
    2 state changes, last state change 00:01:24
  Virtual IP address is 192.168.10.3
  Active virtual MAC address is 0000.0c07.ac01
    Local virtual MAC address is 0000.0c07.ac01 (v1 default)
  Hello time 3 sec, hold time 10 sec
    Next hello sent in 1.324 secs
  Preemption disabled
  Active router is local
  Standby router is 192.168.10.2, priority 100 (expires in 8.912 sec)
  Priority 100 (default 100)
  Group name is "hsrp-Gi0/0-1" (default)

Focus on one line for now: the group answers for 192.168.10.3.

Every other line of this output (State, Priority, timers, virtual MAC) is exactly what the next lessons decode.

Run the same command on R2:

R2# show standby
GigabitEthernet0/0 - Group 1 (HSRP-V1)
  State is Standby
    2 state changes, last state change 00:01:24
  Virtual IP address is 192.168.10.3
  Active virtual MAC address is 0000.0c07.ac01
    Local virtual MAC address is 0000.0c07.ac01 (v1 default)
  Hello time 3 sec, hold time 10 sec
    Next hello sent in 1.324 secs
  Preemption disabled
  Active router is 192.168.10.1, priority 100 (expires in 8.912 sec)
  Standby router is local
  Priority 100 (default 100)
  Group name is "hsrp-Gi0/0-1" (default)

Both routers agree on the same virtual IP address, 192.168.10.3.
The group is formed.

Inside each group, one router holds the Active role.
Let's look at the Active and Standby roles, confirmed with show standby on both routers.

The Two Roles

• The Active router owns the virtual addresses.
  It answers ARP requests for the VIP and forwards every packet sent to the virtual gateway.

Figure 3 – Active and Standby roles inside the group

• The Standby router watches its peer through periodic Hello messages.
  It stays silent, ready to take over the moment the Active router disappears.

Reading the Roles on Both Routers

Here is R1's perspective on the group, now that you know what the Active role means:

R1# show standby
GigabitEthernet0/0 - Group 1 (HSRP-V1)
  State is Active
    2 state changes, last state change 00:01:24
  Virtual IP address is 192.168.10.3
  Active virtual MAC address is 0000.0c07.ac01
    Local virtual MAC address is 0000.0c07.ac01 (v1 default)
  Hello time 3 sec, hold time 10 sec
    Next hello sent in 1.324 secs
  Preemption disabled
  Active router is local
  Standby router is 192.168.10.2, priority 100 (expires in 8.912 sec)
  Priority 100 (default 100)
  Group name is "hsrp-Gi0/0-1" (default)

Here are the key lines to focus on:

• State is Active means R1 currently forwards traffic for the group.

• Active router is local confirms R1 owns the VIP and answers ARP requests for it.

Now look at the same group from R2's side:

R2# show standby
GigabitEthernet0/0 - Group 1 (HSRP-V1)
  State is Standby
    4 state changes, last state change 00:02:38
  Virtual IP address is 192.168.10.3
  Active virtual MAC address is 0000.0c07.ac01
    Local virtual MAC address is 0000.0c07.ac01 (v1 default)
  Hello time 3 sec, hold time 10 sec
    Next hello sent in 2.117 secs
  Preemption disabled
  Active router is 192.168.10.1, priority 100 (expires in 9.216 sec)
  Standby router is local
  Priority 100 (default 100)
  Group name is "hsrp-Gi0/0-1" (default)

Here are the key lines to focus on:

• State is Standby means R2 stays silent and only monitors R1's Hellos.

• Active router is 192.168.10.1 tells R2 exactly which router currently owns the VIP.

Each router reports its own view of the same group.

You noticed it already: R1 became Active and R2 Standby, without you choosing anything.

But how do the two routers decide which one takes each role?

Figure 4 – How are Active and Standby elected?

The answer is that HSRP compares two parameters in a specific order.

The HSRP Election Process

Every router carries a priority between 0 and 255, with a default of 100.
The highest priority becomes the Active router.

Figure 5 – Election criteria: priority first, highest IP as tiebreaker

If priorities tie, the router with the highest IP address on the HSRP interface wins the election.

In your demo group, both routers still run the default of 100.
R1 holds the Active role simply because it came up first.

To control the outcome, you set the priority yourself.

Controlling the HSRP Election with Priority

Raise the priority on the router you want as Active.

Figure 6 – Priority 110 makes R1 the Active router

To do this we use the command below:

R1# conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R1(config)# int g0/0
R1(config-if)# standby 1 priority 110
R1(config-if)# end

R1# show standby
GigabitEthernet0/0 - Group 1 (HSRP-V1)
  State is Active
    2 state changes, last state change 00:09:47
  Virtual IP address is 192.168.10.3
  Active virtual MAC address is 0000.0c07.ac01
    Local virtual MAC address is 0000.0c07.ac01 (v1 default)
  Hello time 3 sec, hold time 10 sec
    Next hello sent in 0.688 secs
  Preemption disabled
  Active router is local
  Standby router is 192.168.10.2, priority 100 (expires in 7.404 sec)
  Priority 110 (configured 110)
  Group name is "hsrp-Gi0/0-1" (default)

The output confirms it: Priority 110 (configured 110).

HSRP States

Before a router settles into Active or Standby, it walks through a series of states.
Follow the figure from left to right.

Figure 7 – HSRP state machine from Initial to Active

• In Initial, HSRP just started on the interface.

• In Learn, the router still waits to discover the VIP.

• In Listen, it knows the VIP and monitors Hellos.

• In Speak, it sends its own Hellos and competes in the election.

The election ends with:

• One router in Active

• The other in Standby

You already watched this sequence happen.
Here is what R2 logged when it joined the group:

%HSRP-6-STATECHANGE: GigabitEthernet0/0 Grp 1 state Init -> Init
%HSRP-6-STATECHANGE: GigabitEthernet0/0 Grp 1 state Speak -> Standby

You will read them constantly in show standby outputs and STATECHANGE logs when you verify or troubleshoot a group.

The group is up and both roles are settled. Let's continue with the HSRP Failover lesson, and watch R2 take over when R1 dies.