Konfigurasi HSRP (Hot Standby Router Protocol) Pada Router Cisco

30 Mar 2022 , Administrator, Cisco

HSRP ( Hot Standby Router Protocol ) adalah protokol redudancy milik cisco yang hanya bisa di konfigurasikan di perangkat cisco dengan tujuan untuk menigkatkan ketersediaan ip default gateway selalu tersedia jika sala satu perangkat sebagai gateway terjadi kesalahan dengan cara membuat ip virtual default gateway active standby. Dalam tutorial ini saya tidak membahas secara detail tentang HSRP, namun saya akan memberi sedikit cara singkat cara mengimplementasikan HSRP.

Berikut topologi yang akan digunakan dalam tutorial ini.

Konfigurasi HSRP (Hot Standby Router Protocol) Pada Router Cisco Lab GNS 3

Dalam tutorial ini saya menggunakan ios gns3 versi :

- Router : Cisco IOS Software, 3700 Software (C3745-ADVENTERPRISEK9-M), Version 12.4(25d), RELEASE SOFTWARE (fc1)

1. Konfigurasi ROUTER-GATEWAY-01

ROUTER-GATEWAY-01#conf t  
Enter configuration commands, one per line.  End with CNTL/Z.
ROUTER-GATEWAY-01(config)#int fa0/0
ROUTER-GATEWAY-01(config-if)#ip add 11.11.11.2 255.255.252
ROUTER-GATEWAY-01(config-if)#no shutdown 
ROUTER-GATEWAY-01(config-if)#exit
ROUTER-GATEWAY-01(config)#int fa0/1
ROUTER-GATEWAY-01(config-if)#ip add 172.100.100.251 255.255.255.0
ROUTER-GATEWAY-01(config-if)#no shutdown 
ROUTER-GATEWAY-01(config-if)#end
ROUTER-GATEWAY-01#
ROUTER-GATEWAY-01#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
ROUTER-GATEWAY-01(config)#router ospf 1
ROUTER-GATEWAY-01(config-router)#network 172.100.100.0 0.0.0.255 area 0
ROUTER-GATEWAY-01(config-router)#network 11.11.11.0 0.0.0.3 area 0     
ROUTER-GATEWAY-01(config-router)#end
ROUTER-GATEWAY-01#

2. Konfigurasi ROUTER-GATEWAY-02

ROUTER-GATEWAY-02#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
ROUTER-GATEWAY-02(config)#int fa0/0
ROUTER-GATEWAY-02(config-if)#ip add 12.12.12.2 255.255.255.252
ROUTER-GATEWAY-02(config-if)#no shutdown 
ROUTER-GATEWAY-02(config-if)#exit
ROUTER-GATEWAY-02(config)#int fa0/1
ROUTER-GATEWAY-02(config-if)#ip add 172.100.100.252 255.255.255.0
ROUTER-GATEWAY-02(config-if)#no shutdown 
ROUTER-GATEWAY-02(config-if)#end
ROUTER-GATEWAY-02#
ROUTER-GATEWAY-02#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
ROUTER-GATEWAY-02(config)#router ospf 1
ROUTER-GATEWAY-02(config-router)#network 172.100.100.0 0.0.0.255 area 0 
ROUTER-GATEWAY-02(config-router)#network 12.12.12.0 0.0.0.3 area 0
ROUTER-GATEWAY-02(config-router)#end
ROUTER-GATEWAY-02#

3. Konfigurasi ROUTER-DC

ROUTER-DC#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
ROUTER-DC(config)#int fa0/0
ROUTER-DC(config-if)#ip add 11.11.11.1 255.255.255.252
ROUTER-DC(config-if)#ip add 12.12.12.1 255.255.255.252
ROUTER-DC(config-if)#no shutdown 
ROUTER-DC(config-if)#exit
ROUTER-DC(config)#int fa1/0
ROUTER-DC(config-if)#ip add 10.10.10.254 255.255.255.0
ROUTER-DC(config-if)#no shutdown 
ROUTER-DC(config-if)#end
ROUTER-DC#
ROUTER-DC#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
ROUTER-DC(config)#router ospf 1
ROUTER-DC(config-router)#network 11.11.11.0 0.0.0.3 area 0
ROUTER-DC(config-router)#network 11.11.11.0 0.0.0.3 area 0
ROUTER-DC(config-router)#network 10.10.10.0 0.0.0.255 area 0
ROUTER-DC(config-router)#end
ROUTER-DC#wr
Building configuration...
[OK]
ROUTER-DC#

4. Konfigurasi HSRP ROUTER-GATEWAY-01

Enter configuration commands, one per line.  End with CNTL/Z.
ROUTER-GATEWAY-01(config)#int fa0/1
ROUTER-GATEWAY-01(config-if)#standby 1 ip 172.100.100.254 "Menentukan group HSRP dan Ip Virtual Gateway"         
ROUTER-GATEWAY-01(config-if)#standby 1 priority 105 "Menentukan priority HSRP"   
ROUTER-GATEWAY-01(config-if)#standby 1 preempt "Perintah untuk mengaktifkan default priority HSRP"
ROUTER-GATEWAY-01(config-if)#end
ROUTER-GATEWAY-01#

5. Konfigurasi HSRP ROUTER-GATEWAY-02

ROUTER-GATEWAY-02#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
ROUTER-GATEWAY-02(config)#int fa0/1
ROUTER-GATEWAY-02(config-if)#standby 1 ip 172.100.100.254 "Mentukan group HSRP dan Ip Virtual Gateway"         
ROUTER-GATEWAY-02(config-if)#standby 1 priority 100 "Menetukan priority HSRP"      
ROUTER-GATEWAY-02(config-if)#standby 1 preempt "Perintah untuk mengaktifkan default priority HSRP"
ROUTER-GATEWAY-02(config-if)#end
ROUTER-GATEWAY-02#

Ket :

Default priority HSRP adalah 100
Priority tertinggi yang menjadi jalur Active
Preemt adalah perintah untuk mengaktifkan priority default HSRP pada saat terjadi kegagalan pada jalur priority tertinggi atau nilai priority lawan group HSRP nya lebih kecil dari 100

6. Verifikasi Konfigurasi HSRP pada ROUTER-GATEWAY-0 dan ROUTER-GATEWAY-02

ROUTER-GATEWAY-01#sh standby brief 
                     P indicates configured to preempt.
                     |
Interface   Grp Prio P State    Active          Standby         Virtual IP     
Fa0/1       1   105  P Active   local           172.100.100.252 172.100.100.254
ROUTER-GATEWAY-01#
ROUTER-GATEWAY-01#sh standby fa0/1 
FastEthernet0/1 - Group 1
  State is Active
    4 state changes, last state change 00:02:32
  Virtual IP address is 172.100.100.254
  Active virtual MAC address is 0000.0c07.ac01
    Local virtual MAC address is 0000.0c07.ac01 (v1 default)
  Hello time 3 sec, hold time 10 sec
    Next hello sent in 0.184 secs
  Preemption enabled
  Active router is local
  Standby router is 172.100.100.252, priority 100 (expires in 8.204 sec)
  Priority 105 (configured 105)
  IP redundancy name is "hsrp-Fa0/1-1" (default)
ROUTER-GATEWAY-01#

ROUTER-GATEWAY-02#sh standby br
ROUTER-GATEWAY-02#sh standby brief 
                     P indicates configured to preempt.
                     |
Interface   Grp Prio P State    Active          Standby         Virtual IP     
Fa0/1       1   100  P Standby  172.100.100.251 local           172.100.100.254
ROUTER-GATEWAY-02#
ROUTER-GATEWAY-02#sh standby fa0/1 
FastEthernet0/1 - Group 1
  State is Standby
    7 state changes, last state change 00:03:27
  Virtual IP address is 172.100.100.254
  Active virtual MAC address is 0000.0c07.ac01
    Local virtual MAC address is 0000.0c07.ac01 (v1 default)
  Hello time 3 sec, hold time 10 sec
    Next hello sent in 2.364 secs
  Preemption enabled
  Active router is 172.100.100.251, priority 105 (expires in 8.332 sec)
  Standby router is local
  Priority 100 (default 100)
  IP redundancy name is "hsrp-Fa0/1-1" (default)
ROUTER-GATEWAY-02#
ROUTER-GATEWAY-02#

Dari hasil verifikasi di atas status HSRP pada router ROUTER-GATEWAY-01 Active karena nilai prioritynya lebih tinggi dari nilai priority defaultnya, sedangkan router ROUTER-GATEWAY-02 status Standby karena nilai priority lebih kecil dari router pasanganya.

7. Verifikasi dari Komputer Clien-01 ke SERVER

Client-01> ping 10.10.10.8
84 bytes from 10.10.10.8 icmp_seq=1 ttl=62 time=25.002 ms
84 bytes from 10.10.10.8 icmp_seq=2 ttl=62 time=26.001 ms
84 bytes from 10.10.10.8 icmp_seq=3 ttl=62 time=31.001 ms
84 bytes from 10.10.10.8 icmp_seq=4 ttl=62 time=30.001 ms
84 bytes from 10.10.10.8 icmp_seq=5 ttl=62 time=29.001 ms

Client-01> tracer 10.10.10.8
trace to 10.10.10.8, 8 hops max, press Ctrl+C to stop
 1   172.100.100.251   8.001 ms  9.000 ms  9.001 ms
 2     *11.11.11.1   18.001 ms  19.001 ms
 3   *10.10.10.8   11.001 ms

Client-01>

Dari hasil verifikasi di atas komputer Client-01 menuju SERVER melalui 11.111.1 jalur yang Active

Lakukan shutdown interface Fa0/1 pada ROUTER-GATEWAY-01 yang mengarah ke switch lokal, makan secara otomatis jalur Standby pada ROUTER-GATEWAY-02 akan menjadi Active dan status ROUTER-GATEWAY-01 akan menjadi State is Init (interface down).

ROUTER-GATEWAY-01(config)#int fa0/1
ROUTER-GATEWAY-01(config-if)#shutdown 
*Mar  1 01:09:36.639: %HSRP-5-STATECHANGE: FastEthernet0/1 Grp 1 state Active -> Init
*Mar  1 01:09:36.659: %OSPF-5-ADJCHG: Process 1, Nbr 172.100.100.252 on FastEthernet0/1 from FULL to DOWN, Neighbor Down: Interface down or detached
ROUTER-GATEWAY-01(config-if)#
ROUTER-GATEWAY-01(config-if)#end


ROUTER-GATEWAY-01#sh standby brief 
                     P indicates configured to preempt.
                     |
Interface   Grp Prio P State    Active          Standby         Virtual IP     
Fa0/1       1   105  P Init     unknown         unknown         172.100.100.254
ROUTER-GATEWAY-01#                 
ROUTER-GATEWAY-01#sh standby fa0/1 
FastEthernet0/1 - Group 1
  State is Init (interface down)
    5 state changes, last state change 00:00:51
  Virtual IP address is 172.100.100.254
  Active virtual MAC address is unknown
    Local virtual MAC address is 0000.0c07.ac01 (v1 default)
  Hello time 3 sec, hold time 10 sec
  Preemption enabled
  Active router is unknown
  Standby router is unknown
  Priority 105 (configured 105)
  IP redundancy name is "hsrp-Fa0/1-1" (default)
ROUTER-GATEWAY-01#

Verifikasi pada ROUTER-GATEWAY-02

ROUTER-GATEWAY-02#sh standby brief 
                     P indicates configured to preempt.
                     |
Interface   Grp Prio P State    Active          Standby         Virtual IP     
Fa0/1       1   100  P Active   local           unknown         172.100.100.254
ROUTER-GATEWAY-02#
ROUTER-GATEWAY-02#sh standby fa0/1 
FastEthernet0/1 - Group 1
  State is Active
    8 state changes, last state change 00:02:59
  Virtual IP address is 172.100.100.254
  Active virtual MAC address is 0000.0c07.ac01
    Local virtual MAC address is 0000.0c07.ac01 (v1 default)
  Hello time 3 sec, hold time 10 sec
    Next hello sent in 0.804 secs
  Preemption enabled
  Active router is local
  Standby router is unknown
  Priority 100 (default 100)
  IP redundancy name is "hsrp-Fa0/1-1" (default)
ROUTER-GATEWAY-02#

Verifikasi dari Komputer Clien-01 ke SERVER

Client-01> ping 10.10.10.8
84 bytes from 10.10.10.8 icmp_seq=1 ttl=62 time=35.002 ms
84 bytes from 10.10.10.8 icmp_seq=2 ttl=62 time=31.002 ms
84 bytes from 10.10.10.8 icmp_seq=3 ttl=62 time=29.002 ms
84 bytes from 10.10.10.8 icmp_seq=4 ttl=62 time=24.002 ms
84 bytes from 10.10.10.8 icmp_seq=5 ttl=62 time=21.001 ms

Client-01> tracer 10.10.10.8
trace to 10.10.10.8, 8 hops max, press Ctrl+C to stop
 1   172.100.100.252   15.001 ms  7.000 ms  9.001 ms
 2   12.12.12.1   19.001 ms  19.001 ms  19.001 ms
 3   *10.10.10.8   30.002 ms 

Client-01>

Dari hasil verifikasi di atas komputer Client-01 menuju SERVER melalui 12.12.12.1 jalur yang Active .

Hidupkan kembali interface fa0/1 pada ROUTER-GATEWAY-01 secara oromatis jalur Active akan berpindah pada ROUTER-GATEWAY-01.

Terima kasih atas kunjunganya, semoga bermanfaat..