Question

Difficulty: MediumHigh Availability and Redundancy Concepts

A network administrator configures a pair of core routers using a First Hop Redundancy Protocol (FHRP) to provide seamless default gateway redundancy for a corporate subnet. During a scheduled maintenance test, the primary router is powered off. Although the secondary router successfully transitions to the active state and assumes ownership of the virtual IP and virtual MAC addresses, workstations on the subnet immediately lose outbound network access. Upon auditing host network configurations, the administrator notices that all affected workstations were statically configured. Which of the following is the most likely cause of the connectivity failure during failover?

  1. The workstations were configured with the physical IP address of the primary router as their default gateway instead of the FHRP virtual IP address.Answer
  2. B
    The workstations were assigned a subnet mask that prevents them from resolving the secondary router's physical MAC address.
  3. C
    The secondary router was assigned the highest numerical Spanning Tree Protocol (STP) priority value on its uplink interfaces.
  4. D
    The primary and secondary router interfaces were assigned to separate VLAN broadcast domains on the core switch.

Answer

The workstations were configured with the physical IP address of the primary router as their default gateway instead of the FHRP virtual IP address.
First Hop Redundancy Protocols rely on clients directing traffic to a shared Virtual IP (VIP) address. When host devices are incorrectly configured with the primary router's unique physical interface IP address as their default gateway, their traffic bypasses the FHRP virtual abstraction. Consequently, when the primary device fails, client traffic continues sending packets to the dead physical IP, causing complete outbound loss despite the standby router taking over the active virtual role.

Step-by-Step Solution

1
Analyze the FHRP deployment model and operational mechanics.
FHRP protocols (such as HSRP, VRRP, or CARP) create a single Virtual IP (VIP) and Virtual MAC address shared between redundant routers.
Host endpoints must direct their default gateway traffic to the shared Virtual IP so that failover events are transparent to clients.
2
Evaluate host configuration symptoms against the router state changes.
The secondary router successfully assumed the active role and took over the VIP, yet host connectivity failed.
Because the secondary router took over the VIP properly, any client configured with the VIP would retain outbound access. Clients failing to connect must be targeting a static destination that did not migrate.
3
Identify the root cause of the host failure.
Configuring hosts with the physical IP of the primary router bypasses the virtual gateway mechanism entirely.
When the primary router powers off, its physical IP becomes unreachable, leaving hosts unable to route traffic off the local subnet.

Key Concept

FHRP Virtual IP vs Physical Interface IP Gateway Configuration
Rate this question