Table Of Contents
FHRP Features Roadmap
First Published: May 2, 2005Last Updated: September 10, 2010This feature roadmap lists the Cisco IOS FHRP features documented in the Cisco IOS IP Application Services Configuration Guide and maps them to the documents in which they appear. The roadmap is organized so that you can select your release train and see the features in that release. Find the feature name that you are searching for and click the URL in the "Where Documented" column to access the document containing that feature.
Many legacy features have been incorporated into the configuration files, and these features may not have entries in this roadmap. In addition, information in this roadmap supports other software releases or platforms. For the latest feature information and caveats, see the release notes for your platform and software release.
Feature and Release Support
Table 1 lists FHRP feature support for the following Cisco IOS software release trains:
•
Cisco IOS Releases 12.2T, 12.3, and 12.3T
Use Cisco Feature Navigator to find information about platform support and software image support. Cisco Feature Navigator enables you to determine which Cisco IOS, Catalyst OS, and Cisco IOS XE software images support a specific software release, feature set, or platform. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.
Note
Table 1 lists only the Cisco IOS software release that introduced support for a given feature in a given Cisco IOS software release train. Unless noted otherwise, subsequent releases of that Cisco IOS software release train also support that feature.
Table 1 lists the most recent release of each software train first and the features in alphabetical order within the release.
Table 1 Supported FHRP Features
Release Feature Name Feature Description Where Documented Cisco IOS Release 15.0S15.0(1)S
FHRP—Enhanced Object Tracking of IP SLAs Operations
The FHRP—Enhanced Object Tracking of IP SLAs Operations feature enables FHRPs and other EOT clients to track the output from IP SLAs objects and use the provided information to trigger an action.
FHRP—HSRP Group Shutdown
The FHRP—HSRP Group Shutdown feature enables you to configure an HSRP group to become disabled (its state changed to Init) instead of having its priority decremented when a tracked object goes down.
FHRP—Object Tracking List
This feature enhances the tracking capabilities to enable the configuration of a combination of tracked objects in a list, and a flexible method of combining objects using Boolean logic.
Gateway Load Balancing Protocol
GLBP protects data traffic from a failed router or circuit, like HSRP and VRRP, while allowing packet load sharing between a group of redundant routers.
HSRP—Hot Standby Router Protocol
HSRP is a First Hop Redundancy Protocol (FHRP) designed to allow for transparent fail-over of the first-hop IP router.
HSRP—ISSU
The HSRP—ISSU feature enables support for ISSU in HSRP.
The ISSU process allows Cisco IOS software to be updated or otherwise modified while packet forwarding continues.
HSRP MD5 Authentication
The HSRP MD5 Authentication feature is an enhancement to generate an MD5 digest for the HSRP portion of the multicast HSRP protocol packet. This feature provides added security and protects against the threat from HSRP-spoofing software.
HSRP Multiple Group Optimization
HSRP Multiple Group Optimization improves the negotiation and maintenance of multiple HSRP groups configured on a subinterface. Only one HSRP group is required on a physical interface for the purposes of electing active and standby routers. This group is known as the master group. Other HSRP groups may be created on each subinterface and linked to the master group via the group name. These linked HSRP groups are known as client or follow groups.
HSRP Support for ICMP Redirects
The HSRP Support for ICMP Redirects feature enables ICMP redirection on interfaces configured with HSRP.
HSRP Support for MPLS VPNs
HSRP support for a Multiprotocol Label Switching (MPLS) Virtual Private Network (VPN) interface is useful when an Ethernet LAN is connected between two provider edge (PE) routers with either of the following conditions:
HSRP Version 2
The HSRP Version 2 feature was introduced to prepare for further enhancements and to expand the capabilities beyond what is possible with HSRP version 1. HSRP version 2 has a different packet format than HSRP version 1.
SSO—GLBP
GLBP is now SSO aware. GLBP can detect when a router is failing over to the secondary RP and continue in its current GLBP group state.
SSO—HSRP
SSO HSRP alters the behavior of HSRP when a router with redundant Route Processors (RPs) is configured for Stateful Switchover (SSO). When an RP is active and the other RP is standby, SSO enables the standby RP to take over if the active RP fails.
Virtual Router Redundancy Protocol
VRRP enables a group of routers to form a single virtual router to provide redundancy. The LAN clients can then be configured with the virtual router as their default gateway. The virtual router, representing a group of routers, is also known as a VRRP group.
Cisco IOS Release 12.2S12.2(25)S
Enhanced Tracking Support
The Enhanced Tracking Support feature separates the tracking mechanism from HSRP and creates a separate standalone tracking process that can be used by other Cisco IOS processes as well as HSRP. This feature allows tracking of other objects in addition to the interface line-protocol state.
FHRP—Enhanced Object Tracking of IP SLAs Operations
This feature enables FHRPs and other Enhanced Object Tracking (EOT) clients to track the output from IP SLAs objects and use the provided information to trigger an action.
HSRP MD5 Authentication
The HSRP MD5 Authentication feature is an enhancement to generate an MD5 digest for the HSRP portion of the multicast HSRP protocol packet. This feature provides added security and protects against the threat from HSRP-spoofing software.
HSRP Version 2
The HSRP Version 2 feature was introduced to prepare for further enhancements and to expand the capabilities beyond what is possible with HSRP version 1. HSRP version 2 has a different packet format than HSRP version 1.
SSO—HSRP
SSO HSRP alters the behavior of HSRP when a router with redundant Route Processors (RPs) is configured for Stateful Switchover (SSO). When an RP is active and the other RP is standby, SSO enables the standby RP to take over if the active RP fails.
12.2(18)S
GLBP MD5 Authentication
MD5 authentication provides greater security than the alternative plain text authentication scheme.
12.2(14)S
Gateway Load Balancing Protocol
The Gateway Load Balancing Protocol (GLBP) protects data traffic from a failed router or circuit, like Hot Standby Router Protocol (HSRP) and Virtual Router Redundancy Protocol (VRRP), while allowing packet load sharing between a group of redundant routers.
HSRP - Hot Standby Router Protocol and IPSec
HSRP is configurable on LAN interfaces using standby command-line interface (CLI) commands. It is possible to use the standby IP address from an interface as the local IPsec identity, or local tunnel endpoint.
Virtual Router Redundancy Protocol
VRRP enables a group of routers to form a single virtual router to provide redundancy. The LAN clients can then be configured with the virtual router as their default gateway. The virtual router, representing a group of routers, is also known as a VRRP group.
Cisco IOS Release 12.2SB12.2(31)SB2
FHRP—Object Tracking List
This feature enhances the tracking capabilities to enable the configuration of a combination of tracked objects in a list, and a flexible method of combining objects using Boolean logic.
ISSU—GLBP
GLBP supports In Service Software Upgrade (ISSU). ISSU allows a high-availability (HA) system to run in SSO mode even when different versions of Cisco IOS software are running on the active and standby RPs or line cards.
SSO—GLBP
GLBP is now SSO aware. GLBP can detect when a router is failing over to the secondary RP and continue in its current GLBP group state.
12.2(28)SB
Enhanced Tracking Support
The Enhanced Tracking Support feature separates the tracking mechanism from HSRP and creates a separate standalone tracking process that can be used by other Cisco IOS processes as well as HSRP. This feature allows tracking of other objects in addition to the interface line-protocol state.
HSRP Support for MPLS VPNs
HSRP support for a Multiprotocol Label Switching (MPLS) Virtual Private Network (VPN) interface is useful when an Ethernet LAN is connected between two provider edge (PE) routers with either of the following conditions:
Cisco IOS Release 12.2SR12.2(33)SRE
FHRP—EOT Deprecation of rtr Keyword
This feature replaces the track rtr command with the track ip sla command.
12.2(33)SRC
FHRP—HSRP Group Shutdown
The FHRP—HSRP Group Shutdown feature enables you to configure an HSRP group to become disabled (its state changed to Init) instead of having its priority decremented when a tracked object goes down.
ICMP Router Discovery Protocol
The ICMP Router Discovery Protocol (IRDP) allows IPv4 hosts to locate routers that provide IPv4 connectivity to other (non-local) IP networks.
ISSU—VRRP
VRRP supports In Service Software Upgrade (ISSU). ISSU allows a high-availability (HA) system to run in Stateful Switchover (SSO) mode even when different versions of Cisco IOS software are running on the active and standby Route Processors (RPs) or line cards.
SSO—VRRP
VRRP is now SSO aware. VRRP can detect when a router is failing over to the secondary RP and continue in its current VRRP group state.
12.2(33)
SRB1ISSU—GLBP
GLBP supports In Service Software Upgrade (ISSU). ISSU allows a high-availability (HA) system to run in SSO mode even when different versions of Cisco IOS software are running on the active and standby RPs or line cards.
HSRP—ISSU
The HSRP—ISSU feature enables support for ISSU in HSRP.
The ISSU process allows Cisco IOS software to be updated or otherwise modified while packet forwarding continues.
12.2(33)SRB
FHRP—HSRP Multiple Group Optimization
HSRP Multiple Group Optimization improves the negotiation and maintenance of multiple HSRP groups configured on a subinterface. Only one HSRP group is required on a physical interface for the purposes of electing active and standby routers. This group is known as the master group. Other HSRP groups may be created on each subinterface and linked to the master group via the group name. These linked HSRP groups are known as client or follow groups.
FHRP—HSRP Support for IPv6
Support for IPv6 was added.
For more information, see the "Configuring First Hop Redundancy Protocols" section of the Cisco IOS IPv6 Configuration Guide, Release 12.4T.
FHRP—Integration of Embedded Event Manager with Enhanced Object Tracking
EOT is now integrated with Embedded Event Manager (EEM) to allow EEM to report on a status change of a tracked object and to allow EOT to track EEM objects.
SSO—GLBP
GLBP is now SSO aware. GLBP can detect when a router is failing over to the secondary RP and continue in its current GLBP group state.
12.2(33)SRA
Enhanced Tracking Support
The Enhanced Tracking Support feature separates the tracking mechanism from HSRP and creates a separate standalone tracking process that can be used by other Cisco IOS processes as well as HSRP. This feature allows tracking of other objects in addition to the interface line-protocol state.
FHRP—Enhanced Object Tracking of IP SLAs Operations
This feature enables FHRPs and other EOT clients to track the output from IP SLAs objects and use the provided information to trigger an action.
FHRP—Object Tracking List
This feature enhances the tracking capabilities to enable the configuration of a combination of tracked objects in a list, and a flexible method of combining objects using Boolean logic.
HSRP MD5 Authentication
The HSRP MD5 Authentication feature is an enhancement to generate an MD5 digest for the HSRP portion of the multicast HSRP protocol packet. This feature provides added security and protects against the threat from HSRP-spoofing software.
SSO—HSRP
SSO HSRP alters the behavior of HSRP when a router with redundant RPs is configured for SSO. When an RP is active and the other RP is standby, SSO enables the standby RP to take over if the active RP fails.
Cisco IOS Release 12.2SX12.2(33)SXI4
HSRP Global IPv6 Addresses
The HSRP is an FHRP designed to allow for transparent failover of the first-hop IPv6 router.
12.2(33)SXI1
FHRP—EOT Deprecation of rtr Keyword
This feature replaces the track rtr command with the track ip sla command.
12.2(33)SXI
FHRP—HSRP Group Shutdown
The FHRP—HSRP Group Shutdown feature enables you to configure an HSRP group to become disabled (its state changed to Init) instead of having its priority decremented when a tracked object goes down.
FHRP—HSRP Support for IPv6
Support for IPv6 was added.
For more information, see the "Configuring First Hop Redundancy Protocols" section of the Cisco IOS IPv6 Configuration Guide, Release 12.4T.
GLBP Client Cache
The GLBP client cache contains information about network hosts that are using a GLBP group as the default gateway. The GLBP client cache stores the MAC address of each host that is using a particular GLBP group, the number of the GLBP forwarder that each network host has been assigned to and the total number of network hosts currently assigned to each forwarder in a GLBP group. The GLBP client cache also stores the protocol address used by each network host and the time elapsed since the host-to-forwarder assignment was last updated.
HSRP Multiple Group Optimization
HSRP Multiple Group Optimization improves the negotiation and maintenance of multiple HSRP groups configured on a subinterface. Only one HSRP group is required on a physical interface for the purposes of electing active and standby routers. This group is known as the master group. Other HSRP groups may be created on each subinterface and linked to the master group via the group name. These linked HSRP groups are known as client or follow groups.
HSRP Gratuitous ARP
The HSRP Gratuitous ARP feature configures HSRP to check that the entries in the ARP cache are correct and to send periodic gratuitous ARP packets from one or more HSRP active groups.
SSO—VRRP
VRRP is now SSO aware. VRRP can detect when a router is failing over to the secondary RP and continue in its current VRRP group state.
12.2(33)SXH
Enhanced Tracking Support
The Enhanced Tracking Support feature separates the tracking mechanism from HSRP and creates a separate standalone tracking process that can be used by other Cisco IOS processes as well as HSRP. This feature allows tracking of other objects in addition to the interface line-protocol state.
FHRP—Enhanced Object Tracking of IP SLAs Operations
This feature enables FHRPs and other EOT clients to track the output from IP SLAs objects and use the provided information to trigger an action.
FHRP—Object Tracking List
This feature enhances the tracking capabilities to enable the configuration of a combination of tracked objects in a list, and a flexible method of combining objects using Boolean logic.
GLBP MD5 Authentication
MD5 authentication provides greater security than the alternative plain text authentication scheme.
HSRP MD5 Authentication
The HSRP MD5 Authentication feature is an enhancement to generate an MD5 digest for the HSRP portion of the multicast HSRP protocol packet. This feature provides added security and protects against the threat from HSRP-spoofing software.
SSO—GLBP
GLBP is now SSO aware. GLBP can detect when a router is failing over to the secondary RP and continue in its current GLBP group state.
SSO—HSRP
SSO HSRP alters the behavior of HSRP when a router with redundant Route Processors (RPs) is configured for Stateful Switchover (SSO). When an RP is active and the other RP is standby, SSO enables the standby RP to take over if the active RP fails.
Cisco IOS Releases 12.2T, 12.3, and 12.3T12.3(14)T
FHRP—VRRP Enhancements
The FHRP—VRRP Enhancements feature adds support for the following capabilities:
•
MD5 Authentication—Added to routers that are configured for VRRP, similar to HSRP, to provide a method of authenticating peers using a more simple method than the method in RFC 2338.
•
Bridged Virtual Interface (BVI)—Added the capability to configure VRRP on BVIs. This functionality is similar to the existing HSRP support for BVIs.
12.3(11)T
VRRP MIB—RFC 2787
This feature enables an enhancement to the MIB for use with SNMP-based network management. The feature adds support for configuring, monitoring, and controlling routers that use VRRP.
12.3(8)T
FHRP—Object Tracking List
This feature enhances the tracking capabilities to enable the configuration of a combination of tracked objects in a list, and a flexible method of combining objects using Boolean logic.
12.3(4)T
FHRP—Enhanced Object Tracking of IP SLAs Operations
This feature enables FHRPs and other EOT clients to track the output from IP SLAs objects and use the provided information to trigger an action.
HSRP Version 2
The HSRP Version 2 feature was introduced to prepare for further enhancements and to expand the capabilities beyond what is possible with HSRP version 1. HSRP version 2 has a different packet format than HSRP version 1.
12.3(2)T
GLBP MD5 Authentication
MD5 authentication provides greater security than the alternative plain text authentication scheme.
HSRP MD5 Authentication
The HSRP MD5 Authentication feature is an enhancement to generate an MD5 digest for the HSRP portion of the multicast HSRP protocol packet. This feature provides added security and protects against the threat from HSRP-spoofing software.
VRRP Object Tracking
VRRP object tracking extends the capabilities of the VRRP to allow tracking of specific objects within the router that can alter the priority level of a virtual router for a VRRP group.
12.2(15)T
Enhanced Tracking Support
The Enhanced Tracking support feature separates the tracking mechanism from HSRP and creates a separate standalone tracking process that can be used by other Cisco IOS processes as well as HSRP. This feature allows tracking of other objects in addition to the interface line-protocol state.
Gateway Load Balancing Protocol
GLBP protects data traffic from a failed router or circuit, like HSRP and VRRP, while allowing packet load sharing between a group of redundant routers.
12.2(13)T
Virtual Router Redundancy Protocol
VRRP enables a group of routers to form a single virtual router to provide redundancy. The LAN clients can then be configured with the virtual router as their default gateway. The virtual router, representing a group of routers, is also known as a VRRP group.
12.2(11)T
HSRP - Hot Standby Router Protocol and IPSec
HSRP is configurable on LAN interfaces using standby command-line interface (CLI) commands. It is possible to use the standby IP address from an interface as the local IPsec identity, or local tunnel endpoint.
12.2(8)T
HSRP Support for MPLS VPNs
HSRP support for a Multiprotocol Label Switching (MPLS) Virtual Private Network (VPN) interface is useful when an Ethernet LAN is connected between two provider edge (PE) routers with either of the following conditions:
Cisco IOS Release 12.4T12.4(20)T
FHRP—EOT Deprecation of rtr Keyword
This feature replaces the track rtr command with the track ip sla command.
12.4(15)T
GLBP Client Cache
The GLBP client cache contains information about network hosts that are using a GLBP group as the default gateway. The GLBP client cache stores the MAC address of each host that is using a particular GLBP group, the number of the GLBP forwarder that each network host has been assigned to and the total number of network hosts currently assigned to each forwarder in a GLBP group. The GLBP client cache also stores the protocol address used by each network host and the time elapsed since the host-to-forwarder assignment was last updated.
12.4(11)T
FHRP—HSRP BFD Peering
The HSRP BFD Peering feature introduces Bidirectional Forwarding Detection (BFD) in the HSRP group member health monitoring system. Previously, group member monitoring relied exclusively on HSRP multicast messages, which are relatively large and consume CPU memory to produce and check. In architectures where a single interface hosts a large number of groups, there is a need for a protocol with low CPU memory consumption and processing overhead. BFD addresses this issue and offers sub-second health monitoring (failure detection in milliseconds) at a relatively low CPU impact.
FHRP—Enhanced Object Tracking Support for Mobile IP
The FHRP—Enhanced Object Tracking Support for Mobile IP feature provides new tracking objects needed by mobile wireless applications to track the presence of Home Agent, Gateway GPRS Support Node (GGSN), or Packet Data Serving Node (PDSN) traffic on a router.
12.4(9)T
EOT Support for Carrier Delay
The EOT Support for Carrier Delay feature enables EOT to consider the carrier-delay timer when tracking the status of an interface.
FHRP—HSRP Group Shutdown
The FHRP—HSRP Group Shutdown feature enables you to configure an HSRP group to become disabled (its state changed to Init) instead of having its priority decremented when a tracked object goes down.
12.4(6)T
HSRP Multiple Group Optimization
HSRP Multiple Group Optimization improves the negotiation and maintenance of multiple HSRP groups configured on a subinterface. Only one HSRP group is required on a physical interface for the purposes of electing active and standby routers. This group is known as the master group. Other HSRP groups may be created on each subinterface and linked to the master group via the group name. These linked HSRP groups are known as client or follow groups.
12.4(2)T
FHRP—Enhanced Object Tracking Integration with Embedded Event Manager
EOT is now integrated with EEM to allow EEM to report on a status change of a tracked object and to allow EOT to track EEM objects.
Cisco IOS XE 3.1.0SGCisco IOS XE 3.1.0SG
Enhanced Tracking Support
The Enhanced Tracking Support feature separates the tracking mechanism from HSRP and creates a separate standalone tracking process that can be used by other Cisco IOS processes as well as by HSRP. This feature allows tracking of other objects in addition to the interface line-protocol state.
FHRP—Object Tracking List
This feature enhances the tracking capabilities to enable the configuration of a combination of tracked objects in a list, and a flexible method of combining objects using Boolean logic.
Gateway Load Balancing Protocol
GLBP protects data traffic from a failed router or circuit, like HSRP and VRRP, while allowing packet load sharing between a group of redundant routers.
GLBP MD5 Authentication
MD5 authentication provides greater security than the alternative plain text authentication scheme.
HSRP—ISSU
The HSRP—ISSU feature enables support for ISSU in HSRP.
The ISSU process allows Cisco IOS software to be updated or otherwise modified while packet forwarding continues.
HSRP MD5 Authentication
The HSRP MD5 Authentication feature is an enhancement to generate an MD5 digest for the HSRP portion of the multicast HSRP protocol packet. This feature provides added security and protects against the threat from HSRP-spoofing software.
HSRP Version 2
The HSRP Version 2 feature was introduced to prepare for further enhancements and to expand the capabilities beyond what is possible with HSRP version 1. HSRP version 2 has a different packet format than HSRP version 1.
SSO—HSRP
SSO HSRP alters the behavior of HSRP when a router with redundant Route Processors (RPs) is configured for Stateful Switchover (SSO). When an RP is active and the other RP is standby, SSO enables the standby RP to take over if the active RP fails.
Virtual Router Redundancy Protocol
VRRP enables a group of routers to form a single virtual router to provide redundancy. The LAN clients can then be configured with the virtual router as their default gateway. The virtual router, representing a group of routers, is also known as a VRRP group.
Other Cisco IOS Releases12.1(3)T
HSRP Support for ICMP Redirects
The HSRP support for ICMP Redirects feature enables ICMP redirection on interfaces configured with HSRP.
12.2(27)SBC
FHRP—Enhanced Object Tracking of IP SLAs Operations
The FHRP—Enhanced Object Tracking of IP SLAs Operations feature enables FHRPs and other EOT clients to track the output from IP SLAs objects and use the provided information to trigger an action.
12.2(31)SGA
HSRP—ISSU
The HSRP—ISSU feature enables support for ISSU in HSRP.
The ISSU process allows Cisco IOS software to be updated or otherwise modified while packet forwarding continues.
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1005R)
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.
© 2005-2010 Cisco Systems, Inc. All rights reserved.
