IP Addresses and Services Configuration Guide for Cisco 8000 Series Routers, IOS XR Releases

PDF

IP Addresses and Services Configuration Guide for Cisco 8000 Series Routers, IOS XR Releases

HSRP over physical and bundle interfaces

Updated: August 12, 2026

Want to summarize with AI?

This topic describes HSRP support for IPv4 and IPv6 networks on physical interfaces, physical sub-interfaces, bundle interfaces, and bundle sub-interfaces, including supported scale and topology.

Starting Cisco IOS XR Release 24.2.11, HSRP is supported on Physical interfaces, Physical sub-interfaces, Bundle interfaces, and Bundle sub-interfaces on the Cisco Silicon One P100 and Cisco Silicon One Q200 ASIC-based systems.

You can configure up to:

510 HSRP groups (IPv4 and IPv6 combined) on the Cisco Silicon One Q200 ASIC-based and Cisco Silicon One P100 ASIC-based systems.

HSRP sessions run on top of interfaces of the multiple routers which are in the same home network.

Table 1. Feature History Table
Feature Name	Release Information	Feature Description
HSRP over Physical interfaces and Bundle interfaces	Release 25.4.1	Introduced in this release on: Fixed Systems (8010 [ASIC: A100])(select variants only*) This feature is supported on: 8011-32Y8L2H2FH 8011-12G12X4Y-A/D
HSRP over Physical interfaces and Bundle interfaces	Release 25.1.1	Introduced in this release on: Fixed Systems (8700 [ASIC: K100], 8010 [ASIC: A100])(select variants only*) This feature is supported on: 8712-MOD-M 8011-4G24Y4H-I
HSRP over Physical interfaces and Bundle interfaces	Release 24.4.1	Introduced in this release on: Fixed Systems (8200 [ASIC: P100], 8700 [ASIC: P100])(select variants only); Modular Systems (8800 [LC ASIC: P100])(select variants only) *This feature is supported on: 8212-48FH-M 8711-32FH-M 88-LC1-36EH 88-LC1-12TH24FH-E 88-LC1-52Y8H-EM
HSRP over Physical interfaces and Bundle interfaces	Release 24.2.11	This feature provides first-hop redundancy and enables failover to a standby interface within a group of physical or bundle interfaces or sub-interfaces in a network in the event of any failure in the active interface or sub-interface in that group. The feature allows you to configure HSRP for IPv4 and IPv6 networks on the physical and bundle interfaces and sub-interfaces.

Topology

This topology provides the HSRP implementation over a Bundle sub-interface on a network segment.

HSRP Topology and underlying network elements:

Interface Bundle-Ether500.1: This is the Bundle sub-interface which is configured on the active router (IP Address: 61.101.1.1) and the standby router (IP Address: 61.101.1.2).
HSRP Router Group: The HSRP router group consists of two or more routers configured with HSRP. This group provides backup services to the standby router (Router B) in the event of the active router (Router A) failure. The virtual IP address of the HSRP router group in this topology is 61.101.1.3.
Router A: Router A is the active router on which the Bundle sub-interface Bundle-Ether500.1 is configured. This router receives and routes packets destined for the MAC address of the group. This router is known as the IP address owner of the HSRP router group.
Router B: When the designated active router fails, HSRP detects it and selects another router with the highest priority in the HSRP router group as the standby router. This standby router with the Bundle sub-interface Bundle-Ether500.1 configuration takes over the job of Router A and assumes control of the MAC and IP Addresses of the HSRP router group.
Client 1 and Client 2: These are source hosts from which traffic is forwarded through the active router or standby router to the destination hosts.

Guidelines for HSRP configuration

Consider these usage guidelines when you configure HSRP:

Group ID value must be within the 0-255 range. However, RFC indicates 0-4095 as the id range.
For a higher scale of HSRP IPv6 group sessions, set the LPTS default UDP entry policer rate to 3000 or higher if you see LPTS drops when running the show lpts pifib hardware police location 0/0/CPU0 command. For information about this configuration, see the Usage Guidelines section in the lpts pifib hardware police command.
When setting up HSRP for both IPv4 and IPv6 groups with more than 510 sessions, or when using aggressive timer intervals below 1 second, it is crucial to adjust the LPTS flow parameters accordingly. Specifically, increase the LPTS policer rate to a minimum of 3000 pps. This ensures optimal performance and avoids any LPTS drops for HSRP traffic to maintain network stability and efficiency. For detailed instructions on configuring these settings, refer to the Usage Guidelines section within the lpts pifib hardware police command documentation.

Configure HSRP for IPv4 networks on physical and bundle interfaces

The hsrp ipv4 command activates HSRP on the configured interface. If an IP address is specified, that address is used as the designated address for the Hot Standby group. If no IP address is specified, the virtual address is learned from the active router. For HSRP to elect a designated router, at least one router in the Hot Standby group must have been configured with, or learned, the designated address. Configuring the designated address on the active router always overrides a designated address that is currently in use.

Perform the following configuration on both the active router and the standby router. On each router, first configure the main bundle interface (Bundle-Ether500 ) and add the member links to Bundle-Ether500 .

Procedure

On the active router, enter the interface configuration mode and configure an IPv4 address for the interface.

Example:

Router(config)# interface Bundle-Ether500.1
Router(config-if)# ipv4 address 61.101.1.1/24
Router(config-if)# encapsulation dot1q 1
Router(config-if)# no shut
Router(config-if)# commit
Router(config-if)# exit

Enter the HSRP configuration mode, add the configured interface, and configure HSRP for IPv4.

Example:

Router(config)# router hsrp
Router(config-hsrp)# interface Bundle-Ether500.1
Router(config-hsrp-if)# address-family ipv4 hsrp version 2
Router(config-hsrp-virtual-router)# address 61.101.1.3

Set a priority for the virtual router.

Example:

Router(config-hsrp-virtual-Router)# priority 100

Configure a preempt delay value that controls the selection of the IP address owner virtual router, and commit the configuration.
Example:
```
Router(config-hsrp-virtual-Router)# preempt delay 30
Router(config-hsrp-virtual-Router)# commit
```

On the standby router, repeat the preceding steps by using an IPv4 address that is unique to the standby router but sharing the same HSRP virtual address.

Example:

Router(config)# interface Bundle-Ether500.1
Router(config-if)# ipv4 address 61.101.1.2/24
Router(config-if)# encapsulation dot1q 1
Router(config-if)# no shut
Router(config-if)# commit
Router(config-if)# exit
Router(config)# router hsrp
Router(config-hsrp)# interface Bundle-Ether500.1
Router(config-hsrp-if)# address-family ipv4 hsrp version 2
Router(config-hsrp-virtual-router)# address 61.101.1.3
Router(config-hsrp-virtual-Router)# priority 100
Router(config-hsrp-virtual-Router)# preempt delay 30
Router(config-hsrp-virtual-Router)# commit

Verify the interface configuration on the active router by using the show run interface command.

Example:

Router(config-hsrp-virtual-router)# do show run interface Bundle-Ether500.1
interface Bundle-Ether500.1
 ipv4 address 61.101.1.1/24
 encapsulation dot1q 1
!

Verify the HSRP configuration by using the show running-configuration router hsrp command.

Example:

Router(config)# show running-configuration router hsrp
 router hsrp
interface Bundle-Ether500.1
  address-family ipv4
   encapsulation dot1q
    hsrp 1 version 2
     preempt
     priority 100
     address 61.101.1.3
   !
  !

Verify HSRP operation by using the show hsrp detail command.

Example:

Router# show hsrp detail
Bundle-Ether500.1 - IPv4 Group 1 (version 1)
  Local state is Active, priority 100, may preempt
  Hellotime 3000 msec holdtime 10000 msec
  Next hello sent in 2.373
  Minimum delay 1 sec, reload delay 5 sec
  Hot standby IP address is 61.101.1.3 configured
  Active router is local
  Standby router is 61.101.1.2 expires in 00:00:08
  Standby virtual mac address is 0000.0c07.ac01, state is active
    15 state changes, last state change 00:01:17
    State change history:
    Feb 16 04:56:48.724 UTC  Listen   -> Active   Lower priority active received
    Feb 16 05:00:29.439 UTC  Active   -> Init     Interface Down update
    Feb 17 05:27:13.516 UTC  Init     -> Listen   Delay timer expired
    Feb 17 05:27:14.643 UTC  Listen   -> Active   Lower priority active received
    Feb 17 05:53:53.500 UTC  Active   -> Init     Interface Down update
    Feb 17 05:58:49.641 UTC  Init     -> Listen   Delay timer expired
    Feb 17 05:58:51.031 UTC  Listen   -> Active   Lower priority active received
    Feb 17 06:25:20.589 UTC  Active   -> Init     Interface Down update
    Feb 17 06:31:13.783 UTC  Init     -> Listen   Delay timer expired
    Feb 17 06:31:14.954 UTC  Listen   -> Active   Lower priority active received
 Last coup sent:       Feb 17 06:31:14.954 UTC
 Last coup received:   Never

You have successfully configured and verified HSRP for IPv4 networks on the active and standby routers.

Configure HSRP for IPv6 networks on physical and bundle interfaces

Note

The virtual linklocal address must not match any other virtual linklocal address that is already configured for a different group.

The virtual linklocal address must not match the interface linklocal IPv6 address.

If you use the autoconfig keyword, the linklocal address is calculated using the EUI-64 format.

Use the legacy-compatible keyword to be compatible with Cisco IOS and other legacy Cisco devices.

If you configure HSRP for IPv6, you must configure a linklocal IPv6 address or enable it using the autoconfig keyword. If you do not configure a linklocal IPv6 address, the router does not accept the configuration when you commit your changes.

Procedure

On the active router, enter the interface configuration mode and configure an IPv6 address for the interface.

Example:

Router(config)# interface Bundle-Ether500.1
Router(config-if)# ipv6 address 61:101:1:1::1:1/64
Router(config-if)# encapsulation dot1q 1
Router(config-if)# no shut
Router(config-if)# commit
Router(config-if)# exit

Enter the HSRP configuration mode, add the configured interface, and configure HSRP for IPv6 by assigning a global IPv6 address and a linklocal address.

Example:

Router(config)# router hsrp
Router(config-hsrp)# interface Bundle-Ether500.1
Router(config-hsrp-if)# address-family ipv6 hsrp version 2
Router(config-hsrp-virtual-Router)# address global 61:101:1:1::1:3
Router(config-hsrp-virtual-Router)# address linklocal autoconfig

Set a priority for the virtual router.

Example:

Router(config-hsrp-virtual-Router)# priority 100

Configure a preempt delay value that controls the selection of the IP address owner virtual router, and commit the configuration.
Example:
```
Router(config-hsrp-virtual-Router)# preempt delay 30
Router(config-hsrp-virtual-Router)# commit
```

On the standby router, repeat the preceding steps by using an IPv6 address that is unique to the standby router but sharing the same HSRP virtual address.

Example:

Router(config)# interface Bundle-Ether500.1
Router(config-if)# ipv6 address 61:101:1:1::1:2/64
Router(config-if)# encapsulation dot1q 1
Router(config-if)# no shut
Router(config-if)# commit
Router(config-if)# exit
Router(config)# router hsrp
Router(config-hsrp)# interface Bundle-Ether500.1
Router(config-hsrp-if)# address-family ipv6 hsrp version 2
Router(config-hsrp-virtual-Router)# address global 61:101:1:1::1:3
Router(config-hsrp-virtual-Router)# address linklocal autoconfig
Router(config-hsrp-virtual-Router)# priority 100
Router(config-hsrp-virtual-Router)# preempt delay 30
Router(config-hsrp-virtual-Router)# commit

Verify the interface configuration on the active router by using the show run interface command.

Example:

Router(config-hsrp-virtual-router)# do show run interface Bundle-Ether500.1
interface Bundle-Ether500.1
 ipv6 address 61:101:1:1::1:1/64
 encapsulation dot1q 1
!

Verify the HSRP configuration by using the show running-configuration router hsrp command.

Example:

Router(config)# show running-configuration router hsrp
 router hsrp
interface Bundle-Ether500.1
  address-family ipv6
   encapsulation dot1q
    hsrp 1 version 2
     preempt
     priority 100
     address 61:101:1:1::1:3
   !
  !

Verify HSRP operation by using the show hsrp detail command.

Example:

Router# show hsrp detail
Bundle-Ether500.1 - IPv6 Group 1 (version 2)
  Local state is Active, priority 100, may preempt
  Hellotime 3000 msec holdtime 10000 msec
  Next hello sent in 0.132
  Minimum delay 1 sec, reload delay 5 sec
  Hot standby IP address is 61:101:1:1::1:3 configured
  Active router is local
  Standby router is 61:101:1:1::1:2 expires in 00:00:08
  Standby virtual mac address is 0005.73a0.0001, state is active
    15 state changes, last state change 00:01:17
    State change history:
    Feb 16 04:56:50.094 UTC  Listen   -> Active   Lower priority active received
    Feb 16 05:00:29.464 UTC  Active   -> Init     Interface Down update
    Feb 17 05:27:13.530 UTC  Init     -> Listen   Delay timer expired
    Feb 17 05:27:13.897 UTC  Listen   -> Active   Lower priority active received
    Feb 17 05:53:53.520 UTC  Active   -> Init     Interface Down update
    Feb 17 05:58:49.616 UTC  Init     -> Listen   Delay timer expired
    Feb 17 05:58:52.112 UTC  Listen   -> Active   Lower priority active received
    Feb 17 06:25:20.614 UTC  Active   -> Init     Interface Down update
    Feb 17 06:31:13.902 UTC  Init     -> Listen   Delay timer expired
    Feb 17 06:31:14.985 UTC  Listen   -> Active   Lower priority active received
Last coup sent:       Feb 17 06:31:14.985 UTC
Last coup received:   Never
Last resign sent:     Feb 17 06:25:20.614 UTC
Last resign received: Never

You have successfully configured and verified HSRP for IPv6 networks on the active and standby routers.

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.