Match The Fhrp Protocols To The Appropriate Description.

Understanding First Hop Redundancy Protocols: A Guide to HSRP, VRRP, and GLBP

Network downtime is a critical concern for any organization, often stemming from a single point of failure at the default gateway. When a user's computer sends traffic to an external network, it forwards it to its configured default gateway—typically a router interface. If that router or its interface fails, all connected hosts lose external connectivity until the issue is manually resolved. First Hop Redundancy Protocols (FHRPs) are the elegant solution to this problem. They create a virtual router that appears to hosts on the local network, providing a continuous, available gateway even when physical routers fail. This article provides a detailed match of the primary FHRP protocols—HSRP, VRRP, and GLBP—to their core descriptions, operational mechanics, and ideal use cases, empowering you to design resilient network architectures.

The Core Concept: How FHRPs Work

Before matching protocols, understanding the shared foundation is essential. FHRPs operate by grouping two or more physical routers (or Layer 3 switches) into a redundancy group. This group presents a single, unified virtual IP address and often a virtual MAC address to the local network. Hosts use this virtual IP as their default gateway. Among the physical routers, one is elected as the active (or master) router, responsible for forwarding traffic destined for the virtual IP. The other routers remain in a standby (or backup) state, continuously monitoring the active router's health through periodic hello messages. If the active router fails, the standby router automatically assumes the active role, taking over the virtual IP and MAC address with minimal disruption—often in sub-second time. This seamless transition is transparent to end hosts, which continue sending traffic to the same virtual gateway address.

Protocol 1: Hot Standby Router Protocol (HSRP)

Description Match: HSRP is a Cisco-proprietary FHRP designed specifically for IPv4 networks. Its primary function is to provide a fault-tolerant default gateway for a local network segment by electing one router as active and another as standby, with all others in a listen state. HSRP's most defining characteristic is its use of a virtual MAC address in the format 0000.0C07.ACxx, where xx is the HSRP group number in hexadecimal.

Operational Details and Features:

• Election Process: The router with the highest HSRP priority (default 100, range 0-255) becomes the active router. If priorities are equal, the router with the highest IP address on the common interface wins.
• Hello and Hold Timers: HSRP routers exchange hello messages every 3 seconds by default. The hold timer (default 10 seconds) dictates how long a router waits without hearing a hello before declaring the active router down. These timers are configurable for faster convergence.
• State Machine: Routers progress through states: Initial, Learn, Listen, Speak, Standby, and Active.
• Version 2 (HSRPv2): Supports IPv6, uses a multicast address of 224.0.0.102 (vs. 224.0.0.2 for v1), and allows for up to 4096 groups (vs. 255).
• Key Limitation: Standard HSRP provides no load balancing. Only the active router forwards traffic; the standby remains idle until a failure. While multiple HSRP groups can be configured on the same interface to achieve a form of load sharing (with different virtual IPs), this requires manual host configuration per group.

Ideal Use Case: HSRP is the natural choice in all-Cisco environments where simplicity and guaranteed interoperability are paramount. It is perfect for providing basic gateway redundancy for a single VLAN or subnet where load balancing is not a requirement.

Protocol 2: Virtual Router Redundancy Protocol (VRRP)

Description Match: VRRP is an open standard protocol defined by IETF RFC 5797 (and earlier RFC 3768). It is the non-proprietary alternative to HSRP, designed for IPv4 and IPv6 networks. Its core function is identical: to provide a highly available default gateway. The virtual router in VRRP has a virtual IP address and a virtual MAC address in the format 0000.5E00.01xx, where xx is the VRRP group number in hexadecimal.

Operational Details and Features:

• Terminology: VRRP uses the terms Master Router (equivalent to HSRP's Active) and Backup Routers (equivalent to Standby). The election is based on the highest priority (0-255, default 100).
• Election and Advertisement: The Master router sends advertisements (hello messages) every 1 second by default. Backup routers with a higher priority will preempt the current Master by default, ensuring the most capable router is always active.
• IPv6 Support: VRRPv3 (for IPv4) and VRRPv2 (for IPv6) are separate implementations but share similar concepts. The virtual MAC for IPv6 is 0000.5E00.02xx.
• Key Advantage: As an open standard, VRRP ensures multi-vendor interoperability. A Cisco router, a Juniper router, and a Linux-based router can all participate in the same VRRP group.
• Limitation: Like HSRP, standard VRRP provides no inherent load balancing. Only the Master router forwards traffic for the virtual IP.

Ideal Use Case: VRRP is the protocol of choice in heterogeneous network environments with equipment from multiple vendors. It is also mandated in many government and educational contracts that require open standards. It provides robust, standard-based redundancy for both IPv4 and IPv6.

Protocol 3: Gateway Load Balancing Protocol (GLBP)

Description Match: GLBP is a Cisco-proprietary protocol that goes beyond simple redundancy. Its primary function is to provide both gateway redundancy and load balancing for outgoing traffic from a local network. Unlike HSRP and VRRP, where only one router is active, GLBP allows multiple routers to forward traffic simultaneously for the same virtual IP address.

Operational Details and Features:

• Roles: GLBP defines a Active Virtual Gateway (AVG) and one or more Active Virtual Forwarders (AVFs).
  • The AVG is elected (based on priority) and is responsible for owning the virtual IP address and assigning unique virtual MAC addresses to each AVF.
  • The AVFs are the routers that actually forward traffic. They use the virtual MACs assigned by the AVG.
• Load Balancing Algorithms: The AVG distributes traffic among AVFs using one of several algorithms:
  • Round-Robin: Distributes traffic equally in a cyclic order.