CCNA: HSRP Preemption & Tracking — Fail Over and Back
Archive lab
Daily CCNA campus-redundancy lab focusing on HSRP preemption and interface tracking. You will refine an already-working HSRP default gateway so it follows real network health: fail to the standby when the preferred router loses its upstream, and preempt back when it recovers. The topology is an enterprise-clean small site with two distribution routers sharing a user VLAN through a Layer-2 access switch, each with its own point-to-point uplink to a core router. The starter works in steady state but suffers a blackhole during uplink failures and never reclaims Active without preemption. Your job is to add preempt and tracking on the correct router/interface and verify end-to-end forwarding under failover and failback.
Learning objectives
- Enable HSRP preemption on the intended Active router so it reclaims the gateway role after recovery.
- Attach interface tracking to the Active router’s upstream interface with a decrement large enough to lose the election when that link fails.
- Validate HSRP state transitions (Active/Standby, preemption enabled, track object applied) with show commands.
- Verify end-to-end reachability from the user host during steady state, failover, and failback.
- Practice operational testing: simulate an upstream failure and observe HSRP role changes and client reachability.
Troubleshooting focus
- If the client loses internet reachability during an uplink failure but HSRP still shows the preferred router Active, tracking is missing or applied to the wrong interface.
- If the preferred router recovers but stays Standby, preemption is missing or disabled.
- If pings fail even in steady state, verify the client’s default gateway is the HSRP virtual IP and both distribution routers have correct LAN IPs in the same VLAN.
- If SSH access to routers fails, confirm the VTY access-class permits the client subnet and that RSA keys exist.
Topology
Subscribe to preview this lab's topology.
See plansGrade your work
How this lab is graded
- Build it your way. Where a lab lets you choose a value — a VLAN name, an interface description — grading checks that you configured it, not which name you picked. Names that another line has to reference, like an ACL applied with
access-class, are stated in the guide and do have to match. - Addresses, modes and protocol keywords are exact. An IP address, a subnet mask,
switchport mode trunk, an encapsulation — these carry the meaning of the lab, so they are graded as written in the guide. - Grading reads your saved configuration. Export the lab from CML after you have configured it, and make sure anything you set is in the running-config — a change that only exists in a terminal session never reaches the grader.
- You can submit as many times as you like. Your best score stands, and each attempt tells you which checks passed so you can work the gaps.
- Scored something you believe is correct? Use Report an issue on this page — that is exactly how the grading fixes in the changelog got found.
Create a free account to submit your lab for grading.
Create a free accountFound a problem with this lab?
Please sign in to report a problem — tying it to your attempts lets us reproduce and fix it faster.