9 hands-on HSRP scenarios you build in your own Cisco Modeling Labs instance and grade against the answer key. Focused HSRP configuration and troubleshooting practice for CCNA and CCNP.
Set HSRP priority to deterministically choose the active default gateway on a shared LAN. Two IOS routers (R1, R2) and one access switch serve a small user LAN with a single virtual gateway IP. By default R2 becomes active due to its higher interface IP; raise R1’s HSRP priority so it becomes the designated active router for group 1 while hosts keep a single virtual gateway.
Intermediate CCNA lab focused on HSRP preempt behavior. Two routers share a virtual default gateway on a single user VLAN. The baseline already has HSRP group 1 with R1 at higher priority, but HSRP doesn't preempt by default — if R1 reboots, R2 stays active even after R1 returns. The learner enables preempt on R1 so it deterministically reclaims the active role whenever it's up, keeping the intended primary in control. Verification uses show standby on routers and basic host pings to the virtual gateway.
Configure HSRP on two routers with a shared virtual gateway and speed up failover by tightening hello/hold timers to 1/3 seconds. Validate deterministic active/standby selection and confirm timer settings via show commands.
Implement HSRP with interface tracking so the virtual gateway fails over when the active router loses its upstream link. Two routers (R1, R2) share a user LAN via SW with a single virtual default gateway for the PC, and both uplink to a separate CORE switch. The learner adds HSRP group 1 with a virtual IP, priority/preempt on R1, and tracks R1's uplink to drive deterministic failover.
Troubleshoot and repair a pre-broken HSRP gateway on a single shared LAN. Two routers (R1, R2) and two clients (PC1, PC2) connect to a single L2 switch (SW1) in VLAN 10. The hosts intermittently lose gateway reachability because both routers act active due to seeded faults. Use show commands to diagnose, then correct HSRP so both routers share one virtual IP and R1 deterministically wins active.
Migrate a single-subnet LAN from HSRP version 1 assumptions to HSRP version 2, enabling group numbers above 255. Configure HSRPv2 on two routers that share one virtual default gateway IP so hosts retain gateway resilience without reconfiguration.
Build a fault-tolerant default gateway on a single LAN using HSRP. Two routers share one virtual IP so a host keeps the same default route even if one router fails. You will configure basic HSRP group 1 with a shared VIP, verify active/standby roles, and confirm the host can ping the virtual gateway.
Implement two HSRP groups on a single VLAN so each router is Active for one group and Standby for the other. Two hosts split default gateways across the two virtual IPs for deterministic load-sharing with redundancy.
Harden an HSRP virtual default gateway with MD5 authentication so only trusted routers can participate. You’ll secure an existing HSRP group on two IOS routers that share a user VLAN via a single L2 switch. Validate the authentication state on both routers and confirm the endpoint still reaches the virtual IP.
Study the theory behind these labs — the concept explainer and step-by-step guides.
Looking for something else? Browse the full lab archive or see today's daily lab.