12 hands-on HSRP scenarios you build in your own Cisco Modeling Labs instance and grade against the answer key. HSRP configuration and troubleshooting practice for CCNA and CCNP.
Included with a subscription
Bring together core campus redundancy skills in one focused day: elect a deterministic STP root on the intended distribution switch, form a working LACP EtherChannel between distribution and access, harden edge with PortFast/BPDU Guard, and stand up an HSRP virtual gateway that the VLAN 10 users actually use. The starter is intentionally mis-tuned across layers so you must build or repair it end-to-end.
Daily CCNA campus-redundancy lab focusing on HSRP preemption and interface tracking. You will refine an already-working HSRP default gateway so it follows real network health: fail to the standby when the preferred router loses its upstream, and preempt back when it recovers. The topology is an enterprise-clean small site with two distribution routers sharing a user VLAN through a Layer-2 access switch, each with its own point-to-point uplink to a core router. The starter works in steady state but suffers a blackhole during uplink failures and never reclaims Active without preemption. Your job is to add preempt and tracking on the correct router/interface and verify end-to-end forwarding under failover and failback.
Stand up HSRP on two routers sharing a single user VLAN so campus hosts point to a resilient virtual default gateway. You will configure HSRP on both routers, make one router the active forwarder, and verify failover from the end hosts.
Intermediate CCNA lab focused on HSRP preempt behavior. Two routers share a virtual default gateway on a single user VLAN. The baseline already has HSRP group 1 with R1 at higher priority, but HSRP doesn't preempt by default — if R1 reboots, R2 stays active even after R1 returns. The learner enables preempt on R1 so it deterministically reclaims the active role whenever it's up, keeping the intended primary in control. Verification uses show standby on routers and basic host pings to the virtual gateway.
Set HSRP priority to deterministically choose the active default gateway on a shared LAN. Two IOS routers (R1, R2) and one access switch serve a small user LAN with a single virtual gateway IP. By default R2 becomes active due to its higher interface IP; raise R1’s HSRP priority so it becomes the designated active router for group 1 while hosts keep a single virtual gateway.
Troubleshoot and repair a pre-broken HSRP gateway on a single shared LAN. Two routers (R1, R2) and two clients (PC1, PC2) connect to a single L2 switch (SW1) in VLAN 10. The hosts intermittently lose gateway reachability because both routers act active due to seeded faults. Use show commands to diagnose, then correct HSRP so both routers share one virtual IP and R1 deterministically wins active.
Build a fault-tolerant default gateway on a single LAN using HSRP. Two routers share one virtual IP so a host keeps the same default route even if one router fails. You will configure basic HSRP group 1 with a shared VIP, verify active/standby roles, and confirm the host can ping the virtual gateway.
Free with an account
Implement HSRP with interface tracking so the virtual gateway fails over when the active router loses its upstream link. Two routers (R1, R2) share a user LAN via SW with a single virtual default gateway for the PC, and both uplink to a separate CORE switch. The learner adds HSRP group 1 with a virtual IP, priority/preempt on R1, and tracks R1's uplink to drive deterministic failover.
Harden an HSRP virtual default gateway with MD5 authentication so only trusted routers can participate. You’ll secure an existing HSRP group on two IOS routers that share a user VLAN via a single L2 switch. Validate the authentication state on both routers and confirm the endpoint still reaches the virtual IP.
Configure HSRP on two routers with a shared virtual gateway and speed up failover by tightening hello/hold timers to 1/3 seconds. Validate deterministic active/standby selection and confirm timer settings via show commands.
Migrate a single-subnet LAN from HSRP version 1 assumptions to HSRP version 2, enabling group numbers above 255. Configure HSRPv2 on two routers that share one virtual default gateway IP so hosts retain gateway resilience without reconfiguration.
Implement two HSRP groups on a single VLAN so each router is Active for one group and Standby for the other. Two hosts split default gateways across the two virtual IPs for deterministic load-sharing with redundancy.
Hot Standby Router Protocol is Cisco's answer to the single-default-gateway problem, and the FHRP you are most likely to meet on both the CCNA and a Cisco-shop production network. Two or more routers share a virtual IP and virtual MAC; one is active, the others wait; hosts point at the virtual address and never know which physical router is answering. It is a small protocol with a few settings that decide everything about how it behaves under failure.
These labs have you configure HSRP properly on real Cisco IOS rather than just far enough to see 'Active' in the output. You'll set the group and virtual IP, tune priority to control which router wins, enable preemption so the intended primary reclaims the role after a reboot, add interface tracking so a router that loses its uplink decrements its priority instead of black-holing traffic, and check timers. Verification is show standby and show standby brief, and the labs then make you fail the active router and prove hosts kept working. Grading checks the design as well as the syntax — a group where both routers claim the same priority, or where preemption is missing, will come up cleanly and behave wrongly.
Highest priority wins; if priorities are equal, the highest interface IP address breaks the tie. Because the default priority is the same on every router, an HSRP group that was never tuned elects effectively at random — which is the point of several of these labs.
Without it, a recovered higher-priority router stays standby indefinitely, so your carefully chosen primary is whichever router happened to boot first. Turn it on when you want a deterministic primary; leave it off if you would rather avoid a second failover event during recovery.
Yes, first-hop redundancy is a CCNA topic and HSRP is the implementation Cisco exams lead with. The deeper tracking and tuning scenarios extend into CCNP enterprise material.
Study the theory behind these labs — the concept explainer and step-by-step guides.
Looking for something else? Browse the full lab archive, narrow it to self-standing labs, or see today's daily lab.