What is HSRP (Hot Standby Router Protocol)?
Learn what HSRP is, how Active/Standby gateway failover works, and how it compares to VRRP and GLBP — with interview Q&A.
Expected Interview Answer
HSRP (Hot Standby Router Protocol) is a Cisco-proprietary first-hop redundancy protocol that lets two or more routers share a single virtual IP and virtual MAC address, so hosts always point to one gateway address while the routers elect an Active router to actually forward traffic and a Standby router ready to take over instantly if it fails.
Hosts on a LAN are configured with one default gateway address, which is normally a single point of failure if that router goes down. HSRP solves this by grouping multiple routers into an HSRP group that shares a virtual IP and virtual MAC; the router with the highest priority becomes Active and forwards traffic sent to that virtual address, while others sit in Standby or Listen state. The routers exchange periodic hello messages, and if the Active router misses enough hellos (based on hold-time), the Standby router takes over the virtual IP and MAC almost instantly, so end hosts never need to change their gateway configuration or refresh ARP. HSRP is single-vendor (Cisco) and only actively forwards on one router at a time per group, unlike GLBP which load-balances across multiple routers. Preemption can be configured so a higher-priority router reclaims the Active role once it comes back online.
- Eliminates the default gateway as a single point of failure
- Hosts keep a static gateway IP/MAC with zero reconfiguration on failover
- Fast failover via periodic hello/hold-time detection
- Priority and preemption give administrators control over which router leads
AI Mentor Explanation
HSRP is like a team always addressing throws to “the wicketkeeper” as a role, not a named person — if the starting keeper gets injured, the reserve keeper who has been standing ready instantly takes the gloves and the position, and the bowlers never need to be told to change who they are throwing to. Only one person wears the gloves and does the job at any moment, exactly like HSRP’s single Active router. The reserve keeper watching for a signal that the starter is down mirrors HSRP’s hello-timeout detection, and the switch to a designated backup is what makes the team resilient without disrupting anyone else’s job.
Step-by-Step Explanation
Step 1
Group configuration
Two or more routers are configured into the same HSRP group with a shared virtual IP and virtual MAC address.
Step 2
Election
Routers exchange hello messages and elect the highest-priority router as Active; the next-highest becomes Standby.
Step 3
Active forwards traffic
End hosts send all traffic to the virtual IP/MAC; only the Active router actually forwards it.
Step 4
Failover
If the Active router misses hello messages past the hold-time, the Standby router takes over the virtual IP/MAC and starts forwarding.
What Interviewer Expects
- Correct definition: Cisco-proprietary first-hop redundancy with a shared virtual IP/MAC
- Understands Active/Standby roles and only one router forwards at a time
- Knows hello messages and hold-time govern failover detection
- Can contrast HSRP with VRRP (standards-based) and GLBP (load balancing)
Common Mistakes
- Thinking HSRP load-balances traffic across routers like GLBP does
- Confusing HSRP with VRRP and assuming they are the same protocol
- Forgetting HSRP is Cisco-proprietary, not an open standard
- Not knowing preemption is optional and must be explicitly configured
Best Answer (HR Friendly)
“HSRP lets two or more routers act as a single backup-ready gateway for a network. Devices are configured to use one shared address as their gateway, and behind the scenes one router is actively doing the work while another sits ready to take over instantly if the first one fails — without anyone needing to change any settings on their computer. It is a simple, reliable way Cisco networks avoid the default gateway being a single point of failure.”
Code Example
interface GigabitEthernet0/1
ip address 10.0.0.2 255.255.255.0
standby 1 ip 10.0.0.1
standby 1 priority 110
standby 1 preempt
! On the peer router (lower priority, becomes Standby):
interface GigabitEthernet0/1
ip address 10.0.0.3 255.255.255.0
standby 1 ip 10.0.0.1
standby 1 priority 100
! Check HSRP state
show standby brief
# Interface Grp Pri P State Active Standby
# Gi0/1 1 110 P Active local 10.0.0.3Follow-up Questions
- How does HSRP differ from VRRP?
- How does HSRP differ from GLBP in terms of load balancing?
- What happens during preemption when the original Active router comes back online?
- What virtual MAC address format does HSRP use?
MCQ Practice
1. How many routers actively forward traffic in a standard HSRP group at one time?
HSRP is Active/Standby: only the elected Active router forwards traffic for the group at any given time.
2. HSRP is best described as:
HSRP was developed by Cisco and is proprietary, unlike the standards-based VRRP.
3. What triggers an HSRP failover to the Standby router?
HSRP routers exchange periodic hellos; if the Active misses enough of them within the hold-time, Standby takes over.
Flash Cards
What is HSRP? — A Cisco-proprietary first-hop redundancy protocol sharing a virtual IP/MAC across an Active and Standby router.
How many routers forward traffic at once? — One — only the elected Active router forwards for the group.
How is failover detected? — Via periodic hello messages; missing them past the hold-time triggers Standby to take over.
HSRP vs VRRP? — HSRP is Cisco-proprietary; VRRP is the open IETF standard equivalent.