Comments on: ACLs and HSRP, BGP, OSPF, VRRP, GLBP…

By: Aaron Conaway

Aaron Conaway — Wed, 20 May 2009 13:21:33 +0000

Thanks, Nick and Brian. Added.

By: Brian

Brian — Tue, 19 May 2009 17:21:38 +0000

HSRP version 2 uses the new IP multicast address 224.0.0.102 to send hello packets instead of the multicast address of 224.0.0.2, which is used by version 1. HSRP version 2 continues to use UDP port 1985.

By: Helpful ACLs and details for HSRP, GLBP, VRRP, etc.. - Rantings by Nick Buraglio

Helpful ACLs and details for HSRP, GLBP, VRRP, etc.. - Rantings by Nick Buraglio — Wed, 26 Nov 2008 21:33:24 +0000

[...] 2008 in Tech Always being on the lookout for good, well put together information, I came across this network oriented technical blog, and it was a pretty helpful find, containing many of the ACLs and details for HSRP, BGP, OSPF, [...]

By: Nick Buraglio

Nick Buraglio — Wed, 26 Nov 2008 19:13:26 +0000

As an added data point, foundry networks offers vrrp-e on their platforms but under the hood it is more like hsrp in that it uses the all-routers mcast address (224.0.0.2) rather than the vrrp address of 224.0.018
The source and destination for vrrp-e should be UDP port 8888 and the destination MAC should be 01-00-5E-00-00-02
“permit ip any host 224.0.0.2″ is an easy way to allow vrrp-e within a foundry ACL (not necessarily secure with the “any” in there, but good to make it work in a pinch.

By: HSRP and ACL's | Booches.nl

HSRP and ACL's | Booches.nl — Tue, 28 Oct 2008 11:14:29 +0000

[...] at the Internet I found a nice article on Aaron’s Worthless Words blog about multicast addresses, port numbers and associated [...]

By: Aaron Conaway

Aaron Conaway — Fri, 03 Oct 2008 17:56:55 +0000

I’m glad you found it useful, René. Thanks for stopping by.

By: René Jorissen

René Jorissen — Thu, 02 Oct 2008 11:35:57 +0000

Hey Aaron,

Great post!! After dealing with some problems with HSRP and ACL’s, I started searching for all the different multicast addresses, ports and associated protocols and I found your post.

Again GREAT, thanks for it!!!!

By: Aaron Conaway

Aaron Conaway — Fri, 04 Jul 2008 21:09:08 +0000

Thanks, Sebastian. Done!

By: Sebastian Graf

Sebastian Graf — Fri, 04 Jul 2008 07:01:59 +0000

Hi Aaron,

nice list. I would suggest to also add 224.0.0.6 for DR/BDR OSPF routers.

By: Aaron Conaway

Aaron Conaway — Fri, 13 Jun 2008 11:52:53 +0000

Some day, I’ll pay attention enough to see these typos. Thanks, True.

And thanks, Clint. I hope the list is helpful.