What Is GLBP in Networking?
On This Page
Quick Definition
GLBP stands for Gateway Load Balancing Protocol. It is used on routers to make sure that if one router fails, another one can take over without disrupting the network. GLBP also splits the network traffic across multiple routers, so no single router gets overloaded.
Common Commands & Configuration
interface GigabitEthernet0/0
ip address 192.168.1.1 255.255.255.0
glbp 1 ip 192.168.1.254Enables GLBP group 1 on the interface and sets the virtual IP address to 192.168.1.254.
glbp 1 priority 150Sets the GLBP priority for group 1 to 150, making this router more likely to become the AVG.
glbp 1 preemptEnables preemption for group 1, so that if this router has a higher priority than the current AVG, it will take over the AVG role.
glbp 1 load-balancing round-robinConfigures the load balancing method for group 1 as round-robin. This is the default.
glbp 1 authentication md5 key-string mykeyConfigures MD5 authentication for GLBP group 1. All routers in the group must use the same key.
glbp 1 timers hello 1 hold 3Changes the hello interval to 1 second and the hold time to 3 seconds for faster failure detection.
Must Know for Exams
GLBP is part of the CCNA exam curriculum, specifically under the topic of First Hop Redundancy Protocols (FHRPs). Cisco expects CCNA candidates to understand the differences between HSRP, VRRP, and GLBP, including their features, election processes, load balancing capabilities, and configuration commands.
In the CCNA exam, you can expect multiple-choice questions that ask you to identify the correct protocol for a given scenario. For example, a question might describe a network where load balancing is required across multiple routers and ask which FHRP should be used. The correct answer would be GLBP, because it supports load balancing, whereas HSRP and VRRP do not.
You may also see simulation or scenario-based questions where you have to configure GLBP. You will need to know the commands for setting up the GLBP group, assigning the virtual IP, setting priority, enabling preemption, and choosing the load balancing method. You might also need to troubleshoot a GLBP configuration, such as identifying why failover is not happening due to misconfigured priority or authentication.
Another exam objective is understanding the election process for AVG and AVF. Questions might ask what happens when a new router with a higher priority joins the group, or how GLBP handles the failure of an AVF. You need to know that the AVG reassigns the virtual MAC address to another router.
The exam also covers GLBP timers (hello every 3 seconds, hold time 10 seconds). You might be asked to calculate failover time or identify the correct timer values. Be prepared to compare these with HSRP and VRRP timers.
In summary, for CCNA, GLBP is a primary topic. You should be comfortable with its configuration, operation, and comparisons to other FHRPs. Knowing the differences in MAC addressing and load balancing is crucial for exam success.
Simple Meaning
Imagine you live in a neighborhood where everyone shares a single mailbox at the end of the street. That mailbox is like a default gateway in a network — it is the single point through which all internet traffic flows. If that mailbox gets blocked or broken, nobody gets their mail. In computer networks, a single router acting as the default gateway can fail, and then all devices lose internet access.
GLBP works like having multiple mailboxes at the end of the street, each with a different address, but all of them are actually part of the same mail delivery system. When you send a letter, the post office can choose any of those mailboxes to drop it off, spreading the work around. If one mailbox is damaged, the post office knows to use another one automatically.
In the same way, GLBP lets multiple routers share the job of being the gateway. Each router gets a virtual IP address, and GLBP assigns a different virtual MAC address to each router. When a device on the network wants to send data to the internet, it asks for the MAC address of the gateway. GLBP answers with the MAC address of one of the routers, choosing which one based on a load balancing algorithm. If that router fails, GLBP automatically redirects traffic to another router. This makes the network more reliable and efficient.
Full Technical Definition
GLBP (Gateway Load Balancing Protocol) is a Cisco proprietary First Hop Redundancy Protocol (FHRP) that provides automatic gateway failover and load balancing across multiple routers in a single subnet. It is defined in RFC 2281? Actually, GLBP is Cisco proprietary, so there is no formal RFC. It operates at the data link layer (Layer 2) and network layer (Layer 3) of the OSI model.
GLBP uses a single virtual IP address (VIP) that is configured on the routers in the GLBP group. However, unlike HSRP or VRRP, GLBP assigns a unique virtual MAC address to each router in the group. The group has up to four routers, and each router is assigned a different virtual MAC address from the range 0000.b400.xxxx, where xxxx is a hex value unique to each router.
When a host sends an ARP request for the virtual IP address, the Active Virtual Gateway (AVG) responds. The AVG is elected among the routers in the GLBP group based on the highest priority (default 100, range 1-255) or the highest IP address. The AVG is responsible for load balancing by responding to ARP requests with the virtual MAC address of different Active Virtual Forwarders (AVFs). There are multiple load balancing methods: round-robin (default), weighted, and host-dependent.
Each router in the group is also an AVF. An AVF is responsible for forwarding traffic destined to its assigned virtual MAC address. If an AVF fails, the AVG detects this through the absence of hello messages (sent every 3 seconds by default, with a hold time of 10 seconds). The AVG then reassigns that AVF's virtual MAC address to another router, which becomes the Active Virtual Forwarder for that MAC. This ensures continuous forwarding without requiring hosts to learn a new MAC address.
GLBP also supports authentication (plain text or MD5) to prevent unauthorized routers from joining the group. You can configure preemption, which allows a higher-priority router to take over the role of AVG after a failure. The protocol also supports object tracking, so if a router loses a key upstream interface, it can lower its priority and trigger a failover.
In real IT implementations, GLBP is often used in campus networks and data centers where high availability and efficient use of multiple routers is required. Configuration is done in interface configuration mode, and the command syntax is similar to other FHRPs. For example:
interface GigabitEthernet0/0 ip address 192.168.1.1 255.255.255.0 glbp 1 ip 192.168.1.254 glbp 1 priority 150 glbp 1 preempt glbp 1 load-balancing round-robin
Real-Life Example
Think about a busy restaurant with a single front door. All customers have to enter through that one door. If the door gets jammed or if a crowd blocks it, customers cannot get in. The restaurant loses business. Now imagine that the restaurant has three doors, each with a different door number, but all lead into the same dining area. Customers can enter through any door. A host at the front decides which door each customer should use to keep the traffic flowing evenly. If one door gets blocked, the host directs customers to the other doors.
This is exactly how GLBP works. The restaurant is the network, the customers are data packets, and the doors are the routers. The host is the AVG (Active Virtual Gateway). The virtual IP address is like the restaurant's main address posted on the sign. But when customers ask for directions (ARP request), the host tells them to go to a specific door (virtual MAC address). Each router is like a door that can handle customer traffic. If one door gets blocked (router fails), the host simply sends customers to the other doors. The customers never know the difference.
The load balancing part is key. In the restaurant, you do not want all customers piling through one door while the other doors are empty. So the host spreads them out. In GLBP, the AVG spreads traffic among the routers so that each one handles a fair share. This prevents any single router from becoming a bottleneck. And because all routers are active, you are not paying for idle backup hardware like you would with HSRP.
Why This Term Matters
In modern networks, downtime is expensive. Every minute that a network is unavailable can cost a company thousands of dollars. GLBP helps reduce downtime by providing automatic failover for the default gateway. If one router fails, another one takes over instantly, so users do not lose connectivity.
Another reason GLBP matters is efficiency. Older redundancy protocols like HSRP and VRRP keep one router idle as a standby. That is wasteful if you have hardware that could be handling traffic. With GLBP, all routers can forward traffic, so you get better utilization of your equipment. This can delay the need to buy more hardware.
GLBP also simplifies network management. Once it is configured, it handles failover and load balancing automatically. Network administrators do not need to manually redirect traffic or update ARP caches on hosts. This reduces operational overhead and the risk of human error.
For IT professionals, understanding GLBP is important because it is a common solution in mid-size to large enterprise networks, especially those using Cisco equipment. Even though vendors like HSRP and VRRP are more widely used, GLBP stands out because it supports load balancing. If your company runs critical applications that need high availability and efficient bandwidth use, GLBP can be a strong choice.
How It Appears in Exam Questions
GLBP questions on the CCNA exam typically fall into three categories: scenario-based, configuration, and troubleshooting.
In scenario-based questions, you are given a network topology with multiple routers connected to a LAN. The requirements include automatic failover and load balancing. The question might present four possible solutions, and you must select GLBP as the best fit because it supports both features. Another variation might describe a network where hosts are experiencing high latency because one router is overloaded while another is idle. The question would ask which technology can solve this, and you need to pick GLBP.
Configuration questions often use the Cisco IOS command line. You might see a partially configured router interface and be asked to complete the configuration to enable GLBP. For example:
interface GigabitEthernet0/0 ip address 10.0.0.1 255.255.255.0 glbp 10 ip 10.0.0.254 glbp 10 priority 200 glbp 10 preempt Then the question might ask what command is missing to enable round-robin load balancing. The answer would be 'glbp 10 load-balancing round-robin'.
Troubleshooting questions show show commands like 'show glbp' and ask you to interpret the output. For example, if the output shows that only one router is in the AVG state, you might need to check if preemption is enabled on the other routers, or if the priorities are correct. Another common issue is that authentication mismatch prevents routers from forming a GLBP group. The question might ask why the GLBP group is not operational, and the correct answer could be that authentication keys do not match.
You may also encounter questions about the MAC address structure. For instance, what is the virtual MAC address range for GLBP? The correct answer is 0000.b400.xxxx. Or, how many routers can be in a GLBP group? Up to four.
A more complex question might involve a scenario where an AVF fails, and you need to determine how long it takes for the AVG to reassign the virtual MAC address. The answer involves the hold time (default 10 seconds).
Lastly, comparison questions are common: 'What is the difference between GLBP and HSRP?' The key points are that GLBP supports load balancing while HSRP does not, and GLBP uses multiple virtual MAC addresses while HSRP uses one shared MAC address.
Practise GLBP Questions
Test your understanding with exam-style practice questions.
Example Scenario
Company ABC has a small office with 100 computers. They have two routers, Router A and Router B, both connected to the same switch and to the internet. The network administrator wants to ensure that if one router fails, the internet connection remains active. The administrator also wants to use both routers actively so that one is not sitting idle.
The administrator decides to implement GLBP. They configure a virtual IP address 192.168.1.254 for the GLBP group 1 on both routers. Router A is given a priority of 150, and Router B has the default priority of 100. Preemption is enabled on Router A.
Under normal operation, Router A becomes the Active Virtual Gateway (AVG) because of its higher priority. When a PC (192.168.1.10) sends an ARP request for 192.168.1.254, Router A responds with its own virtual MAC address (0000.b400.0001). The next PC (192.168.1.11) that sends an ARP request gets a response with Router B's virtual MAC address (0000.b400.0002). This way, traffic is distributed across both routers in a round-robin fashion.
One day, Router B fails due to a power supply issue. After 10 seconds (the hold time), Router A detects that Router B is no longer sending hello messages. Router A then takes over the forwarding role for Router B's virtual MAC address. Any traffic still destined for 0000.b400.0002 will now be handled by Router A. The PCs do not need to change their ARP entries because the virtual MAC address stays the same.
Later, Router B is repaired and comes back online. It starts sending hello messages. Because Router A has preemption enabled, it does not give up the AVG role. However, Router B rejoins as an Active Virtual Forwarder for its original virtual MAC address. Router A then updates its load balancing to include Router B again. The network remains stable and efficient.
Common Mistakes
Thinking that GLBP uses a single virtual MAC address like HSRP.
GLBP assigns a unique virtual MAC address to each router in the group. This allows load balancing because different host ARP replies point to different routers. HSRP uses one MAC address that only the active router uses.
Remember GLBP = different MAC per router for load balancing. HSRP = one MAC for active router only.
Assuming that the router with the highest IP address always becomes the AVG.
The AVG election is based on priority first. If priorities are equal, then the highest IP address is used as a tiebreaker. Setting priority is the primary way to control which router is AVG.
Configure GLBP priority on each router to control election. Do not rely on IP addresses unless priorities are equal.
Believing that GLBP supports up to 8 routers in a group.
GLBP groups are limited to 4 routers. This is a fixed limit in the protocol. Attempting to configure more than 4 will not work.
Check the number of routers in your GLBP group. It cannot exceed 4. If you need more redundancy, consider using multiple GLBP groups or another protocol.
Forgetting to enable preemption on the router that should take over after a failure.
Without preemption, when a higher priority router comes back online after a failure, it will not reclaim its role as AVG. The current AVG continues even if it has a lower priority, which defeats the purpose of configuring priorities.
Always configure 'glbp <group> preempt' on the router that should become AVG after recovery. Only the router with the highest priority should have it enabled if you want deterministic failover.
Confusing GLBP load balancing methods with routing protocol load balancing.
GLBP load balancing occurs at Layer 2 by responding to ARP requests differently. Routing protocol load balancing (like OSPF ECMP) occurs at Layer 3 by forwarding packets across multiple equal-cost paths. These are different mechanisms.
Study GLBP load balancing as an ARP-based mechanism. Understand that it distributes the default gateway traffic among routers. Routing protocols handle traffic between subnets.
Exam Trap — Don't Get Fooled
{"trap":"In a GLBP configuration question, the candidate sees that a router has the highest IP address and assumes it will always be the AVG, ignoring priority.","why_learners_choose_it":"Learners often remember that HSRP and VRRP use IP address as a tiebreaker, and they assume GLBP works the same way. They may not read the question carefully enough to see that priority values are not set equally."
,"how_to_avoid_it":"Always check the priority value in the question. If priorities are different, the highest priority wins regardless of IP address. Only use IP address as a tiebreaker when priorities are equal.
In GLBP, the AVG election uses the same priority logic as HSRP, but the roles are different (AVG vs active/standby)."
Commonly Confused With
HSRP is a Cisco proprietary FHRP that provides gateway failover but does not support load balancing. In HSRP, only one router is active at a time, and the standby router is idle. GLBP, on the other hand, allows all routers to forward traffic simultaneously. HSRP uses a single virtual MAC address, while GLBP uses multiple virtual MAC addresses.
You have two routers. With HSRP, one forwards traffic and the other waits. With GLBP, both forward traffic, and if one fails, the other handles everything.
VRRP is an open standard FHRP (RFC 5798) that acts similarly to HSRP, with an active and standby router. It does not provide load balancing. GLBP is Cisco proprietary and allows up to four routers to actively forward traffic. VRRP uses a single virtual MAC address per group, while GLBP uses multiple.
In a network with three routers, VRRP uses only one at a time. GLBP can use all three, distributing the workload.
IRDP is an older protocol that lets hosts discover routers via ICMP messages. It does not provide failover redundancy or load balancing. GLBP is a full FHRP that monitors router health and automatically handles failover. IRDP is rarely used today, while GLBP is still relevant.
IRDP is like a help desk that lists available routers; if one fails, your computer must pick another manually. GLBP is like a smart dispatcher that reassigns calls to working routers automatically.
Server Load Balancing distributes traffic among servers, not routers. SLB operates at the application or transport layer (Layer 4-7). GLBP operates at Layer 2-3 to balance traffic among routers acting as default gateways. They solve different problems: SLB for server farms, GLBP for gateway redundancy.
SLB balances web requests across multiple web servers. GLBP balances outbound internet traffic across multiple routers.
Step-by-Step Breakdown
GLBP Group Formation
Routers configured with the same GLBP group number on their interfaces form a GLBP group. They exchange hello messages every 3 seconds to maintain neighbor relationships. The group is identified by a virtual IP address that all routers share.
Active Virtual Gateway (AVG) Election
The router with the highest GLBP priority (default 100) becomes the AVG. If priorities are equal, the router with the highest IP address wins. The AVG is the leader that handles ARP responses. It also assigns virtual MAC addresses to the other routers.
Assignment of Virtual MAC Addresses
The AVG assigns a unique virtual MAC address (from the range 0000.b400.0001 to 0000.b400.00FF) to each router, including itself. These MAC addresses are used by hosts as the destination MAC for packets destined to the gateway IP.
Redundancy and Load Balancing
When a host sends an ARP request for the virtual IP, the AVG responds with the MAC address of one of the routers (including itself) based on the configured load balancing method. This distributes the forwarding load. Each router then forwards packets sent to its own virtual MAC.
Failure Detection and Failover
Each router sends hello messages. If the AVG does not receive a hello from a router within the hold time (default 10 seconds), it declares that router as failed. The AVG then reassigns the failed router's virtual MAC address to another router, which takes over forwarding traffic for that MAC.
Practical Mini-Lesson
GLBP is a powerful tool for network engineers who need both high availability and efficient use of resources. In practice, configuring GLBP involves planning which routers will be in the group, setting priorities, and choosing a load balancing method.
First, you need to decide the virtual IP address that hosts will use as their default gateway. This should be an IP address that is not already used by any physical device. For example, if your subnet is 192.168.1.0/24, you might use 192.168.1.254 as the virtual IP.
Next, configure each router interface that connects to the LAN with the same GLBP group number and virtual IP. For example:
interface GigabitEthernet0/0 ip address 192.168.1.1 255.255.255.0 glbp 1 ip 192.168.1.254 To make one router the preferred AVG, set a higher priority and enable preemption:
glbp 1 priority 150 glbp 1 preempt Choose the load balancing method. The default is round-robin, which simply alternates replies to ARP requests. Weighted load balancing allows you to assign a weight to each router so that some handle more traffic than others. Host-dependent load balancing ensures that a specific host always gets the same virtual MAC address, which can be useful for stateful applications.
One common issue in practice is that GLBP does not work across layer 2 boundaries. All routers must be on the same VLAN and directly connected to the same switch. Also, if the switch is not configured to allow the virtual MAC addresses, you may have issues. Ensure that the switch has the correct VLAN configurations and that MAC address flooding is not a problem.
Another practical concern is tuning timers. In some networks, the default 3-second hello and 10-second hold time is too slow, especially if link failures need to be detected faster. You can adjust these timers, but be careful not to set them too low, as that can cause flapping.
Finally, always test your GLBP configuration. Use the 'show glbp' command on each router to verify the states, priorities, and load balancing counters. Simulate a link failure by shutting down an interface or disconnecting a cable and confirm that failover happens as expected.
What can go wrong? Misconfigured authentication is a common issue. If one router has authentication configured and the others do not, the group will not form. Also, if you forget to enable preemption, the router with the higher priority will not take over after a failure, which can lead to suboptimal performance.
Another pitfall is when the virtual IP address accidentally matches the IP address of a physical router interface. This will cause an IP address conflict and break the GLBP operation. Always use a unique IP for the virtual gateway.
Troubleshooting Clues
Symptom:
Symptom:
Symptom:
Memory Tip
GLBP: 'G' for 'Group of MACs' — each router gets its own virtual MAC, allowing all to be active. Think 'GLBP = Good Load Balancing Protocol'.
Covered in These Exams
Current Exam Context
Current exam versions that test this topic — use these objectives when studying.
200-301Cisco CCNA →N10-009CompTIA Network+ →Related Glossary Terms
802.1Q is the networking standard that allows multiple virtual LANs (VLANs) to share a single physical network link by tagging Ethernet frames with VLAN identification information.
802.1X is a network access control standard that authenticates devices before they are allowed to connect to a wired or wireless network.
An A record is a type of DNS resource record that maps a domain name to an IPv4 address.
Quick Knowledge Check
1.What is the maximum number of routers allowed in a single GLBP group?
2.In GLBP, which router is responsible for responding to ARP requests for the virtual IP address?
3.What does GLBP use to distribute traffic among routers?
Frequently Asked Questions
Is GLBP an open standard or proprietary?
GLBP is a Cisco proprietary protocol. It is not based on any open standard like VRRP. This means it only works on Cisco devices and some third-party devices that support Cisco features.
How does GLBP differ from HSRP in terms of MAC addresses?
HSRP uses a single virtual MAC address that is shared between the active and standby routers. GLBP assigns a unique virtual MAC address to each router in the group, allowing all routers to forward traffic simultaneously.
Can I use GLBP with VLANs?
Yes, GLBP works within a single VLAN. You can configure GLBP on a VLAN interface or a physical interface. All routers must be in the same VLAN and subnet for GLBP to function.
What happens if the AVG fails?
If the AVG fails, another router in the GLBP group is elected as the new AVG based on priority and IP address. The new AVG takes over sending hello messages and responding to ARP requests.
Does GLBP support load balancing for IPv6?
No, GLBP is designed for IPv4 only. For IPv6, Cisco offers other first hop redundancy solutions such as HSRP for IPv6 or VRRP for IPv6.
Can I mix GLBP with HSRP or VRRP on the same network?
Yes, but not on the same interface for the same gateway. You could have different VLANs using different FHRPs. However, on a single subnet, you must choose one FHRP for the default gateway.
Summary
GLBP (Gateway Load Balancing Protocol) is a Cisco proprietary First Hop Redundancy Protocol that provides both automatic gateway failover and load balancing across multiple routers. Unlike HSRP and VRRP, which keep standby routers idle, GLBP allows all routers in the group to forward traffic. It achieves this by assigning a unique virtual MAC address to each router and using the Active Virtual Gateway (AVG) to distribute ARP replies among them.
For CCNA candidates, understanding GLBP is important because it appears in the exam objectives under FHRPs. You need to know how the AVG and AVF roles work, the election process, the default timers, and the configuration commands. Common exam questions compare GLBP to HSRP and VRRP, or ask you to troubleshoot a failed GLBP group.
In real-world IT environments, GLBP helps maximize the use of available hardware and improves network resilience. It is especially useful in campus networks and data centers where multiple routers connect to the same LAN. However, because it is Cisco proprietary, it is not always the preferred choice in multi-vendor environments.
The key exam takeaway is that GLBP is the only FHRP that provides load balancing natively. Remember the memory tip: 'GLBP = Good Load Balancing Protocol' and that it uses 'Group of MACs' for each router. Practice the configuration commands and use show commands to verify operation. With this knowledge, you will be prepared for both the exam and real network design.