Dell S6000–ON Configuration Manual page 1016

Configuring VRRP Authentication
Simple authentication of VRRP packets ensures that only trusted routers participate in VRRP processes.
When you enable authentication, Dell Networking OS includes the password in its VRRP transmission.
The receiving router uses that password to verify the transmission.
NOTE: You must configure all virtual routers in the VRRP group the same: you must enable
authentication with the same password or authentication is disabled.
NOTE: Authentication for VRRPv3 is not supported.
To configure simple authentication, use the following command.
• Configure a simple text password.
INTERFACE-VRID mode
authentication-type simple [encryption-type] password
Parameters:
– encryption-type: 0 indicates unencrypted; 7 indicates encrypted.
– password: plain text.
Examples of the authentication-type Command
The bold section shows the encryption type (encrypted) and the password.
Dell(conf-if-te-1/1/1-vrid-111)#authentication-type ?
Dell(conf-if-te-1/1/1-vrid-111)#authentication-type simple 7 force10
The following example shows verifying the VRRP authentication configuration using the show conf
command. The bold section shows the encrypted password.
Dell(conf-if-te-1/1/1-vrid-111)#show conf
!
vrrp-group 111
authentication-type simple 7 387a7f2df5969da4
priority 255
virtual-address 10.10.10.1
virtual-address 10.10.10.2
virtual-address 10.10.10.3
virtual-address 10.10.10.10
Disabling Preempt
The preempt command is enabled by default. The command forces the system to change the MASTER
router if another router with a higher priority comes online.
Prevent the BACKUP router with the higher priority from becoming the MASTER router by disabling
preempt.
NOTE: You must configure all virtual routers in the VRRP group the same: you must configure all
with preempt enabled or configure all with preempt disabled.
Because preempt is enabled by default, disable the preempt function with the following command.
• Prevent any BACKUP router with a higher priority from becoming the MASTER router.
INTERFACE-VRID mode
no preempt
1016
Virtual Router Redundancy Protocol (VRRP)