Interface Configuration Commands - Alcatel-Lucent 7450 Configuration Manual

Interface Configuration Commands

hash-key — The hash key. The key can be any combination of ASCII characters up to 22 (hash-key1)
hash — Specifies the key is entered in an encrypted form. If the hash parameter is not used, the key
hash2 — Specifies the key is entered in a more complex encrypted form. If the hash2 parameter is
backup
Syntax [no] backup ip-address
Context config>router>if>vrrp
Description This command associates router IP addresses with the parental IP interface IP addresses.
The backup command has two distinct functions when used in an owner or a non-owner context of
the virtual router instance.
Non-owner virtual router instances actually create a routable IP interface address that is operationally
dependent on the virtual router instance mode (master or backup). The backup command in owner
virtual router instances does not create a routable IP interface address; it simply defines the existing
parental IP interface IP addresses that are advertised by the virtual router instance.
For owner virtual router instances, the backup command defines the IP addresses that are advertised
within VRRP advertisement messages. This communicates the IP addresses that the master is
representing to backup virtual routers receiving the messages. Advertising a correct list is important.
The specified ip-addr must be equal to one of the existing parental IP interface IP addresses (primary
or secondary) or the backup command will fail.
For non-owner virtual router instances, the backup command actually creates an IP interface IP
address used for routing IP packets and communicating with the system when the access commands
are defined (ping-reply, telnet-reply, and ssh-reply). The specified ip-addr must be an IP address
that is within one of the parental IP interface local subnets created with the address or secondary
commands. If a local subnet does not exist that includes the specified ip-addr or if ip-addr is the same
IP address as the parental IP interface IP address, the backup command will fail.
The new interface IP address created with the backup command assumes the mask and parameters of
the corresponding parent IP interface IP address. The ip-addr is only active when the virtual router
instance is operating in the master state. When not operating as master, the virtual router instance acts
as if it is operationally down. It will not respond to ARP requests to ip-addr, nor will it route packets
received with its vrid derived source MAC address. A non-master virtual router instance always
silently discards packets destined to ip-addr. A single virtual router instance may only have a single
virtual router IP address from a given parental local subnet. Multiple virtual router instances can
define a virtual router IP address from the same local subnet as long as each is a different IP address.
Page 384
or 121 (hash-key2) characters in length (encrypted). If spaces are used in the string, enclose the
entire string in quotation marks (" ").
This is useful when a user must configure the parameter, but for security purposes, the actual
unencrypted key value is not provided.
is assumed to be in a non-encrypted, clear text form. For security, all keys are stored in encrypted
form in the configuration file with the hash parameter specified.
not used, the less encrypted hash form is assumed.
7450 ESS Router Configuration Guide