Table of Contents
Advertisement
Virtual Router Redundancy Protocol Commands
message is accepted and if not, it is discarded. All routers within the group must share the same
authentication string.
Syntax
vrrp group authentication string
group
string
Syntax of the "no" Form
Disable VRRP authentication by using the no form of this command:
no vrrp group authentication
Defaults
•
No authentication of VRRP messages occurs.
•
Group : 1, ranging from 1 to 255
Mode
Interface configuration:
Examples
The following example enables authentication for VR group 1 on F1:
XSR(config)#interface fastethernet 1
XSR(config-if<F1>)#vrrp 1 authentication mypass or vrrp authentication mypass
The following example disables authentication:
XSR(config-if<F1>)#no vrrp 1 authentication or no vrrp authentication
vrrp <group> ip
This command adds up to 11 virtual IP addresses per group and enables a corresponding Virtual
Router (VR) on an interface. Be aware of these caveats:
•
If the first virtual address for one VR is one of the real addresses in the XSR (it must be on the
same port), the next one must also be one of the real addresses (it must be on the same port).
•
If the first virtual address is not one of the real addresses on a certain port, the next one must
not be one of the real addresses on that port.
•
The set of virtual IP addresses configured on each VRRP router belonging to the same group
must be the same.
5-192 Configuring the Internet Protocol
Note: Plain text authentication is not meant to be used for security. It simply provides a way to
prevent a misconfigured router from participating in the VRRP.
Virtual router group number.
String (up to 8 alphanumeric characters) to validate incoming VRRP packets.
XSR(config-if<xx>)#
Advertisement
Table of Contents
