Configure Authentication Type And Authentication Key - Huawei Quidway S3500 Series Operation Manual

Operation Manual - Reliability
Quidway S3500 Series Ethernet Switches
Note:
If preemption mode is cancelled, the delay time will automatically become 0 second.

1.2.6 Configure Authentication Type and Authentication Key

VRRP provides following authentication types:
simple: Simple character authentication
md5: MD5 authentication
In a network under possible security threat, the authentication type can be set to
simple. Then the switch will add the authentication key into the VRRP packets before
transmitting it. The receiver will compare the authentication key of the packet with the
locally configured one. If they are the same, the packet will be taken as a true and legal
one. Otherwise it will be regarded as an illegal packet to be discarded. In this case, an
authentication key not exceeding 8 characters should be configured.
In a totally unsafe network, the authentication type can be set to md5. The switch will
use the authentication type and MD5 algorithm provided by the Authentication Header
to authenticate the VRRP packets. In this case an authentication key not exceeding 16
characters should be configured.
Those packets failing to pass the authentication will be discarded and a trap packet will
be sent to the network management system.
Perform the following configuration in VLAN interface view.
Table 1-6 Configure authentication type and authentication key.
Configure
authentication key.
Clear
authentication key.
Note:
The same authentication type and authentication key should be configured for all vlan
interfaces that belong to the virtual router.
Operation
authentication type
authentication type
Huawei Technologies Proprietary
and
vrrp authentication-mode type [ key ]
and
undo vrrp authentication-mode
1-6
Chapter 1 VRRP Configuration
Command