Setting Virtual Router Authentication - Cisco MDS 9000 series Configuration Manual

Chapter 5 Configuring IP Services
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
To enable or disable preempting when using IPv6, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# interface vsan 12
switch(config-if)#
Step 3
switch(config-if)# vrrp ipv6 200
switch(config-if-vrrp-ipv6)#
Step 4
switch(config-if-vrrp-ipv6)# preempt
switch(config-if-vrrp-ipv6)# no preempt

Setting Virtual Router Authentication

VRRP security provides three options, including simple text authentication, MD5 authentication, and no
authentication.
•
•
•
You can configure the key using the authentication option in the VRRP submode and distribute it using
the configuration file. The security parameter index (SPI) settings assigned in this option should be
unique for each VSAN.
All VRRP configurations must be duplicated.
Note
VRRP router authentication does not apply to IPv6.
Note
To set an authentication option for a virtual router, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# interface vsan 1
switch(config-if)#
Step 3
switch(config-if)# vrrp 250
switch(config-if-vrrp)#
OL-19525-01,Cisco MDS NX-OS Release 4.2(1)
Simple text authentication uses a unique, 1 to 8 character password that is used by all switches
participating in the same virtual router. This password should be different from other security
passwords.
MD5 authentication uses a unique, 16 character key that is shared by all switches participating in
the same virtual router. This secret key is shared by all switches in the same virtual router.
No authentication is the default option.
Purpose
Enters configuration mode.
Configures a VSAN interface (VSAN 12).
Creates a virtual router.
Enables the higher priority backup virtual router to
preempt the lower priority master virtual router.
Note This preemption does not apply to the primary
IP address.
Disables (default) the preempt option and allows the
master to keep its priority level.
Purpose
Enters configuration mode.
Configures a VSAN interface (VSAN 1).
Creates a virtual router.
Cisco MDS 9000 Family NX-OS IP Services Configuration Guide
Virtual Router Redundancy Protocol
5-23