Authentication (Hsrp) - Cisco Nexus 3548 Command Reference Manual

authentication (HSRP)

authentication (HSRP)
To configure authentication for the Hot Standby Router Protocol (HSRP), use the authentication
command. To disable authentication, use the no form of this command.
Syntax Description md5
key-chain key-chain
key-string
0
7
text
timeout seconds
text string
Command Default Disabled
Command Modes
HSRP configuration or HSRP template mode
Command History Release
5.0(3)A1(1)
Usage Guidelines Use the authentication text command to prevent misconfigured routers from participating in HSRP
groups that they are not intended to participate in. The authentication string is sent unencrypted in all
HSRP messages. The same authentication string must be configured on all routers in the same group to
ensure interoperation. HSRP protocol packets that do not authenticate are ignored.
If you configure two routers with identical HSRP IP addresses but with different authentication strings,
Caution
then neither router is aware of the duplication.
This command does not require a license.
Cisco Nexus 3548 Switch NX-OS Unicast Routing Command Reference
38
authentication {string | md5 {key-chain key-chain | key-string {0 | 7} text [timeout seconds]} |
text string}
no authentication {string | md5 {key-chain key-chain | key-string {0 | 7} text [timeout seconds]}
| text string}
Specifies the Message Digest 5 (MD5) authentication.
Identifies a group of authentication keys.
Specifies the secret key for MD5 authentication.
Specifies a clear text string.
Specifies an encrypted string.
Secret key for MD5 authentication. The range is from 1 to 255 characters.
We recommend that you use at least 16 characters.
(Optional) Specifies the authentication timeout value. The range is from 0
to 32767.
Specifies an authentication string. The range is from 1 to 255 characters. The
default string is "cisco".
Modification
This command was introduced.
Chapter Unicast Routing Commands
OL-27852-01