Support User Manuals

Enterasys Networks XSR CLI Router User Manual

Open as PDF

of 684

Virtual Router Redundancy Protocol Commands

5-192 Configuring the Internet Protocol

messageisacceptedandifnot,itisdiscarded.Allrouterswithinthegroupmustsharethesame

authenticationstring.

Syntax

vrrp group authentication string

Syntax of the “no” Form

DisableVRRPauthenticationbyusingthenoformofthiscommand:

no vrrp group authentication

Defaults

•NoauthenticationofVRRPmessagesoccurs.

•Group:1,rangingfrom1to255

Mode

Interfaceconfiguration:XSR(config-if<xx>)#

Examples

ThefollowingexampleenablesauthenticationforVRgroup1onF1:

XSR(config)#interface fastethernet 1

XSR(config-if<F1>)#vrrp 1 authentication mypass or vrrp authentication mypass

Thefollowingexampledisablesauthentication:

XSR(config-if<F1>)#no vrrp 1 authentication or no vrrp authentication

vrrp <group> ip

Thiscommandaddsupto11virtualIPaddressespergroupandenablesacorrespondingVirtual

Router(VR)onaninterface.Beawareofthesecaveats:

•IfthefirstvirtualaddressforoneVRisoneoftherealaddressesintheXSR(itmustbeonthe

sameport),the

nextonemustalsobeoneoftherealaddresses(itmustbeonthesameport).

•Ifthefirstvirtualaddressisnotoneoftherealaddressesonacertainport,thenextonemust

notbeoneoftherealaddressesonthatport.

•ThesetofvirtualIP

addressesconfiguredoneachVRRProuterbelongingtothesamegroup

mustbethesame.

Note: Plain text authentication is not meant to be used for security. It simply provides a way to

prevent a misconfigured router from participating in the VRRP.

group

Virtualroutergroupnumber.

string

String(upto8alphanumericcharacters)tovalidateincomingVRRPpackets.

previous next