H3C Technologies H3C SecBlade LB Cards - Manual (Page 33)

25
• You might configure different authentication modes and authentication keys for the VRRP groups on
an interface. However, the members of the same VRRP group must use the same authentication
mode and authentication key.
• Excessive traffic might cause a backup to trigger a change of its status because the backup does not
receive any VRRP advertisements for a specified period of time. To solve this problem, increase the
time interval to send VRRP advertisements.
• Configuring different intervals for sending VRRP advertisements on the routers in a VRRP group
might cause a backup to trigger a change of its status. This is because the backup does not receive
any VRRP advertisements for a specified period of time. To solve this problem, configure the same
interval for sending VRRP advertisements on each router in the VRRP group.
• After you specify an interface as the source interface for sending VRRP packets, this interface,
instead of the interface where the VRRP group resides, sends and receives VRRP packets. If you
specify the interface where the VRRP group resides as the source interface for sending VRRP packets,
the configuration does not take effect.
3. Configuration procedure
To configure VRRP packet attributes:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter the specified interface
view. interface interface-type
interface-number
N/A
3. Configure the authentication
mode and authentication key
when the VRRP groups send
and receive VRRP packets.
vrrp vrid virtual-router-id
authentication-mode { md5 |
simple } [ cipher ] key Optional.
Authentication is not performed by
default.
4. Configure the time interval for
the master in the VRRP group
to send VRRP advertisements.
vrrp vrid virtual-router-id timer
advertise adver-interval Optional.
1 second by default.
5. Disable TTL check on VRRP
packets.
vrrp un-check ttl
Optional.
By default, TTL check on VRRP packets
is enabled.
You do not need to create a VRRP
group before executing this command.
Enabling the trap function for VRRP
When the trap function is enabled for VRRP, VRRP generates traps with severity level errors to report its
key events. The traps are sent to the information center of the device, where you can configure whether
to output the trap information and the output destination. For how to configure the information center, see
System Maintenance Configuration Guide.
To enable the trap function for VRRP:
Step Command Remarks
1. Enter system view. system-view N/A