Enterasys Networks X-Pedition XSR CLI - Manual (Page 268)

Virtual Router Redundancy Protocol Commands
5-192 Configuring the Internet Protocol
message is accepted and if not, it is discarded. All routers within the group must share the same
authentication string.
Syntax
vrrp group authentication string
Syntax of the “no” Form
Disable VRRP authentication by using the no form of this command:
no vrrp group authentication
Defaults
• No authentication of VRRP messages occurs.
• Group : 1, ranging from 1 to 255
Mode
Interface configuration: XSR(config-if<xx>)#
Examples
The following example enables authentication for VR group 1 on F1:
XSR(config)#interface fastethernet 1
XSR(config-if)#vrrp 1 authentication mypass or vrrp authentication mypass
The following example disables authentication:
XSR(config-if)#no vrrp 1 authentication or no vrrp authentication
vrrp ip
This command adds up to 11 virtual IP addresses per group and enables a corresponding Virtual
Router (VR) on an interface. Be aware of these caveats:
• If the first virtual address for one VR is one of the real addresses in the XSR (it must be on the
same port), the next one must also be one of the real addresses (it must be on the same port).
• If the first virtual address is not one of the real addresses on a certain port, the next one must
not be one of the real addresses on that port.
• The set of virtual IP addresses configured on each VRRP router belonging to the same group
must be the same.
Note: Plain text authentication is not meant to be used for security. It simply provides a way to
prevent a misconfigured router from participating in the VRRP.
group Virtual router group number.
string String (up to 8 alphanumeric characters) to validate incoming VRRP packets.