Alcatel-Lucent 7750 SR-OS, Руководство по настройке

Страница: 350 / 674

Page 350 7750 SR OS Router Configuration Guide
hash-key — The hash key. The key can be any combination of ASCII characters up to 22 (hash-key1)
or 121 (hash-key2) characters in length (encrypted). If spaces are used in the string, enclose the
entire string in quotation marks (“ ”).
This is useful when a user must configure the parameter, but for security purposes, the actual
unencrypted key value is not provided.
hash — Specifies the key is entered in an encrypted form. If the hash parameter is not used, the key
is assumed to be in a non-encrypted, clear text form. For security, all keys are stored in encrypted
form in the configuration file with the
hash parameter specified.
hash2 — Specifies the key is entered in a more complex encrypted form. If the hash2 parameter is
not used, the less encrypted hash form is assumed.
backup
Syntax [ no ] backup ip-address
Context config>router>if>vrrp
Description This command associates router IP addresses with the parental IP interface IP addresses.
The backup command has two distinct functions when used in an owner or a non-owner context of
the virtual router instance.
Non-owner virtual router instances actually create a routable IP interface address that is operationally
dependent on the virtual router instance mode (master or backup). The
backup command in owner
virtual router instances does not create a routable IP interface address; it simply defines the existing
parental IP interface IP addresses that are advertised by the virtual router instance.
For owner virtual router instances, the backup command defines the IP addresses that are advertised
within VRRP advertisement messages. This communicates the IP addresses that the master is
representing to backup virtual routers receiving the messages. Advertising a correct list is important.
The specified
ip-addr must be equal to one of the existing parental IP interface IP addresses (primary
or secondary) or the backup command will fail.
For non-owner virtual router instances, the backup command actually creates an IP interface IP
address used for routing IP packets and communicating with the system when the access commands
are defined (
ping-reply , telnet-reply , and ssh-reply ). The specified ip-addr must be an IP address
that is within one of the parental IP interface local subnets created with the address or secondary
commands. If a local subnet does not exist that includes the specified ip-addr or if ip-addr is the same
IP address as the parental IP interface IP address, the backup command will fail.
The new interface IP address created with the backup command assumes the mask and parameters of
the corresponding parent IP interface IP address. The ip-addr is only active when the virtual router
instance is operating in the master state. When not operating as master, the virtual router instance acts
as if it is operationally down. It will not respond to ARP requests to
ip-addr , nor will it route packets
received with its vrid derived source MAC address. A non-master virtual router instance always
silently discards packets destined to ip-addr . A single virtual router instance may only have a single
virtual router IP address from a given parental local subnet. Multiple virtual router instances can
define a virtual router IP address from the same local subnet as long as each is a different IP address.