Cisco DS-C9216I-K9, Руководство по настройке

Страница: 259 / 436

22-13
Cisco MDS 9000 Fabric Manager Switch Configuration Guide
OL-7753-01
Chapter 22 Configuring IP Services
Configuring VRRP
Managing IP Addresses for VRRP
To manage IP addresses for virtual routers from Device Manager, follow these steps:
Step 1 Choose IP > VRRP . You see the Operations tab of the VRRP dialog box.
Step 2
Click the IP Addresses tab on the VRRP dialog box.
Step 3 To create a new VRRP entry, click Create . You see the Create VRRP IP Addresses window.
Step 4
Complete the fields in this window to create a new VRRP IP Address, and click OK or Apply .
Setting Priority for the Virtual Router
The valid range to assign a virtual router priority is 1 to 254 with 1 being the lowest priority and 254
being the highest priority. The default value is 100 for switches with secondary IP addresses and 255 for
a switch with the primary IP address.
Setting the Time Interval for the Advertisement Packet
The valid time range for an advertisement packet is between 1 and 255 seconds with the default being 1
(one) second. If the switch has the primary IP address, this time must be specified.
Preempting the Master Virtual Router
By default, the preempt option is enabled. An owner with priority 255 cannot be preempted. If two
priorities match, the owner with the highest priority preempts the master virtual router.
The VRRP preempt option is not supported on IP storage Gigabit Ethernet interfaces. However, if the
virtual IP address is also the IP address for the interface, then preemption is implicitly applied.
Configuring Authentication for the Virtual Router
VRRP security provides three options, including simple text authentication, MD5 authentication, and no
authentication.
•
Simple text authentication uses a unique, 1 to 8 character password that is used by all switches
participating in the same virtual router. This password should be different from other security
passwords.
•
MD5 authentication uses a unique, 16 character key that is shared by all switches participating in
the same virtual router. This secret key is shared by all switches in the same virtual router.
•
No authentication is the default option.
You can configure the key using the authentication option in the VRRP submode and distribute it using
the configuration file. The security parameter index (SPI) settings assigned in this option should be
unique for each VSAN.
All VRRP configurations must be duplicated