Dell Z9000, Руководство по настройке

Страница: 914 / 968

Virtual MAC address:
00:00:5e:00:01:6f
Virtual IP address:
10.10.2.2 10.10.2.3
Authentication: (none)
Configuring VRRP Authentication
Simple authentication of VRRP packets ensures that only trusted routers participate in VRRP processes.
When you enable authentication, Dell Networking OS includes the password in its VRRP transmission.
The receiving router uses that password to verify the transmission.\
NOTE: You must configure all virtual routers in the VRRP group the same: you must enable
authentication with the same password or authentication is disabled.
To configure simple authentication, use the following command.
• Configure a simple text password.
INTERFACE-VRID mode
authentication-type simple [ encryption-type ] password
Parameters:
–
encryption-type
:
0
indicates unencrypted;
7
indicates encrypted.
–
password
: plain text.
Examples of the
authentication-type
Command
The bold section shows the encryption type (encrypted) and the password.
Dell(conf-if-te-1/1-vrid-111)#authentication-type ?
Dell(conf-if-te-1/1-vrid-111)#authentication-type simple 7 force10
The following example shows verifying the VRRP authentication configuration using the
show conf
command. The bold section shows the encrypted password.
Dell(conf-if-te-1/1-vrid-111)#show conf
!
vrrp-group 111
authentication-type simple 7 387a7f2df5969da4
priority 255
virtual-address 10.10.10.1
virtual-address 10.10.10.2
virtual-address 10.10.10.3
virtual-address 10.10.10.10
Disabling Preempt
The
preempt
command is enabled by default. The command forces the system to change the MASTER
router if another router with a higher priority comes online.
Prevent the BACKUP router with the higher priority from becoming the MASTER router by disabling
preempt.
NOTE: You must configure all virtual routers in the VRRP group the same: you must configure all
with preempt enabled or configure all with preempt disabled.
Because preempt is enabled by default, disable the preempt function with the following command.
• Prevent any BACKUP router with a higher priority from becoming the MASTER router.
INTERFACE-VRID mode
914
Virtual Router Redundancy Protocol (VRRP)