Huawei Quidway S3500 Series, Руководство по эксплуатации

Страница: 544 / 671

Operation Manual - Reliability
Quidway S3500 Series Ethernet Switches
Chapter 1 VRRP Configuration
Huawei Technologies Proprietary
1-6
Note:
If preemption mode is cancelled, the delay time will automatically become 0 second.
1.2.6 Configure Authentication Type and Authentication Key
VRRP provides following authentication types:
z
simple : Simple character authentication
z
md5 : MD5 authentication
In a network under possible security threat, the authentication type can be set to
simple . Then the switch will add the authentication key into the VRRP packets before
transmitting it. The receiver will compare the authentication key of the packet with the
locally configured one. If they are the same, the packet will be taken as a true and legal
one. Otherwise it will be regarded as an illegal packet to be discarded. In this case, an
authentication key not exceeding 8 characters should be configured.
In a totally unsafe network, the authentication type can be set to md5 . The switch will
use the authentication type and MD5 algorithm provided by the Authentication Header
to authenticate the VRRP packets. In this case an authentication key not exceeding 16
characters should be configured.
Those packets failing to pass the authentication will be discarded and a trap packet will
be sent to the network management system.
Perform the following configuration in VLAN interface view.
Table 1-6 Configure authentication type and authentication key.
Operation Command
Configure authentication type and
authentication key.
vrrp authentication-mode type [ key ]
Clear authentication type and
authentication key.
undo vrrp authentication-mode
Note:
The same authentication type and authentication key should be configured for all vlan
interfaces that belong to the virtual router.