Configuration Guide User guide

FastIron Configuration Guide 1671
53-1002494-02
Additional VRRP and VRRP-E parameter configuration
VRRP and VRRP-E authentication types
This section describes VRRP and VRRP-E authentication parameters.
Configuring authentication type
The Brocade implementation of VRRP and VRRP-E supports the following authentication types for
authenticating VRRP and VRRP-E traffic:
• No authentication – The interfaces do not use authentication. This is the default for VRRP and
VRRP-E.
• Simple – The interfaces use a simple text-string as a password in packets sent on the
interface. If the interfaces use simple password authentication, the VRID configured on the
interfaces must use the same authentication type and the same password.
VRRP-E also supports the following authentication type:
• HMAC-MD5-96 – The interfaces use HMAC-MD5-96 authentication for VRRP-E packets.
NOTE
HMAC-MD5-96 authentication is not supported for VRRP.
To configure the VRID interface on Switch 1 for simple password authentication using the password
“ourpword”, enter the following commands.
Configuring Switch 1
Brocade Switch1(config)#inter e 1/6
Brocade Switch1(config-if-1/6)#ip vrrp auth-type simple-text-auth ourpword
VRRP syntax
Syntax: auth-type no-auth | simple-text-auth <auth-data>
The auth-type no-auth option indicates that the VRID and the interface it is configured on do not
use authentication.
The simple-text-auth <auth-data> option indicates that the VRID and the interface it is configured
on use a simple text password for authentication. The <auth-data> variable is the password. If you
use this variable, make sure all interfaces on all the routers supporting this VRID are configured for
simple password authentication and use the same password.
NOTE
For VRRP v3, authentication is deprecated by RFC 5768.