R3721-F3210-F3171-HP High-End Firewalls High Availability Command Reference-6PW101

9
Examples
# Disable TTL check on VRRP packets.
<Sysname> system-view
[Sysname] interface GigabitEthernet 0/1
[Sysname-GigabitEthernet0/1] vrrp un-check ttl
vrrp vrid authentication-mode
Syntax
vrrp vrid virtual-router-id authentication-mode { md5 | simple } key
undo vrrp vrid virtual-router-id authentication-mode
View
Interface view
Default level
2: System level
Parameters
virtual-router-id: VRRP group number, which ranges from 1 to 255.
md5: Authentication using the MD5 algorithm.
simple: Plain text authentication mode.
key: Authentication key, which is case-sensitive.
• When md5 authentication applies, the authentication key is in MD5 cipher text or in plain text and
the length of the key depends on its input format. If the key is input in plain text, its length is 1 to 8
characters, such as 1234567. If the key is input in cipher text, its length must be 24 characters, such
as _(TT8F]Y\5SQ=^Q`MAF4<1!!.
• When simple authentication applies, the authentication key is in plain text with a length of 1 to 8
characters.
Description
Use vrrp vrid authentication-mode to configure authentication mode and authentication key for a VRRP
group to send and receive VRRP packets.
Use undo vrrp vrid authentication-mode to restore the default.
By default, authentication is disabled.
Before executing the command, create a VRRP group on an interface and configure the virtual IP address
of the VRRP group.
You might configure different authentication modes and authentication keys for the VRRP groups on an
interface. However, the members of the same VRRP group must use the same authentication mode and
authentication key.
Related commands: display vrrp.
Examples
# Set the authentication mode to simple and authentication key to Sysname for VRRP group 1 on
interface GigabitEthernet 0/1 to send and receive VRRP packets.
<Sysname> system-view