VRRP
Router Configuration Guide 407
If the command is re-executed with a different password key defined, the new key is used immediately.
The authentication-key command can be executed at anytime.
To change the current in-use password key on multiple virtual router instances:
Identify the current master.
1. Shutdown the virtual router instance on all backups.
2. Execute the authentication-key command on the master to change the password key.
3. Execute the authentication-key command and no shutdown command on each backup.
The no form of the command reverts to the default value.
Default no authentication-key — The authentication key value is the null string.
Parameters authentication-key — The authentication key. Allowed values are any string up to 8 characters
long composed of printable, 7-bit ASCII characters. If the string contains special characters
(#, $, spaces, etc.), the entire string must be enclosed within double quotes.
hash-key — The hash key. The key can be any combination of ASCII characters up to 22 (hash-
key1) or 121 (hash-key2) characters in length (encrypted). If spaces are used in the string,
enclose the entire string in quotation marks (“ ”).
This is useful when a user must configure the parameter, but for security purposes, the actual
unencrypted key value is not provided.
hash — Specifies the key is entered in an encrypted form. If the hash or hash2 parameter is not
used, the key is assumed to be in an unencrypted, clear text form. For security, all keys are
stored in encrypted form in the configuration file with the hash or hash2 parameter specified
hash2 — Specifies the key is entered in a more complex encrypted form that involves more
variables than the key value alone, meaning that the hash2 encrypted variable cannot be
copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in an
unencrypted, clear text form. For security, all keys are stored in encrypted form in the
configuration file with the hash or hash2 parameter specified.
backup
Syntax [no] backup ip-address
Context config>router>if>vrrp
Description This command associates router IP addresses with the parental IP interface IP addresses.
The backup command has two distinct functions when used in an owner or a non-owner context of
the virtual router instance.