Brocade Communications Systems FastIron X Series User Manual

VRRP and VRRP-E authentication types
This section describes VRRP and VRRP-E authentication parameters.
Conguring authentication type
The Brocade implementation of VRRP and VRRP-E supports the following authentication types for authenticating VRRP and VRRP-E
trac:
• No authentication - The interfaces do not use authentication. This is the default for VRRP and VRRP-E both for IPv4 and IPv6.
• Simple - The interfaces use a simple text-string as a password in packets sent on the interface.
• All interfaces on the same VRID must use the same authentication type and the same password.
IPv4 VRRP-E and IPv6 VRRP-E supports the following authentication type:
• HMAC-MD5-96 - The interfaces use HMAC-MD5-96 authentication for VRRP-E packets.
NOTE
HMAC-MD5-96 authentication is not supported for VRRP.
To congure the VRID interface on Switch 1 for simple password authentication using the password "ourpword", enter the following
commands.
Conguring Switch 1
device Switch1(config)#interface ethernet 1/1/6
device Switch1(config-if-1/1/6)#ip vrrp auth-type simple-text-auth ourpword
VRRP syntax
Syntax: auth-type no-auth | simple-text-auth auth-data
The auth-type no-auth option indicates that the VRID and the interface it is
congured on do not use authentication.
The simple-text-auth auth-data option indicates that the VRID and the interface it is congured on use a simple text password for
authentication. The auth-data variable is the password. If you use this variable, make sure all interfaces on all the routers supporting this
VRID are congured for simple password authentication and use the same password.
NOTE
For VRRP v3, authentication is deprecated by RFC 5768.
VRRP-E syntax
For IPv4 VRRP-E:
Syntax: ip vrrp-extended auth-type no-auth | simple-text-auth auth-data | md5-auth [ 0 |1 ] key
For IPv6 VRRP-E:
Syntax: ipv6 vrrp-extended auth-type no-auth | simple-text-auth auth-data | md5-auth [ 0 | 1 ] key
The values for the no-auth and simple-text-auth auth-data options are the same as for VRRP.
The md5-auth option congures the interface to use HMAC-MD5-96 for VRRP-E authentication.
Additional VRRP and VRRP-E parameter conguration
FastIron Ethernet Switch Layer 3 Routing
53-1003627-04 529

Brocade Communications Systems FastIron X Series Specifications

General

Brand	Brocade Communications Systems
Model	FastIron X Series
Category	Switch
Language	English