Cisco Nexus 7000 Series - Authenticating HSRP

Send document comments to nexus7k-docfeedback@cisco.com.
19-11
Cisco Nexus 7000 Series NX-OS Unicast Routing Configuration Guide, Release 4.x
OL-20002-02
Chapter 19 Configuring HSRP
Configuring HSRP
Authenticating HSRP
You can configure HSRP to authenticate the protocol using cleartext or MD5 digest authentication. MD5
authentication uses a key chain (see the Cisco Nexus 7000 Series NX-OS Security Configuration Guide,
Release 4.x).
BEFORE YOU BEGIN
Ensure that you have enabled the HSRP feature (see the “Enabling the HSRP Feature” section on
page 19-8).
You must configure the same authentication and keys on all members of the HSRP group.
Ensure that you have created the key chain if you are using MD5 authentication.
Ensure that you are in the correct VDC (or use the switchto vdc command).
SUMMARY STEPS
1. config t
2. interface interface-type slot/port
3. hsrp group-number
4. authentication text string
or
authentication md5 {key-chain key-chain | key-string {0 | 7} text [timeout seconds]}
5. show hsrp [group group-number]
6. copy running-config startup-config
DETAILED STEPS
Command Purpose
hsrp use-bia [scope interface]
Example:
switch(config-if)# hsrp use-bia
Configures HSRP to use the burned-in MAC
address of the interface for the HSRP virtual MAC
address. You can optionally configure HSRP to use
the burned-in MAC address for all groups on this
interface by using the scope interface keywords.
Command Purpose
Step 1
config t
Example:
switch# config t
switch(config)#
Enters configuration mode.
Step 2
interface interface-type slot/port
Example:
switch(config)# interface ethernet 1/2
switch(config-if)#
Enters interface configuration mode.