Cisco Nexus 7000 Series - Configuring HSRP Object Tracking

Send document comments to nexus7k-docfeedback@cisco.com.
19-12
Cisco Nexus 7000 Series NX-OS Unicast Routing Configuration Guide, Release 4.x
OL-20002-02
Chapter 19 Configuring HSRP
Configuring HSRP
The following example shows how to configure MD5 authentication for HSRP on Ethernet 1/2 after
creating the key chain:
switch# config t
switch(config)# key chain hsrp-keys
switch(config-keychain)# key 0
switch(config-keychain-key)# key-string 7 zqdest
switch(config-keychain-key) accept-lifetime 00:00:00 Jun 01 2008 23:59:59 Sep 12 2008
switch(config-keychain-key) send-lifetime 00:00:00 Jun 01 2008 23:59:59 Aug 12 2008
switch(config-keychain-key) key 1
switch(config-keychain-key) key-string 7 uaeqdyito
switch(config-keychain-key) accept-lifetime 00:00:00 Aug 12 2008 23:59:59 Dec 12 2008
switch(config-keychain-key) send-lifetime 00:00:00 Sep 12 2008 23:59:59 Nov 12 2008
switch(config-keychain-key)# interface ethernet 1/2
switch(config-if)# hsrp 2
switch(config-if-hsrp)# authenticate md5 key-chain hsrp-keys
switch(config-if-hsrp)# copy running-config startup-config
Configuring HSRP Object Tracking
You can configure an HSRP group to adjust its priority based on the availability of other interfaces or
routes. The priority of a device can change dynamically if it has been configured for object tracking and
the object that is being tracked goes down. The tracking process periodically polls the tracked objects
and notes any value change. The value change triggers HSRP to recalculate the priority. The HSRP
interface with the higher priority becomes the active router if you configure the HSRP interface for
preemption. HSRP supports tracked objects and track lists. See Chapter 21, “Configuring Object
Tracking” for more information on track lists.
Step 3
hsrp group-number
Example:
switch(config-if)# hsrp 2
switch(config-if-hsrp)#
Creates an HSRP group and enters HSRP
configuration mode.
Step 4
authentication text string
Example:
switch(config-if-hsrp)# authentication
text mypassword
Configures cleartext authentication for HSRP on this
interface.
authentication md5 {key-chain key-chain
| key-string {0 | 7}
text [timeout
seconds ]}
Example:
switch(config-if-hsrp)# authentication
md5 key-chain hsrp-keys
Configures MD5 authentication for HSRP on this
interface. You can use a key chain or key string. If you
use a key string, you can optionally set the timeout for
when HSRP will only accept a new key. The range is
from 0 to 32767 seconds.
Step 5
show hsrp [group group-number ]
Example:
switch(config-if-hsrp)# show hsrp group
2
(Optional) Displays HSRP information.
Step 6
copy running-config startup-config
Example:
switch(config-if-hsrp)# copy
running-config startup-config
(Optional) Saves this configuration change.
Command Purpose