Chapter 28
| VRRP Commands
– 793 –
â—† When a VRRP packet is received from another router in the group, its
authentication key is compared to the string configured on this router. If the
keys match, the message is accepted. Otherwise, the packet is discarded.
â—† Plain text authentication does not provide any real security. It is supported only
to prevent a misconfigured router from participating in VRRP.
Example
Console(config-if)#vrrp 1 authentication bluebird
Console(config-if)#
vrrp ip This command enables the Virtual Router Redundancy Protocol (VRRP) on an
interface and specifies the IP address of the virtual router. Use the no form to
disable VRRP on an interface and remove the IP address from the virtual router.
Syntax
[no] vrrp group ip ip-address
group - Identifies the virtual router group. (Range: 1-255)
The maximum number or groups which can be defined is 64.
ip-address - The IP address of the virtual router. This is the IP address that
end-hosts set as their default gateway.
Default Setting
No virtual router groups are configured.
Command Mode
Interface (VLAN)
Command Usage
â—† The interfaces of all routers participating in a virtual router group must be
within the same IP subnet.
â—† If the IP address assigned to the virtual router with this command is already
configured as the primary address on this interface, this router is considered
the Owner, and will assume the role of the Master virtual router in the group.
â—† This interface is used for two purposes - to send/receive advertisement
messages and to forward on behalf of the virtual router when operating as the
Master VRRP router.
â—† VRRP is enabled as soon as this command is entered. If you need to customize
any of the other parameters for VRRP such as authentication, priority, or
advertisement interval, then first configure these parameters before enabling
VRRP.