Configuration commands, Interface configuration commands, Authentication-key – Alcatel-Lucent 7750 SR OS User Manual

Page 227

Advertising
background image

VRRP

7750 SR OS Router Configuration Guide

Page 227

Configuration Commands

Interface Configuration Commands

authentication-key

Syntax

authentication-key [authentication-key | hash-key] [hash | hash2]
no authentication-key

Context

config>router>if>vrrp

Description

This command sets the simple text authentication key used to generate master VRRP advertisement
messages and validates VRRP advertisements.

If simple text password authentication is not required, the authenticaton-key command is not
required.

The command is configurable in both non-owner and owner vrrp nodal contexts.

The key parameter identifies the simple text password to be used when VRRP Authentication Type 1
is enabled on the virtual router instance. Type 1 uses an eight octet long string that is inserted into all
transmitted VRRP advertisement messages and is compared against all received VRRP advertisement
messages. The authentication data fields are used to transmit the key.

The key string is case sensitive and is left justified in the VRRP advertisement message authentication
data fields. The first field contains the first four characters with the first octet (starting with IETF RFC
bit position 0) containing the first character. The second field similarly holds the fifth through eighth
characters. Any unspecified portion of the authentication data field is padded with a 0 value in the
corresponding octet.

If the command is re-executed with a different password key defined, the new key is used
immediately.

The authentication-key command can be executed at anytime, altering the simple text password
used when the authentication-type password authentication method is specified for the virtual
router instance. The authentication-type password command does not have to be executed before
defining the authentication-key command.

To change the current in-use password key on multiple virtual router instances:

1. Identify the current master.

2. Shutdown the virtual router instance on all backups.

3. Execute the authentication-key command on the master to change the password key.

4. Execute the authentication-key command and no shutdown command on each backup.

The no form of the command reverts to the default value.

Default

no authentication-key - The authentication key value is the null string.

Advertising