Brocade Communications Systems Layer 3 Routing Configuration ICX 6650 - Manual (Page 451)

Brocade ICX 6650 Layer 3 Routing Configuration Guide 433
53-1002603-01
Additional VRRP and VRRP-E parameter configuration
VRRP and VRRP-E authentication types
This section describes VRRP and VRRP-E authentication parameters.
Configuring authentication type
The Brocade implementation of VRRP and VRRP-E supports the following authentication types for
authenticating VRRP and VRRP-E traffic:
• No authentication – The interfaces do not use authentication. This is the default for VRRP and
VRRP-E.
• Simple – The interfaces use a simple text-string as a password in packets sent on the
interface. If the interfaces use simple password authentication, the VRID configured on the
interfaces must use the same authentication type and the same password.
VRRP-E also supports the following authentication type:
• HMAC-MD5-96 – The interfaces use HMAC-MD5-96 authentication for VRRP-E packets.
NOTE
HMAC-MD5-96 authentication is not supported for VRRP.
To configure the VRID interface on Switch 1 for simple password authentication using the password
“ourpword”, enter the following commands.
Configuring Switch 1
Brocade Switch1(config)#inter e 1/1/6
Brocade Switch1(config-if-e10000-1/1/6)#ip vrrp auth-type simple-text-auth
ourpword
VRRP syntax
Syntax: auth-type no-auth | simple-text-auth auth-data
The auth-type no-auth option indicates that the VRID and the interface it is configured on do not
use authentication.
The simple-text-auth auth-data option indicates that the VRID and the interface it is configured on
use a simple text password for authentication. The auth-data variable is the password. If you use
this variable, make sure all interfaces on all the routers supporting this VRID are configured for
simple password authentication and use the same password.
NOTE
For VRRP v3, authentication is deprecated by RFC 5768.