Configuring IPv4 VRRP packet attributes
Configuration guidelines
You can configure different authentication modes and authentication keys for VRRP groups on an interface. However, members of the same VRRP group must use the same authentication mode and authentication key.
In VRRPv2, all routers in a VRRP group must have the same VRRP advertisement interval.
In VRRPv3, authentication mode and authentication key settings do not take effect.
In VRRPv3, routers in an IPv4 VRRP group can have different intervals for sending VRRP advertisements. The master in the VRRP group sends VRRP advertisements at specified intervals, and carries the interval in the advertisements. After a backup receives the advertisement, it records the interval in the advertisement. If the backup does not receive a VRRP advertisement before the timer (3 x recorded interval + Skew_Time) expires, it regards the master as failed and takes over.
Configuration procedure
To configure VRRP packet attributes:
Step | Command | Remarks |
|---|---|---|
1. Enter system view. | system-view | N/A |
2. Enter interface view. | interface interface-type interface-number | N/A |
3. Configure the authentication mode and authentication key for an IPv4 VRRP group to send and receive VRRP packets. | vrrp vrid virtual-router-id authentication-mode { md5 | simple } { cipher | plain } string | By default, authentication is disabled. |
4. Set the interval at which the master in an IPv4 VRRP group sends VRRP advertisements. | vrrp vrid virtual-router-id timer advertise adver-interval | The default setting is 100 centiseconds. As a best practice to maintain system stability, set the VRRP advertisement interval to be greater than 100 centiseconds. |
5. Specify the source interface for receiving and sending VRRP packets. | vrrp vrid virtual-router-id source-interface interface-type interface-number | By default, the source interface for receiving and sending VRRP packets is not specified. The interface where the VRRP group resides sends and receives VRRP packets. |
6. Enable TTL check for IPv4 VRRP packets. | vrrp check-ttl enable | By default, TTL check for IPv4 VRRP packets is enabled. |
7. Return to system view. | quit | N/A |
8. Set a DSCP value for VRRP packets. | vrrp dscp dscp-value | The DSCP value identifies the packet priority during transmission. By default, the DSCP value for VRRP packets is 48. |