vrrp virtual-router-id [owner]
no vrrp virtual-router-id
config>service>ies>if
7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C
This command creates or edits a Virtual Router ID (VRID) on the service IP interface. A VRID is internally represented in conjunction with the IP interface name. This allows the VRID to be used on multiple IP interfaces while representing different virtual router instances.
Two VRRP nodes can be defined on an IP interface. One, both, or none may be defined as an owner. The vrrp virtual-router-id context defines the configuration parameters for the VRID.
The no form of this command removes the specified VRID from the IP interface. This terminates VRRP participation for the virtual router and deletes all references to the VRID. The VRID does not need to be shut down to remove the virtual router instance.
Specifies a new virtual router ID or one that can be modified on the IP interface.
Keyword that defines the virtual router instance as an owner.
authentication-key [authentication-key | hash-key] [hash | hash2]
no authentication-key
config>service>ies>if>vrrp
7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C
This command assigns a simple text password authentication key to generate master VRRP advertisement messages and validate received VRRP advertisement messages.
The authentication-key command is one of the few commands not affected by the presence of the owner keyword. If simple text password authentication is not required, this command is not required. If the command is re-executed with a different password key defined, the new key is used immediately.
If a no authentication-key command is executed, the password authentication key is restored to the default value. The authentication-key command may be executed at any time, altering the simple text password used when authentication-type password authentication method is used by the virtual router instance. The authentication-type password command does not need to be executed before defining the authentication-key command.
To change the current in-use password key on multiple virtual router instances:
identify the current master
shut down the virtual router instance on all backups
execute the authentication-key command on the master to change the password key
execute the authentication-key command and no shutdown command on each backup key
By default, the authentication data field contains the value 0 in all 16 octets.
The no form of this command restores the default null string to the value of key.
Specifies the simple text password used when VRRP Authentication Type 1 is enabled on the virtual router instance. Type 1 uses a string eight octets long that is inserted into all transmitted VRRP advertisement messages and compared against all received VRRP advertisement messages. The authentication data fields are used to transmit the key.
The authentication-key parameter is expressed as a string consisting of up to eight alpha-numeric characters. Spaces must be contained in quotation marks ( ‟ ” ). The quotation marks are not considered part of the string.
The string is case-sensitive and is left-justified in the VRRP advertisement message authentication data fields. The first field contains the first four characters with the first octet (starting with IETF RFC bit position 0) containing the first character. The second field holds the fifth through eighth characters. Any unspecified portion of the authentication data field is padded with the value 0 in the corresponding octet.
Specifies the hash key. The key can be any combination of ASCII characters up to 22 characters (encrypted). If spaces are used in the string, enclose the entire string in quotation marks (‟ ”).
This option is useful when a user must configure the parameter, but, for security purposes, the actual unencrypted key value is not provided.
Keyword to specify the key is entered in an encrypted form. If the hash parameter is not used, the key is assumed to be in a non-encrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash parameter specified.
Keyword to specify the key is entered in a more complex encrypted form. If the hash2 parameter is not used, the less encrypted hash form is assumed.
[no] backup ip-address
config>service>ies>if>vrrp
7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C
This command configures virtual router IP addresses for the interface.
no backup
Specifies the destination IP address for backup.
bfd-enable service-id interface interface-name dst-ip ip-address
no bfd-enable service-id if if-name dst-ip ip-address
bfd-enable interface interface-name dst-ip ip-address
no bfd-enable interface interface-name dst-ip ip-address
config>service>ies>if>vrrp
7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C
This command enables the use of bidirectional forwarding (BFD) to control the state of the associated protocol interface. By enabling BFD on a specific protocol interface, the state of the protocol interface is tied to the state of the BFD session between the local node and the remote node. The parameters used for the BFD are set using the BFD command under the IP interface.
The no form of this command removes BFD from the associated BGP protocol peering.
no bfd-enable
init-delay seconds
no init-delay
config>service>ies>if>vrrp
7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C
This command configures a VRRP initialization delay timer.
no init-delay
Specifies the initialization delay timer for VRRP, in seconds.
[no] master-int-inherit
config>service>ies>if>vrrp
7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C
This command allows the master instance to dictate the master down timer (non-owner context only).
no master-int-inherit
message-interval {[seconds] [milliseconds milliseconds]}
no message-interval
config>service>ies>if>vrrp
7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C
This command sets the advertisement timer and indirectly sets the master down timer on the virtual router instance. The message-interval setting must be the same for all virtual routers participating as a virtual router. Any VRRP advertisement message received with an Advertisement Interval field different from the virtual router instance configured message-interval value will be silently discarded.
This command is available in both non-owner and owner vrrp virtual-router-id nodal contexts. If the message-interval command is not executed, the default message interval of 1 second is used.
The no form of this command reverts to the default value.
Specifies the number of seconds that will transpire before the advertisement timer expires.
Specifies the milliseconds time interval between sending advertisement messages. This parameter is not supported on single-slot chassis.
[no] ping-reply
config>service>ies>if>vrrp
7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C
This command enables the non-owner master to reply to ICMP echo requests directed to the virtual router instance IP addresses. The ping request can be received on any routed interface.
Ping must not have been disabled at the management security level (either on the parental IP interface or based on the ping source host address). When ping reply is not enabled, ICMP echo requests to non-owner master virtual IP addresses are silently discarded.
Non-owner backup virtual routers never respond to ICMP echo requests regardless of the setting of ping reply configuration.
The ping-reply command is available only in non-owner vrrp virtual-router-id nodal context. If the ping-reply command is not executed, ICMP echo requests to the virtual router instance IP addresses are silently discarded.
The no form of this command reverts to the default operation of discarding all ICMP echo request messages destined to the non-owner virtual router instance IP addresses.
no ping-reply
policy vrrp-policy-id
no policy
config>service>ies>if>vrrp
7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C
This command associates a VRRP priority control policy with the virtual router instance (non-owner context only).
Specifies a VRRP priority control policy.
preempt
no preempt
config>service>ies>if>vrrp
7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C
This command provides the ability to override an existing non-owner master to the virtual router instance. Enabling preempt mode is recommended for correct operation of the base priority and VRRP policy ID definitions on the virtual router instance. If the virtual router cannot preempt an existing non-owner master, the affect of the dynamic changing of the in-use priority is greatly diminished.
The preempt command is available only in the non-owner vrrp virtual-router-id nodal context. The owner may not be preempted because the priority of non-owners can never be higher than the owner. The owner always preempts all other virtual routers when it is available.
Non-owner virtual router instances only preempt when preempt is set and the current master has an in-use message priority value less than the virtual router instance in-use priority.
A master non-owner virtual router allows itself to be preempted only when the incoming VRRP advertisement message priority field value is one of the following:
greater than the virtual router in-use priority value
equal to the in-use priority value and the source IP address (primary IP address) is greater than the virtual router instance primary IP address
The no form of this command prevents a non-owner virtual router instance from preempting another, less desirable virtual router. Use the preempt command to revert to the default mode.
preempt
priority priority
no priority
config>service>ies>if>vrrp
7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C
This command configures a specific priority value for the virtual router instance. In conjunction with an optional policy command, the base-priority is used to derive the in-use priority of the virtual router instance.
The priority command is available only in the non-owner vrrp virtual-router-id nodal context. The priority of owner virtual router instances is permanently set to 255 and cannot be changed. For non-owner virtual router instances, if the priority command is not executed, the base-priority is set to 100.
The no form of this command reverts to the default value of 100.
Specifies the base priority used by the virtual router instance. If a VRRP priority control policy is not also defined, the base-priority is the in-use priority for the virtual router instance.
[no] ssh-reply
config>service>ies>if>vrrp
7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C
This command enables the non-owner master to reply to SSH requests directed at the virtual router instance IP addresses. The SSH request can be received on any routed interface. SSH must not have been disabled at the management security level (either on the parent IP interface or based on the SSH source host address). Proper login and CLI command authentication is still enforced.
When the ssh-reply command is not enabled, SSH packets to non-owner master virtual IP addresses are silently discarded. Non-owner backup virtual routers never respond to SSH regardless of the SSH reply configuration.
The ssh-reply command is available only in non-owner vrrp virtual-router-id nodal context. If the ssh-reply command is not executed, SSH packets to the virtual router instance IP addresses are silently discarded.
The no form of this command reverts to the default operation of discarding all SSH packets destined to the non-owner virtual router instance IP addresses.
no ssh-reply
[no] standby-forwarding
config>service>ies>if>vrrp
7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C
This command allows the forwarding of packets by a standby router.
The no form of this command specifies that a standby router should not forward traffic sent to the virtual router MAC address. The standby router should forward traffic sent to the real MAC address of the standby router.
no standby-forwarding
[no] telnet-reply
config>service>ies>if>vrrp
7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C
This command enables the non-owner master to reply to TCP port 23 Telnet requests directed at the virtual router instance IP addresses. The Telnet request can be received on any routed interface. Telnet must not have been disabled at the management security level (either on the parent IP interface or based on the Telnet source host address). Proper login and CLI command authentication is still enforced.
When the telnet-reply command is not enabled, TCP port 23 Telnet packets to non-owner master virtual IP addresses are silently discarded.
Non-owner backup virtual routers never respond to Telnet requests regardless of the telnet-reply configuration.
The telnet-reply command is available only in non-owner VRRP nodal context. If the telnet-reply command is not executed, Telnet packets to the virtual router instance IP addresses are silently discarded.
The no form of this command revert to the default operation of discarding all Telnet packets destined to the non-owner virtual router instance IP addresses.
no telnet-reply
[no] traceroute-reply
config>service>ies>if>vrrp
7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C
This command enables a non-owner master to reply to traceroute requests directed to the virtual router instance IP addresses.
This command is valid only if the VRRP virtual router instance associated with this entry is a non-owner.
A non-owner backup virtual router never responds to such traceroute requests regardless of the traceroute reply status.
no traceroute-reply