vrrp virtual-router-id [owner]
no vrrp virtual-router-id
config>service>vprn>if
Supported on all 7210 SAS platforms as described in this document
This command creates or edits a Virtual Router ID (VRID) on the service IP interface. A VRID is internally represented in conjunction with the IP interface name. This allows the VRID to be used on multiple IP interfaces while representing different virtual router instances.
Two VRRP nodes can be defined on an IP interface. One, both, or none may be defined as owner. The nodal context of vrrp virtual-router-id is used to define the configuration parameters for the VRID.
The no form of this command removes the specified VRID from the IP interface. This terminates VRRP participation for the virtual router and deletes all references to the VRID. The VRID does not need to be shut down to remove the virtual router instance.
Specifies a new virtual router ID or one that can be modified on the IP interface.
Keyword that defines the virtual router instance as an owner.
authentication-key [authentication-key | hash-key] [hash | hash2]
no authentication-key
config>service>vprn>if>vrrp
config>service>vprn>if>vrrp
Supported on all 7210 SAS platforms as described in this document
This command assigns a simple text password authentication key to generate master VRRP advertisement messages and validate received VRRP advertisement messages.
The authentication-key command is one of the few commands not affected by the presence of the owner keyword. If simple text password authentication is not required, this command is not required. If the command is re-executed with a different password key defined, the new key will be used immediately. If a no authentication-key command is executed, the password authentication key reverts to the default value. The authentication-key command may be executed at any time, altering the simple text password used when authentication-key password authentication method is used by the virtual router instance. The authentication-type password command does not need to be executed before defining the authentication-key command.
To change the current in-use password key on multiple virtual router instances:
identify the current master
shut down the virtual router instance on all backups
execute the authentication-key command on the master to change the password key
execute the authentication-key command and no shutdown command on each backup key
The no form of this command reverts to the default value of the key.
Specifies the simple text password used when VRRP Authentication Type 1 is enabled on the virtual router instance. Type 1 uses a string eight octets long that is inserted into all transmitted VRRP advertisement messages and compared against all received VRRP advertisement messages. The authentication data fields are used to transmit the key.
The authentication-key parameter is expressed as a string consisting of up to eight alpha-numeric characters. Spaces must be contained in quotation marks ( ‟ ” ). The quotation marks are not considered part of the string.
The string is case-sensitive and is left-justified in the VRRP advertisement message authentication data fields. The first field contains the first four characters with the first octet (starting with IETF RFC bit position 0) containing the first character. The second field holds the fifth through eighth characters. Any unspecified portion of the authentication data field is padded with the value 0 in the corresponding octet.
Specifies the hash key. The key can be any combination of ASCII characters up to 22 characters (encrypted). If spaces are used in the string, enclose the entire string in quotation marks (‟ ”).
This is useful when a user must configure the parameter, but, for security purposes, the actual unencrypted key value is not provided.
Specifies the key is entered in an encrypted form. If the hash parameter is not used, the key is assumed to be in a non-encrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash parameter specified.
Specifies the key is entered in a more complex encrypted form. If the hash2 parameter is not used, the less encrypted hash form is assumed.
[no] backup ip-address
config>service>vprn>if>vrrp
Supported on all 7210 SAS platforms as described in this document
This command configures virtual router IP addresses for the interface.
init-delay seconds
no init-delay
config>service>vprn>if>vrrp
Supported on all 7210 SAS platforms as described in this document
This command configures a VRRP initialization delay timer.
no init-delay
Specifies the initialization delay timer for VRRP, in seconds.
[no] mac ieee-mac-address
config>service>vprn>if>vrrp
Supported on all 7210 SAS platforms as described in this document
This command assigns a specific MAC address to an IP interface.
By default, the physical MAC address associated with the Ethernet interface that the SAP is configured on is used.
The no form of this command reverts the MAC address of the IP interface to the default value.
Specifies the 48-bit MAC address for the static ARP in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff, where aa, bb, cc, dd, ee and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.
[no] master-int-inherit
config>service>vprn>if>vrrp
Supported on all 7210 SAS platforms as described in this document
This command allows the master instance to dictate the master down timer (non-owner context only).
no master-int-inherit
message-interval {[seconds] [milliseconds milliseconds]}
no message-interval
config>service>vprn>if
Supported on all 7210 SAS platforms as described in this document
This command sets the advertisement timer and indirectly sets the master down timer on the virtual router instance. The message-interval setting must be the same for all virtual routers participating as a virtual router. Any VRRP advertisement message received with an advertisement interval field different from the virtual router instance configured message-interval value is silently discarded.
The message-interval command is available in both non-owner and owner vrrp virtual-router-id nodal contexts. If the message-interval command is not executed, the default message interval of 1 second is used.
The no form of this command reverts to the default value.
1 s
Specifies the number of seconds that transpires before the advertisement timer expires.
Specifies the milliseconds time interval between sending advertisement messages. This parameter is not supported on single-slot chassis.
[no] ping-reply
config>service>vprn>if>vrrp
Supported on all 7210 SAS platforms as described in this document
This command allows the non-owner master to reply to ICMP echo requests directed at the virtual router instances IP addresses. The ping request can be received on any routed interface.
Ping must not have been disabled at the management security level (either on the parent IP interface or based on the ping source host address). When ping reply is not enabled, ICMP echo requests to non-owner master virtual IP addresses are silently discarded.
Non-owner backup virtual routers never respond to ICMP echo requests regardless of the setting of ping-reply configuration.
The ping-reply command is available only in the non-owner vrrp virtual-router-id context. If the ping-reply command is not executed, ICMP echo requests to the virtual router instance IP addresses are silently discarded.
The no form of this command reverts the default operation of discarding all ICMP echo request messages destined for the non-owner virtual router instance IP addresses.
no ping-reply
policy vrrp-policy-id
no policy
config>service>vprn>if>vrrp
Supported on all 7210 SAS platforms as described in this document
This command associates a VRRP priority control policy with the virtual router instance (non-owner context only).
Specifies a VRRP priority control policy.
preempt
no preempt
config>service>vprn>if
Supported on all 7210 SAS platforms as described in this document
This command configures the ability to override an existing non-owner master with the virtual router instance. Enabling preempt mode is recommended for correct operation of the base-priority and vrrp-policy-id definitions on the virtual router instance. If the virtual router cannot preempt an existing non-owner master, the affect of the dynamic changing of the in-use priority is greatly diminished.
The preempt command is available only in the non-owner vrrp virtual-router-id context. The owner may not be preempted because the priority of non-owners can never be higher than the owner. The owner always preempts all other virtual routers when it is available.
Non-owner virtual router instances only preempt when preempt is set and the current master has an in-use message priority value less than the virtual router instance in-use priority.
A master non-owner virtual router only allows itself to be preempted when the incoming VRRP advertisement message priority field value is one of the following:
creater than the virtual router in-use priority value
equal to the in-use priority value, and the source IP address (primary IP address) is greater than the virtual router instance primary IP address
The no form of this command prevents a non-owner virtual router instance from preempting another, less desirable, virtual router.
preempt
priority priority
no priority
config>service>vprn>if>vrrp
Supported on all 7210 SAS platforms as described in this document
This command configures a specific priority value for the virtual router instance. In conjunction with an optional policy command, the base priority is used to derive the in-use priority of the virtual router instance.
The policy command is available only in the non-owner vrrp virtual-router-id context. The priority of owner virtual router instances is permanently set to 255 and cannot be changed. For non-owner virtual router instances, if the priority command is not executed, the base priority is set to 100.
The no form of this command reverts to the default value.
Specifies the base priority used by the virtual router instance. If a VRRP priority control policy is not also defined, the base priority is the in-use priority for the virtual router instance.
[no] ssh-reply
config>service>vprn>if>vrrp
Supported on all 7210 SAS platforms as described in this document
This command allows the non-owner master to reply to SSH requests directed at the virtual router instance IP addresses. The SSH request can be received on any routed interface. SSH must not have been disabled at the management security level (either on the parental IP interface or based on the SSH source host address). Correct login and CLI command authentication is still enforced.
When the ssh-reply command is not enabled, SSH packets to non-owner master virtual IP addresses are silently discarded. Non-owner backup virtual routers never respond to SSH regardless of the ssh-reply configuration.
The ssh-reply command is available only in the non-owner vrrp virtual-router-id context. If the ssh-reply command is not executed, SSH packets to the virtual router instance IP addresses are silently discarded.
The no form of this command reverts to the default operation of discarding all SSH packets destined to the non-owner virtual router instance IP addresses.
no ssh-reply
[no] standby-forwarding
config>service>vprn>if>vrrp
Supported on all 7210 SAS platforms as described in this document
This command allows the forwarding of packets by a standby router.
The no form of this command specifies that a standby router should not forward traffic sent to the virtual router MAC address. The standby router should forward traffic sent to the real MAC address of the standby router.
no standby-forwarding
[no] telnet-reply
config>service>vprn>if>vrrp
Supported on all 7210 SAS platforms as described in this document
This command allows the non-owner master to reply to TCP port 23 Telnet requests directed at the virtual router instance IP addresses. The Telnet request can be received on any routed interface. Telnet must not have been disabled at the management security level (either on the parental IP interface or based on the Telnet source host address). Correct login and CLI command authentication is still enforced.
When the telnet-reply command is not enabled, TCP port 23 Telnet packets to non-owner master virtual IP addresses are silently discarded.
Non-owner backup virtual routers never respond to Telnet requests regardless of the Telnet reply configuration.
The telnet-reply command is available only in the non-owner vrrp context. If the telnet-reply command is not executed, Telnet packets to the virtual router instance IP addresses are silently discarded.
The no form of this command reverts to the default operation of discarding all Telnet packets destined for the non-owner virtual router instance IP addresses.
no telnet-reply
[no] traceroute-reply
config>service>vprn>if>vrrp
Supported on all 7210 SAS platforms as described in this document
This command allows a non-owner master to reply to traceroute requests directed to the virtual router instance IP addresses.
This command is valid only if the VRRP virtual router instance associated with this entry is a non-owner.
A non-owner backup virtual router never responds to traceroute requests regardless of the traceroute reply status.
no traceroute-reply