User`s guide
Monitoring VRRP
Matrix DFE Series and N-SA User’s Guide 9-17
VRRP Authentication Commands
Bydefault,noauthenticationofVRRPpacketsisperformedontheMatrixDFESeriesorN‐SA
device.Youcanspecifyacleartextoramessagedigest(MD5)passwordtobeusedtoauthenticate
VRRPexchangesonroutinginterfaces.
Usethefollowingcommandininterfaceconfigurationmodetoseta
cleartextauthentication
password:
ip vrrp authentication-key password
Passwordisatextstring1to8charactersinlength.
UsethefollowingcommandininterfaceconfigurationmodetosetanMD5authentication
password:
ip vrrp message-digest-key vrid md5 password
Passwordisatextstring1to16charactersinlength.
Monitoring VRRP
UsethefollowingcommandinglobalconfigurationmodetodisplayVRRProutinginformation:
show ip vrrp
Example
ThisexampleshowsthatRouter1isconfiguredonVLAN1,VRID1,asthemasterrouterof
VRID1andtheownerofIPaddress10.0.0.1.ItalsoshowsRouter1isconfiguredasthe
primarybackuprouterforVRIDs2and3:
VRRP Configuration Notes
Determining the Backup to Master Time Interval
Ifabackuprouterdoesn’treceiveakeep‐aliveadvertisementfromthecurrentmasterwithina
certainperiodoftime,itwilltransitiontothemasterstateandstartsendingadvertisementsto
itself.Theamountoftimethatabackuprouterwillwaitbeforeitbecomesthenewmasterisbased
onthefollowingequation:
Master‐down‐interval=(3*advertisement‐interval)+skew‐time
Theskew‐timedependsonthebackuprouter’sconfiguredpriority:
Skew‐time=((256‐Priority)/256)
Therefore,thehigherthepriority,the fasterabackuprouterwilldetectthatthemasterisdown.
Forexample:
•Defaultadvertisement
‐interval=1second
Matrix>Router1(config)#show ip vrrp
-----------VRRP CONFIGURATION-----------
Vlan Vrid State Owner AssocIpAddr
1 1 Master 1 10.0.0.1
1 2 Primary 0 10.0.0.2
1 3 Primary 0 10.0.0.3