Networking

4

 

Configuring VRRP

 

 

 

 

 

STEP 2 Check the box next to Enable Virtual Router Redundancy Protocol (VRRP) to enable VRRP, or uncheck this box to disable it.

STEP 3 If you enable VRRP, enter the following information:

Interface: The default port of the master virtual router (your security appliance).

Source IP: The source IP address of the master virtual router.

NOTE: If a VRRP router owns the IP address of the virtual router and the IP address of the physical interface, this router will function as a master virtual router.

VRID: The ID of the master virtual router. A virtual router has a unique ID that will be represented as the unique virtual MAC address. Enter a value from 1 to 255.

Priority: The priority of the master virtual router. Priority determines the role that each VRRP router plays and what happens if the master virtual router fails. Enter a value from 1 to 254.

Advertisement Interval: Specify the interval in seconds between successive advertisements by the master virtual router in a VRRP group. By default, the advertisements are sent every one second. The advertisements being sent by the master virtual router communicate the state and priority of the current master virtual router.

NOTE: All routers in a VRRP group must use the same advertisement interval value. If the interval values are not same, the routers in the VRRP group will not communicate with each other and any mis-configured router will change its state to master.

Verify: Click On to enable the authentication, or click Off to disable it. The security appliance will ignore incoming VRRP packets from routers that do not have the same authentication configuration for a VRRP group. VRRP supports the plaintext and IPsec-AH authentication schemes. Choose either Pass or AH as the authentication scheme and specify the settings.

Virtual IP Address: Enter the virtual IP address used for all backup virtual routers in the same group.

Status: Displays the status of VRRP verification.

STEP 4 Click Save to apply your settings.

Cisco ISA500 Series Integrated Security Appliances Administration Guide

174

Page 174
Image 174
Casio ISA550WBUN3K9 manual Networking