Virtual Router Redundancy Protocol Commands
5-192 Configuring the Internet Protocol
messageisacceptedandifnot,itisdiscarded.Allrouterswithinthegroupmustsharethesame
authenticationstring.
Syntax
vrrp group authentication string
Syntax of the “no” Form
DisableVRRPauthenticationbyusingthenoformofthiscommand:
no vrrp group authentication
Defaults
•NoauthenticationofVRRPmessagesoccurs.
•Group:1,rangingfrom1to255
Mode
Interfaceconfiguration:XSR(config-if<xx>)#
Examples
ThefollowingexampleenablesauthenticationforVRgroup1onF1:
XSR(config)#interface fastethernet 1
XSR(config-if<F1>)#vrrp 1 authentication mypass or vrrp authentication mypass
Thefollowingexampledisablesauthentication:
XSR(config-if<F1>)#no vrrp 1 authentication or no vrrp authentication

vrrp <group> ip

Thiscommandaddsupto11virtualIPaddressespergroupandenablesacorrespondingVirtual
Router(VR)onaninterface.Beawareofthesecaveats:
•IfthefirstvirtualaddressforoneVRisoneoftherealaddressesintheXSR(itmustbeonthe
sameport),thenextonemustalsobeoneoftherealaddresses(itmustbeonthesameport).
•Ifthefirstvirtualaddressisnotoneoftherealaddressesonacertainport,thenextonemust
notbeoneoftherealaddressesonthatport.
•ThesetofvirtualIPaddressesconfiguredoneachVRRProuterbelongingtothesamegroup
mustbethesame.
Note: Plain text authentication is not meant to be used for security. It simply provides a way to
prevent a misconfigured router from participating in the VRRP.
group Virtualroutergroupnumber.
string String(upto8alphanumericcharacters)tovalidateincomingVRRPpackets.