vrrp vrid authentication-mode

Function

The vrrp vrid authentication-mode command sets the authentication mode and key for all the VRRP groups on one interface.

The undo vrrp vrid authentication-mode command restores the authentication mode and key for all the VRRP groups on one interface to the default setting.

Format

vrrp vrid virtual-router-ID authentication-mode { simple [ plain | cipher ] password | md5 password }

undo vrrp vrid virtual-router-ID authentication-mode

Parameters

Parameter	Description	Value
virtual-router-ID	Specifies the ID of a VRRP group.	The value must be the ID of an existing VRRP group.
simple	Refers to simple text authentication.	-
plain	Indicates the password in explicit text. Only the explicit text password can be entered. The password in the configuration file is displayed in explicit text. NOTICE: If this parameter is set, the password is saved in the configuration file in plaintext, which brings security risks. Using the ciphertext mode is recommended. Change the password on a regular basis.	-
cipher	Indicates the password in ciphertext. The explicit text password or the ciphertext password can be entered. The password in the configuration file is displayed in ciphertext. Authentication is in ciphertext by default.	-
md5	Refers to MD5 authentication.	-
password	Specifies the authentication key of MD5 authentication.	The value is a string that contains 1 to 8 characters and is saved in 32-character (simple mode) or 24-character (md5 mode) cipher text. To enhance security, the password is recommended to meet the minimum strength requirement, that is, it needs to contain at least three types of the following characters: upper-case letters (A to Z), lower-case letters (a to z), digits (0 to 9), and special characters such as exclamation points (!), at signs (@), number signs (#), dollar signs ($), and percent (%).

Views

Interface view

Default Level

2: Configuration level

Usage Guidelines

By default, no authentication mode is set.

Example

# Set the authentication key to Hi@123 for VRRP group 1 on GigabitEthernet 0/0/1.

<sysname> system-view
[sysname] interface GigabitEthernet 0/0/1
[sysname-GigabitEthernet0/0/1] vrrp vrid 1 authentication-mode md5 Hi@123