Table Of Contents
VRRP Commands on Cisco IOS XR Software
clear vrrp statistics
interface (VRRP)
router vrrp
show vrrp
vrrp assume-ownership
vrrp delay
vrrp ipv4
vrrp preempt
vrrp priority
vrrp text-authentication
vrrp timer
vrrp track interface
VRRP Commands on Cisco IOS XR Software
This document describes the Cisco IOS XR software commands used to configure and monitor the Virtual Router Redundancy Protocol (VRRP).
For detailed information about VRRP concepts, configuration tasks, and examples, see the Cisco IOS XR IP Addresses and Services Configuration Guide.
clear vrrp statistics
To reset the Virtual Router Redundancy Protocol (VRRP) statistics (to zero or default value), use the clear vrrp statistics command in EXEC mode.
clear vrrp statistics [interface interface-type instance [vrid]]
Syntax Description
interface interface-type
|
(Optional) Interface type. For more information, use the question mark (?) online help function.
|
instance
|
(Optional) Either a physical interface instance or a virtual interface instance as follows:
• Physical interface instance. Naming notation is rack/slot/module/port and a slash between values is required as part of the notation.
– rack: Chassis number of the rack.
– slot: Physical slot number of the modular services card or line card.
– module: Module number. A physical layer interface module (PLIM) is always 0.
– port: Physical port number of the interface.
Note In references to a Management Ethernet interface located on a route processor card, the physical slot number is alphanumeric (RP0 or RP1) and the module is CPU0. Example: interface MgmtEth0/RP1/CPU0/0.
• Virtual interface instance. Number range varies depending on interface type.
For more information about the syntax for the router, use the question mark (?) online help function.
|
vrid
|
(Optional) Virtual router identifier, which is the number identifying the virtual router for which status is displayed.
|
Defaults
No default behavior or values
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 3.7.0
|
This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
If no interface is specified, the statistics for all virtual routers on all interfaces are cleared.
If no value for vrid is specified, the statistics for all virtual routers on the specified interface are cleared.
Task ID
Task ID
|
Operations
|
vrrp
|
read, write
|
Examples
The following example shows how to clear vrrp statistics:
RP/0/RP0/CPU0:router# clear vrrp statistics
Related Commands
Command
|
Description
|
show vrrp
|
Displays a brief or detailed status of one or all Virtual Router Redundancy Protocol (VRRP) virtual routers.
|
interface (VRRP)
To enable VRRP interface configuration mode, use the interface (VRRP) command in VRRP configuration mode. To terminate VRRP configuration mode, use the no form of this command.
interface type instance
no interface type instance
Syntax Description
type
|
Interface type. For more information, use the question mark (?) online help function.
|
instance
|
Either a physical interface instance or a virtual interface instance as follows:
• Physical interface instance. Naming notation is rack/slot/module/port and a slash between values is required as part of the notation.
– rack: Chassis number of the rack.
– slot: Physical slot number of the modular services card or line card.
– module: Module number. A physical layer interface module (PLIM) is always 0.
– port: Physical port number of the interface.
Note In references to a Management Ethernet interface located on a route processor card, the physical slot number is alphanumeric (RP0 or RP1) and the module is CPU0. Example: interface MgmtEth0/RP1/CPU0/0.
• Virtual interface instance. Number range varies depending on interface type.
For more information about the syntax for the router, use the question mark (?) online help function.
|
Defaults
VRRP is disabled.
Command Modes
VRRP configuration
Command History
Release
|
Modification
|
Release 2.0
|
This command was introduced on the Cisco CRS-1.
|
Release 3.0
|
No modification.
|
Release 3.2
|
This command was supported on the Cisco XR 12000 Series Router.
|
Release 3.3.0
|
No modification.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
The interface (VRRP) command is used in VRRP configuration mode.
|
Release 3.7.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Use the interface (VRRP) command to enter VRRP interface configuration mode.
You must configure all VRRP configuration commands in VRRP interface configuration mode.
Task ID
Task ID
|
Operations
|
vrrp
|
read, write
|
Examples
The following example shows how to configure VRRP and a virtual router 1 on 10-Gigabit Ethernet interface 0/3/0/0:
RP/0/RP0/CPU0:router(config)# router vrrp
RP/0/RP0/CPU0:router(config-vrrp)# interface TenGigE 0/3/0/0
RP/0/RP0/CPU0:router(config-vrrp-if)# vrrp 1 ipv4 10.0.1.20
Related Commands
Command
|
Description
|
router vrrp
|
Configures a VRRP redundancy process.
|
router vrrp
To configure Virtual Router Redundancy Protocol (VRRP), use the router vrrp command in global configuration mode. To remove the VRRP configuration, use the no form of this command.
router vrrp
no router vrrp
Syntax Description
The command has no argument or keywords.
Defaults
VRRP is not configured.
Command Modes
Global configuration
Command History
Release
|
Modification
|
Release 2.0
|
This command was introduced on the Cisco CRS-1.
|
Release 3.0
|
No modification.
|
Release 3.2
|
This command was supported on the Cisco XR 12000 Series Router.
|
Release 3.3.0
|
No modification.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
The router vrrp command is used in global configuration mode.
|
Release 3.7.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Use the router vrrp command to enter VRRP configuration mode.
You must configure all VRRP configuration commands in VRRP interface configuration mode.
Task ID
Task ID
|
Operations
|
vrrp
|
read, write
|
Examples
The following example shows how to configure a VRRP with virtual router 1 on 10-Gigabit Ethernet interface 0/3/0/0:
RP/0/RP0/CPU0:router(config)# router vrrp
RP/0/RP0/CPU0:router(config-vrrp)# interface TenGigE 0/3/0/0
RP/0/RP0/CPU0:router(config-vrrp-if)# vrrp 1 priority 254
Related Commands
show vrrp
To display a brief or detailed status of one or all Virtual Router Redundancy Protocol (VRRP) virtual routers, use the show vrrp command in EXEC mode.
show vrrp [interface type instance [vrid]] [brief | detail | statistics [all]]
Syntax Description
interface
|
(Optional) Displays the status of the virtual router interface.
|
type
|
Interface type. For more information, use the question mark (?) online help function.
|
instance
|
Either a physical interface instance or a virtual interface instance as follows:
• Physical interface instance. Naming notation is rack/slot/module/port and a slash between values is required as part of the notation.
– rack: Chassis number of the rack.
– slot: Physical slot number of the modular services card or line card.
– module: Module number. A physical layer interface module (PLIM) is always 0.
– port: Physical port number of the interface.
Note In references to a Management Ethernet interface located on a route processor card, the physical slot number is alphanumeric (RP0 or RP1) and the module is CPU0. Example: interface MgmtEth0/RP1/CPU0/0.
• Virtual interface instance. Number range varies depending on interface type.
For more information about the syntax for the router, use the question mark (?) online help function.
|
vrid
|
(Optional) Virtual router identifier, which is the number identifying the virtual router for which status is displayed.
The virtual router identifier is configured with the vrrp ipv4 command. Range is 1 to 255.
|
brief
|
(Optional) Provides a summary view of the virtual router information.
|
detail
|
(Optional) Displays detailed running state information.
|
statistics
|
(Optional) Displays total statistics.
|
all
|
(Optional) Displays statistics for each virtual router.
|
Defaults
No default behavior or values
Command Modes
EXEC
Command History
Release
|
Modification
|
Release 2.0
|
This command was introduced on the Cisco CRS-1.
|
Release 3.0
|
No modification.
|
Release 3.2
|
This command was supported on the Cisco XR 12000 Series Router.
|
Release 3.3.0
|
No modification.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Release 3.7.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
If no interface is specified, all virtual routers are displayed.
Task ID
Task ID
|
Operations
|
vrrp
|
read
|
Examples
The following sample output is from the show vrrp command:
RP/0/RP0/CPU0:router# show vrrp
A indicates IP address owner
| P indicates configured to preempt
Interface vrID Prio A P State Master addr VRouter addr
Te0/3/0/0 1 100 P Init unknown 10.0.1.20
Te0/3/0/2 7 100 P Init unknown 10.1.13.0
Table 95 describes the significant fields shown in the display.
Table 95 show vrrp Command Field Descriptions
Field
|
Description
|
Interface
|
Interface of the virtual router.
|
vrID
|
ID of the virtual router.
|
Prio
|
Priority of the virtual router.
|
A
|
Indicates whether the VRRP router is the IP address owner.
|
P
|
Indicates whether the VRRP router is configured to preempt (default).
|
State
|
State of the virtual router.
|
Master addr
|
IP address of the master router.
|
VRouter addr
|
Virtual router IP address of the virtual router.
|
The following sample output is from the show vrrp command with the detail keyword:
RP/0/RP0/CPU0:router# show vrrp detail
GigabitEthernet0/5/0/0 - vrID 1
2 state changes, last state change 00:00:28
Virtual IP address is 4.0.0.100
Virtual MAC address is 0000.5E00.0101
Master Down Timer 3.609 (3 x 1 + 156/256)
Minimum delay 1 sec, reload delay 5 sec
Configured priority 100, may preempt
0 state changes, last state change never
Virtual IP address is 10.0.1.20
Virtual MAC address is 0000.5E00.0101
Master Down Timer 3.609 (3 x 1 + 156/256)
Configured priority 100, may preempt
0 state changes, last state change never
Virtual IP address is 10.1.13.0
Virtual MAC address is 0000.5E00.0107
Master Down Timer 3.609 (3 x 1 + 156/256)
Configured priority 100, may preempt
16 state changes, last state change 00:04:55
Virtual IP address is 7.7.7.123
Virtual MAC address is 0000.5E00.0101
Master Down Timer 3.609 (3 x 1 + 156/256)
Configured priority 100, may preempt
Tracked items: 1/3 up: 20 decrement
Interface State Decrement
Table 96 describes the significant fields shown in the displays.
Table 96 show vrrp detail Command Field Descriptions
Field
|
Description
|
TenGigE0/3/0/0 - vrID 1
|
Interface type and number, and VRRP group number.
|
State is
|
Role this interface plays within VRRP (master or backup).
|
Virtual IP address is
|
Virtual IP address for this interface.
|
Virtual MAC address is
|
Virtual MAC address for this interface.
|
Master router is
|
Location of the master router.
|
Advertise time
|
Interval (in seconds) at which the router sends VRRP advertisements when it is the master virtual router. This value is configured with the vrrp timer command.
|
Master Down Timer
|
Time the backup router waits for the master router advertisements before assuming the role of master router.
|
Minimum delay
|
Time that the state machine start-up is delayed when an interface comes up, giving the network time to settle. The minimum delay is the delay that is applied after any subsequent interface up event (if the interface flaps) and the reload delay is the delay applied after the first interface up event.
|
Current priority
|
Priority of the interface.
|
Configured priority
|
Priority configured on the interface.
|
may preempt
|
Indication of whether preemption is enabled or disabled.
|
minimum delay
|
Delay time before preemption (default) occurs.
|
Tracked items
|
Section indicating the items being tracked by the VRRP router.
|
Interface
|
Interface being tracked.
|
State
|
State of the tracked interface.
|
Priority Decrement
|
Priority to decrement from the VRRP priority when the interface is down.
|
The following sample output is from the show vrrp command with the interface and detail keywords for 10-Gigabit Ethernet interface 0/3/0/0:
RP/0/RP0/CPU0:router# show vrrp interface gigabitEthernet 0/3/0/0
A indicates IP address owner
| P indicates configured to preempt
Interface vrID Prio A P State Master addr VRouter addr
Te0/3/0/0 1 100 P Init unknown 10.0.1.20
Te0/3/0/2 7 100 P Init unknown 10.1.13.0
Table 97 describes the significant fields shown in the displays.
Table 97 show vrrp interface Command Field Descriptions
Field
|
Description
|
Interface
|
Interface of the virtual router.
|
vrID
|
ID of the virtual router.
|
Prio
|
Priority of the virtual router.
|
A
|
Indicates whether the VRRP router is the IP address owner.
|
P
|
Indicates whether the VRRP router is configured to preempt (default).
|
State
|
State of the virtual router.
|
Master addr
|
IP address of the master router.
|
VRouter addr
|
Virtual router IP address of the virtual router.
|
Related Commands
Command
|
Description
|
vrrp ipv4
|
Enables VRRP on an interface and specifies the IP address of the virtual router.
|
vrrp assume-ownership
To configure a VRRP router to assume ownership of the virtual IP address when in the master state, use the vrrp assume-ownership command in VRRP interface configuration mode. To restore the default setting, use the no form of this command.
vrrp vrid assume-ownership [disable]
no vrrp vrid assume- ownership [disable]
Syntax Description
vrid
|
Virtual router identifier, which is the number identifying the virtual router for which virtual IP address ownership is being configured.
The virtual router identifier is configured with the vrrp ipv4 command. Range is 1 to 255.
|
disable
|
(Optional) Does not accept VRRP packets.
|
Defaults
The master router assumes ownership by default and accepts VRRP packets.
Command Modes
VRRP interface configuration
Command History
Release
|
Modification
|
Release 2.0
|
This command was introduced on the Cisco CRS-1.
|
Release 3.0
|
No modification.
|
Release 3.2
|
This command was supported on the Cisco XR 12000 Series Router.
|
Release 3.3.0
|
No modification.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Release 3.7.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
The vrrp assume-ownership command specifies that the router assumes ownership of the virtual IP address if it is the master router regardless of whether it is the IP address owner, which means that it accepts packets sent to that IP address during verification of network configuration. If the vrrp assume-ownership command is enabled, a router that is not the IP address owner, but is the master router for another IP address, accepts and responds to pings and accepts a Telnet to that router. Accepting packets sent to the other IP address is a useful tool during verification of network configuration.
This command is ignored (irrelevant) when the router is the IP address owner (section 6.4.3 of RFC 2338, Virtual Router Redundancy Protocol).
Task ID
Task ID
|
Operations
|
vrrp
|
read, write
|
Examples
The following example shows how the configuration disables the vrrp assume-ownership command on 10-Gigabit Ethernet interface 0/3/0/0:
RP/0/RP0/CPU0:router(config)# router vrrp
RP/0/RP0/CPU0:router(config-vrrp)# interface TenGigE 0/3/0/0
RP/0/RP0/CPU0:router(config-vrrp-if)# vrrp 1 ipv4 10.0.0.101 secondary
RP/0/RP0/CPU0:router(config-vrrp-if)# vrrp 1 assume-ownership disable
Related Commands
Command
|
Description
|
vrrp ipv4
|
Enables VRRP on an interface and specifies the IP address of the virtual router.
|
vrrp delay
To configure the activation delay for a VRRP router, use the vrrp delay command in HSRP interface configuration mode. To delete the activation delay, use the no form of this command.
vrrp delay {minimum value reload value}
no vrrp delay
Syntax Description
minimum value
|
Sets the minimum delay in seconds for every interface up event. Range is 0 to 10000.
|
reload value
|
Sets the reload delay in seconds for first interface up event. Range is 0 to 10000.
|
Defaults
minimum value: 1
reload value: 5
Command Modes
VRRP interface configuration
Command History
Release
|
Modification
|
Release 3.4.0
|
This command was introduced on the Cisco CRS-1 and Cisco XR 12000 Series Router.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
The range was changed from 1 to 10000 to 0 to 10000.
|
Release 3.7.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
The vrrp delay command delays the start of the VRRP finite state machine (FSM) on an interface up event to ensure that the interface is ready to pass traffic. This ensures that there are no mistaken state changes due to loss of hello packets. The minimum delay is applied on all interface up events and the reload delay is applied on the first interface up event.
The values of zero must be explicitly configured to turn this feature off.
Task ID
Task ID
|
Operations
|
vrrp
|
read, write
|
Examples
The following example shows how to configure a minimum delay of 10 seconds with a reload delay of 100 seconds:
RP/0/RP0/CPU0:router(config)# router vrrp
RP/0/RP0/CPU0:router(config-vrrp)# interface mgmtEth 0/RP0/CPU0/0
RP/0/RP0/CPU0:router(config-vrrp-if)# vrrp delay minimum 10 reload 100
Related Commands
Command
|
Description
|
show vrrp
|
Displays a brief or detailed status of one or all Virtual Router Redundancy Protocol (VRRP) virtual routers.
|
vrrp ipv4
To enable the Virtual Router Redundancy Protocol (VRRP) on an interface and specify the IP address of the virtual router, use the vrrp ipv4 command in VRRP interface configuration mode. To disable VRRP on the interface and remove the IP address of the virtual router, use the no form of this command.
vrrp vrid ipv4 ip-address [secondary]
no vrrp vrid ipv4 ip-address [secondary]
Syntax Description
vrid
|
Virtual router identifier, which is the number identifying the virtual router. Range is 1 to 255.
|
ip-address
|
IP address of the virtual router.
|
secondary
|
(Optional) Indicates additional IP addresses supported by this group.
|
Defaults
VRRP is not configured on the interface.
Command Modes
VRRP interface configuration
Command History
Release
|
Modification
|
Release 2.0
|
This command was introduced on the Cisco CRS-1.
|
Release 3.0
|
No modification.
|
Release 3.2
|
This command was supported on the Cisco XR 12000 Series Router.
|
Release 3.3.0
|
No modification.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Release 3.7.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Configure the vrrp ipv4 command once without the secondary keyword to indicate the virtual router IP address. If you want to indicate additional IP addresses supported by the virtual router, include the secondary keyword.
Removing the VRRP configuration from the IP address owner and leaving the IP address of the interface active is considered a misconfiguration because this results in duplicate IP addresses on the LAN.
Task ID
Task ID
|
Operations
|
vrrp
|
read, write
|
Examples
The following example shows how to enable VRRP on 10-Gigabit Ethernet interface 0/3/0/0. The VRRP virtual router identifier is 1, and 10.0.1.20 is the IP address of the virtual router.
RP/0/RP0/1:router(config)# router vrrp
RP/0/RP0/1:router(config-vrrp)# interface TenGigE 0/3/0/0
RP/0/RP0/1:router(config-vrrp-if)# vrrp 1 ipv4 10.0.1.20 secondary
RP/0/RP0/1:router(config-vrrp-if)# vrrp 1 assume-ownership disable
Related Commands
Command
|
Description
|
show vrrp
|
Displays a brief or detailed status of one or all Virtual Router Redundancy Protocol (VRRP) virtual routers.
|
vrrp preempt
To configure the router to take over as master router for a Virtual Router Redundancy Protocol (VRRP) virtual router if it has a higher priority than the current master router, use the vrrp preempt command in VRRP interface configuration mode. To disable this preemption, use the no form of this command.
vrrp vrid preempt [delay seconds] [disable | enable]
no vrrp vrid preempt [delay seconds] [disable | enable]
Syntax Description
vrid
|
Virtual router identifier, which is the number identifying the virtual router for which preemption is being configured.
The virtual router identifier is configured with the vrrp ipv4 command. Range is 1 to 255.
|
delay seconds
|
(Optional) Specifies the number of seconds the router delays before issuing an advertisement claiming virtual IP address ownership to be the master router. Range is 1 to 3600 seconds (1 hour).
|
disable
|
(Optional) Disables preemption.
|
enable
|
(Optional) Enables preemption.
|
Defaults
VRRP preempt is enabled.
seconds: 0 (no delay)
Command Modes
VRRP interface configuration
Command History
Release
|
Modification
|
Release 2.0
|
This command was introduced on the Cisco CRS-1.
|
Release 3.0
|
No modification.
|
Release 3.2
|
This command was supported on the Cisco XR 12000 Series Router.
|
Release 3.3.0
|
No modification.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Release 3.7.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
By default, the router being configured with this command takes over as master router for the virtual router if it has a higher priority than the current master router. You can configure a delay, which causes the VRRP router to wait the specified number of seconds before issuing an advertisement claiming virtual IP address ownership to be the master router.
Note
The router that is the virtual IP address owner preempts, regardless of the setting of this command.
Task ID
Task ID
|
Operations
|
vrrp
|
read, write
|
Examples
The following example shows how to configure the router to preempt the current master router when its priority of 200 is higher than that of the current master router. If the router preempts the current master router, it waits 15 seconds before issuing an advertisement claiming that it is the master router.
RP/0/RP0/CPU0:router(config)# router vrrp
RP/0/RP0/CPU0:router(config-vrrp)# interface TenGigE 0/3/0/0
RP/0/RP0/CPU0:router(config-vrrp-if)# vrrp 1 preempt delay 15
RP/0/RP0/CPU0:router(config-vrrp-if)# vrrp 1 priority 200
Related Commands
Command
|
Description
|
vrrp ipv4
|
Enables VRRP on an interface and specifies the IP address of the virtual router.
|
vrrp priority
|
Sets the priority of the virtual router.
|
vrrp priority
To set the priority of the virtual router, use the vrrp priority command in VRRP interface configuration mode. To remove the priority of the virtual router, use the no form of this command.
vrrp vrid priority priority
no vrrp vrid priority priority
Syntax Description
vrid
|
Virtual router identifier, which is the number identifying the virtual router for which the priority is being configured.
The virtual router identifier is configured with the vrrp ipv4 command. Range is 1 to 255.
|
priority
|
Priority of the virtual router. Range is 1 to 254.
|
Defaults
priority: 100
Command Modes
VRRP interface configuration
Command History
Release
|
Modification
|
Release 2.0
|
This command was introduced on the Cisco CRS-1.
|
Release 3.0
|
No modification.
|
Release 3.2
|
This command was supported on the Cisco XR 12000 Series Router.
|
Release 3.3.0
|
No modification.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Release 3.7.0
|
No modification.
|
Usage Guidelines
To use the vrrp priority command, you must be a member of a user group associated with the vrrp task ID. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Use this command to control which router becomes the master router. This command is ignored while the router is the virtual IP address owner.
Task ID
Task ID
|
Operations
|
vrrp
|
read, write
|
Examples
The following example shows how to configure the router with a priority of 254:
RP/0/RP0/CPU0:router(config)# router vrrp
RP/0/RP0/CPU0:router(config-vrrp)# interface TenGigE 0/3/0/0
RP/0/RP0/CPU0:router(config-vrrp-if)# vrrp 1 priority 254
Related Commands
Command
|
Description
|
vrrp ipv4
|
Enables VRRP on an interface and specifies the IP address of the virtual router.
|
vrrp preempt
|
Configures the router to take over as master router for a VRRP virtual router if it has a higher priority than the current master router.
|
vrrp text-authentication
To configure the simple text authentication used for Virtual Router Redundancy Protocol (VRRP) packets received from other routers running VRRP, use the vrrp text-authentication command in VRRP interface configuration mode. To disable VRRP authentication, use the no form of this command.
vrrp vrid text-authentication string
no vrrp vrid text-authentication [string]
Syntax Description
vrid
|
Virtual router identifier, which is the number identifying the virtual router for which authentication is being configured.
The virtual router identifier is configured with the vrrp ipv4 command. Range is 1 to 255.
|
string
|
Authentication string (up to eight alphanumeric characters) used to validate incoming VRRP packets.
|
Defaults
No authentication of VRRP messages occurs.
Command Modes
VRRP interface configuration
Command History
Release
|
Modification
|
Release 2.0
|
This command was introduced on the Cisco CRS-1.
|
Release 3.0
|
No modification.
|
Release 3.2
|
This command was supported on the Cisco XR 12000 Series Router.
|
Release 3.3.0
|
No modification.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Release 3.7.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
When a VRRP packet arrives from another router in the VRRP group, its authentication string is compared to the string configured on the local system. If the strings match, the message is accepted. If they do not match, the packet is discarded.
All routers within the group must be configured with the same authentication string.
Note
Plain text authentication is not meant to be used for security. It simply provides a way to prevent a misconfigured router from participating in VRRP.
Task ID
Task ID
|
Operations
|
vrrp
|
read, write
|
Examples
The following example shows how to configure an authentication string of x30dn78k:
RP/0/RP0/CPU0:router(config)# router vrrp
RP/0/RP0/CPU0:router(config-vrrp)# interface TenGigE 0/3/0/0
RP/0/RP0/CPU0:router(config-vrrp-if)# vrrp 1 text-authentication x30dn78k
Related Commands
Command
|
Description
|
vrrp ipv4
|
Enables VRRP on an interface and specifies the IP address of the virtual router.
|
vrrp timer
To configure the interval between successive advertisements by the master router in a Virtual Router Redundancy Protocol (VRRP) virtual router, use the vrrp timer command in VRRP interface configuration mode. To restore the default value, use the no form of this command.
vrrp vrid timer [msec] interval [force]
no vrrp vrid timer [msec] interval [force]
Syntax Description
vrid
|
Virtual router identifier, which is the number identifying the virtual router for which timing is being configured.
The virtual router identifier is configured with the vrrp ipv4 command. Range is 1 to 255.
|
msec
|
(Optional) Changes the unit of the advertisement time from seconds to milliseconds. Without this keyword, the advertisement interval is in seconds. Range is 20 to 3000 milliseconds.
|
interval
|
Time interval between successive advertisements by the master router. The unit of the interval is in seconds, unless the msec keyword is specified. Range is 1 to 255 seconds.
|
force
|
(Optional) Forces the configured value to be used. This keyword is required if milliseconds is specified.
|
Defaults
interval: 1 second
Command Modes
VRRP interface configuration
Command History
Release
|
Modification
|
Release 2.0
|
This command was introduced on the Cisco CRS-1.
|
Release 3.0
|
No modification.
|
Release 3.2
|
This command was supported on the Cisco XR 12000 Series Router.
|
Release 3.3.0
|
No modification.
|
Release 3.4.0
|
No modification.
|
Release 3.5.0
|
No modification.
|
Release 3.6.0
|
No modification.
|
Release 3.7.0
|
No modification.
|
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Task ID
Task ID
|
Operations
|
vrrp
|
read, write
|
Examples
The following example shows how to configure the master router to send advertisements every 4 seconds:
RP/0/RP0/CPU0:router(config)# router vrrp
RP/0/RP0/CPU0:router(config-vrrp)# interface TenGigE 0/3/0/0
RP/0/RP0/CPU0:router(config-vrrp-if)# vrrp 1 timer 4
Related Commands
Command
|
Description
|
vrrp ipv4
|
Enables VRRP on an interface and specifies the IP address of the virtual router.
|
vrrp track interface
To configure the Virtual Router Redundancy Protocol (VRRP) to track an interface, use the vrrp track interface command in VRRP interface configuration mode. To disable the tracking, use the no form of this command.
vrrp vrid track interface type instance [priority-decrement]
no vrrp vrid track interface type instance [priority-decrement]
Syntax Description
vrid
|
Virtual router identifier, which is the number identifying the virtual router to which tracking applies.
|
type
|
Interface type. For more information, use the question mark (?) online help function.
|
instance
|
Either a physical interface instance or a virtual interface instance as follows:
• Physical interface instance. Naming notation is rack/slot/module/port and a slash between values is required as part of the notation.
– rack: Chassis number of the rack.
– slot: Physical slo |