Authenticating Hsrp - Cisco Nexus 7000 Series Configuration Manual

Chapter 19 Configuring HSRP
S e n d d o c u m e n t c o m m e n t s t o n e x u s 7 k - d o c f e e d b a c k @ c i s c o . c o m .
Command
hsrp use-bia [scope interface]
Example:
switch(config-if)# hsrp use-bia

Authenticating HSRP

You can configure HSRP to authenticate the protocol using cleartext or MD5 digest authentication. MD5
authentication uses a key chain (see the Cisco Nexus 7000 Series NX-OS Security Configuration Guide,
Release 4.x).
BEFORE YOU BEGIN
Ensure that you have enabled the HSRP feature (see the
page
You must configure the same authentication and keys on all members of the HSRP group.
Ensure that you have created the key chain if you are using MD5 authentication.
Ensure that you are in the correct VDC (or use the switchto vdc command).
SUMMARY STEPS
1.
2.
3.
4.
5.
6.
DETAILED STEPS
Command
Step 1
config t
Example:
switch# config t
switch(config)#
Step 2
interface interface-type slot/port
Example:
switch(config)# interface ethernet 1/2
switch(config-if)#
OL-20002-02
19-8).
config t
interface interface-type slot/port
hsrp group-number
authentication text string
or
authentication md5 {key-chain key-chain | key-string {0 | 7} text [timeout seconds]}
show hsrp [group group-number]
copy running-config startup-config
Cisco Nexus 7000 Series NX-OS Unicast Routing Configuration Guide, Release 4.x
Purpose
Configures HSRP to use the burned-in MAC
address of the interface for the HSRP virtual MAC
address. You can optionally configure HSRP to use
the burned-in MAC address for all groups on this
interface by using the scope interface keywords.
"Enabling the HSRP Feature" section on
Purpose
Enters configuration mode.
Enters interface configuration mode.
Configuring HSRP
19-11