22.05.2017 Views

nx.os.and.cisco.nexus.switching.2nd.edition.1587143046

Nexus Switching 2nd Edition

Nexus Switching 2nd Edition

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Next hello sent in 0.069000 sec(s)<br />

Virtual IP address is 10.10.100.1 (Cfged)<br />

Active router is local<br />

St<strong>and</strong>by router is 10.10.100.3<br />

Authentication text "hsrp"<br />

Virtual mac address is 0000.0c07.ac64 (Default MAC)<br />

2 state changes, last state change 00:15:24<br />

IP redundancy name is hsrp-Vlan100-100 (default)<br />

Configuration of MD5 authentication is a multistep process. You must first define a keychain<br />

that contains attributes such as the password to be used to authenticate the connection <strong>and</strong><br />

the lifetime of the keychain for both sending <strong>and</strong> receiving, as demonstrated in Example 3-<br />

106.<br />

Example 3-106. Configuring a Keychain<br />

Click here to view code image<br />

Congo(config)# key chain <strong>nexus</strong><br />

Congo(config-keychain)# key 1<br />

Congo(config-keychain-key)# key-string <strong>nexus</strong><br />

The next step is to enable authentication under the HSRP process, as illustrated in Example<br />

3-107, <strong>and</strong> reference the keychain created in the previous step.<br />

Example 3-107. Configuring HSRP MD5 Authentication<br />

Click here to view code image<br />

Congo# config t<br />

Enter configuration comm<strong>and</strong>s, one per line. End with<br />

CNTL/Z.<br />

Congo(config)# int vlan 100<br />

Congo(config-if)# hsrp 100<br />

Congo(config-if-hsrp)# authentication md5 key-chain <strong>nexus</strong><br />

You can verify that the MD5 authentication is in place from the output of the show hsrp<br />

comm<strong>and</strong>, as demonstrated in Example 3-108.<br />

Example 3-108. Verification of HSRP MD5 Authentication<br />

Click here to view code image<br />

Congo(config-if-hsrp)# show hsrp

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!