1-4z simple: Simple text authentication. In a network under possible security threat, the authenticationtype can be set to simple. With the simple authentication type configured, the switch adds anauthentication key into a VRRP packet before transmitting it. The receiver then compares theauthentication key of the packet with the locally configured one. If they are the same, the packet willbe taken as a true and legal one. Otherwise it will be regarded illegal and discarded.z md5: MD5 authentication. In a vulnerable network, the authentication type can be set to md5. Theswitch then uses the authentication type provided in the Authentication Header and the local MD5algorithm to authenticate the VRRP packets. Packets that fail to pass the authentication arediscarded. The switch then sends trap messages to the NMS.Virtual Router OverviewVRRP group and virtual router IP address configurationTo create a VRRP group, you need to configure an IP address for the VRRP group virtual router. TheVRRP group is automatically created after you configure the first IP address for the VRRP group virtualrouter. Other IP addresses configured for the virtual router after this one are just added to the IP addresslist of the virtual router.The virtual router IP address has the following features:z The IP address of the virtual router can be an unassigned IP address in the network segmentwhere a member switch of the VRRP group resides.z You can specify the virtual router IP address as the IP address used by a member switch in theVRRP group. In this case, the member switch is called an IP address owner.z The virtual router IP address and the IP addresses used by the member switches in the VRRPgroup must belong to the same network segment. If not, the VRRP group will be in the initial state(the state before you configure the VRRP on the switches of the group). In this case, VRRP doesnot take effect.z A VRRP group is removed after all its virtual router IP addresses are removed. In this case, all theconfigurations performed for the VRRP group are disabled.Do not configure a host IP address as the IP address of the virtual router. If your host IP address is thesame as the virtual router IP address of the VRRP group, all the packets sent to the current networksegment will be sent to your host. As a result, packets in the network segment cannot be forwardedproperly.Response of the virtual router to the ping operationsAccording to the standard VRRP, a running virtual router does not respond to the ping operations, sothat you cannot use the ping command to check the network connectivity and whether the configurationof the IP address of a virtual router is successful.For S5600 series Ethernet switches, you can specify whether the switches in a VRRP group respond tothe ping operations destined for the virtual router IP addresses.
