VRRP Template
Use this template to distribute common parameters for appliances deployed with Virtual Router Redundancy Protocol (VRRP).
VRRP specifies an election protocol that dynamically assigns responsibility for a virtual router to one of the VRRP routers on a LAN. The VRRP router controlling the IP address(es) associated with a virtual router is called the Master and forwards packets sent to these IP addresses. The election process provides dynamic failover in the forwarding responsibility should the Master become unavailable. This allows end hosts to use any virtual router IP addresses on the LAN as the default first-hop router. The advantage gained from using VRRP is a higher availability default path without configuring dynamic routing protocols such as BGP or OSPF.
| Field | Description |
|---|---|
| Admin | Select up (enable) or down (disable). |
| Hold Down | The number of seconds a higher-priority backup router that has just started up waits before preempting the primary router. It is best practice to configure a hold time so that routing protocols converge and tunnels come back up before preemption occurs. The default value is 60 sec to account for the default quiescent tunnel keep alive time. The minimum value is 1 second. |
| Advertisement Timer | The time interval between sent advertisements. For version 2, the time is measured in seconds, and the default is 1 sec. For version 3, the time is measured in centi-seconds, and the default is 1 centi-sec. 1 centi-sec = 10ms. |
| Priority | The greater the number, the higher the priority. The appliance with the higher priority is the VRRP Master. |
| Version | Select the VRRP version that applies for your system: 2 – Supports only IPv4. 3 – Supports IPv4 and IPv6; does not support authentication strings. |
| Preemption | Leave this selected/enabled so that after a failure, the appliance with the highest priority comes back online and again assumes primary responsibility. |
| Authentication String | Clear text password for authenticating VRRP version 2 group members. You cannot use an authentication string if you are using VRRP version 3. |