HSRP MD5 Authentication

Table Of Contents

HSRP MD5 Authentication

HSRP MD5 Authentication

---

Prior to the introduction of the HSRP MD5 Authentication feature, Hot Standby Router Protocol (HSRP) authenticated protocol packets with a simple plain text string. The HSRP MD5 Authentication feature is an enhancement to generate an MD5 digest for the HSRP portion of the multicast HSRP protocol packet. This feature provides added security and protects against the threat from HSRP-spoofing software.

Configuration Information

Configuration information is included in the "Configuring HSRP" module in the "First Hop Redundancy Protocols" section of the Cisco IOS IP Application Services Configuration Guide, Release 12.4T, at the following URL:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124tcg/tiap_c/index.htm

The following section provides information about this feature:

•Configuring HSRP Authentication

For a complete list of features included in the "Configuring HSRP" module, see the Feature Information Table located toward the end of the module.

Command Reference Information

Command reference information is included in the Cisco IOS IP Application Services Command Reference, Release 12.2SX, at the following URL:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122sx/cr/sxiap_r/index.htm

New or Modified Commands

The following commands are new or modified for this feature:

•show standby

•standby authentication

Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.

© 2007 Cisco Systems, Inc. All rights reserved.