To enable authentication, authorization, and accounting (AAA) accounting of requested services for billing or security purposes when you use the Virtual Router Redundancy Service (VRRS), use the
aaaaccountingvrrs command in global configuration mode. To disable AAA accounting for VRRS, use the
no form of this command.
Uses the listed accounting methods that follow this keyword as the default list of methods for accounting services.
list-name
Character string used to name the list of accounting methods. If no list name is specified, the system uses the default value.
start-stop
Sends an accounting-on notice. The accounting-on record is sent in the background. The requested user process begins regardless of whether the accounting-on notice is received by the accounting server.
method1 [method2...]
(Optional) Character string used to name at least one of the accounting methods, tried in the specified sequence.
Command Default
AAA accounting is disabled for VRRS
Command Modes
Global configuration (config)
Command History
Release
Modification
Cisco IOS XE Release 2.6
This command was introduced.
15.1(1)S
This command was integrated into Cisco IOS Release 15.1(1)S.
Usage Guidelines
Use the
aaaaccountingvrrs command to define a AAA accounting method list. If you define the AAA default accounting method list, you are defining the AAA accounting method list for all the VRRS servers. The default AAA accounting method list is applied to all VRRS groups. To specify a group-specific VRRS method list, use the
accountingmethod command in VRRS configuration mode.
Examples
The following example shows how to configure VRRP group 1 with the group name “vrrp-name-1” to use VRRS method list vrrs-mlist-1:
Router(config)# aaa accounting vrrs vrrp-mlist-1 start-stop group radius
!
Router(config-if)# vrrs vrrp-name-1
Router(config)# accounting mlist vrrs-mlist-1
!
Router(config)# interface gigabitethernet0/2/2
Router(config-if)# ip address 10.0.1.
Router(config-if)# vrrp 1 ip 10.1.0.10
Router(config-if)# vrrp 1 name vrrp-name-1
Related Commands
Command
Description
vrrpip
Enables the VRRP on an interface and identifies the IP address of the virtual router.
vrrpname
Links a VRRS client to a VRRP group.
accounting delay (VRRS)
To specify a delay time for sending accounting-off messages for the Virtual Router Redundancy Service (VRRS), use the accountingdelay command in VRRS configuration mode. To return to the default accounting delay value, use the no form of this command.
accountingdelayseconds
noaccountingdelay
Syntax Description
seconds
Time, in seconds, to wait before sending accounting-off messages. Range is from 1 to 30. The default is 0.
Command Default
Accounting-off messages for VRRS are sent without delay.
Command Modes
VRRS configuration (config-vrrs)
Command History
Release
Modification
Cisco IOS XE Release 2.6
This command was introduced.
15.1(1)S
This command was integrated into Cisco IOS Release 15.1(1)S.
Usage Guidelines
Use the accountingdelay command to control the timing of sending accounting-off messages for VRRS. This command does not apply to accounting-on messages. If the default is specified, this command is not saved to the running configuration and accounting-off messages are sent immediately when the event occurs. Otherwise, a delay of the configured number of seconds is applied.
Examples
The following example shows how to specify a delay time of 10 seconds for sending accounting-off messages for the VRRS:
Enables AAA accounting of requested services for billing or security purposes when you use VRRS.
accountingmethod(VRRS)
Enables VRRS accounting for a VRRP group.
attributelist(VRRS)
Specifies additional attributes to include in VRRS accounting-on and accounting-off messages.
vrrs
Enables VRRS and enters VRRS configuration mode.
accounting method (VRRS)
To enable Virtual Router Redundancy Service (VRRS) accounting for a Virtual Router Redundancy Protocol (VRRP) group, use the accountingmethod command in VRRS configuration mode. To specify the default VRRS accounting method list as the target for VRRS accounting, use the no form of this command.
Name of the accounting method list for which VRRS must be enabled.
Command Default
The default VRRS accounting method list is used.
Command Modes
VRRS Configuration (config-vrrs)
Command History
Release
Modification
Cisco IOS XE Release 2.6
This command was introduced.
15.1(1)S
This command was integrated into Cisco IOS Release 15.1(1)S.
Usage Guidelines
Configuring the default keyword does not save it to the running configuration and the VRRS accounting type default method list is automatically applied to the VRRS group being configured. The default keyword also enables VRRS accounting for all VRRP groups.
The valued specified for the accounting-method-list argument must match a named list configured by the aaaaccountingvrrscommand. When there is no match, a warning message is displayed. However, the configuration is still saved.
With this approach, you can configure the desired accounting method list using the aaaaccountingvrrscommand without configuring the accountingmethodcommand again.
Examples
The following example shows how to configure VRRS to use the accounting list named METHOD1:
Enables AAA accounting of requested services for billing or security purposes when you use VRRS.
accountingdelay(VRRS)
Specifies a delay time for sending accounting-off messages for VRRS.
attributelist(VRRS)
Specifies additional attributes to include in VRRS accounting-on and accounting-off messages.
attribute list (VRRS)
To specify additional attributes to include in Virtual Router Redundancy Service (VRRS) accounting-on and accounting-off messages, use the
attributelist command in VRRS configuration mode. To configure VRRS to send only default attributes in VRRS accounting messages, use the
no form of this command.
attributelistlist-name
noattributelist
Syntax Description
list-name
Specifies a AAA accounting list, as defined by the
aaaattributelist global configuration command.
Command Default
Default attributes are sent in VRRS accounting messages.
Command Modes
VRRS configuration (config-vrrs)
Command History
Release
Modification
Cisco IOS XE Release 2.6
This command was introduced.
Usage Guidelines
Use the
attributelist (VRRS) command to specify additional attributes to be included in both VRRS accounting-on and accounting-off messages. Before configuring this command, define a list name using the
aaaattributelist global configuration command. If you the enter a list name that is not defined in the
aaaattributelist global configuration command, a warning message is displayed. However, this command is still accepted.
The following RADIUS attributes are included in VRRS accounting messages by default:
Attribute 4, NAS-IP-Address
Attribute 26, Cisco VSA Type 1, vrrs
Attribute 40, Acct-Status-Type
Attribute 41, Acct-Delay-Type
Attribute 44 Acct-Session-Id
Examples
The following example configures VRRS to use the AAA accounting list named vrrp-1-attr:
Router(config)# aaa accounting vrrs default start-stop group radius
Router(config)# aaa attribute list vrrp-1-attr
Router(config-attr-list)# attribute type account-delay “10”
Router(config-attr-list)# exit
Router(config)# vrrs vrrp-name-1
Router(config-vrrs)# accounting delay 10
Router(config-vrrs)# attribute list vrrp-1-attr
Related Commands
Command
Description
aaaaccountingvrrs
Enables AAA accounting of requested services for billing or security purposes when you use VRRS.
aaaattributelist
Defines a AAA attribute list locally on a router.
accountingdelay(VRRS)
Specifies a delay time for sending accounting-off messages for VRRS.
accountingmethod(VRRS)
Enables VRRS accounting for a VRRP group.
fhrp version vrrp v3
To enable Virtual Router Redundancy Protocol version 3 (VRRPv3) and Virtual Router Redundancy Service (VRRS) configuration
on a device, use the fhrpversionvrrpv3command in global configuration mode. To disable the ability to configure VRRPv3 and VRRS on a device, use the no form of this command.
fhrpversionvrrpv3
nofhrpversionvrrpv3
Syntax Description
This command has no keywords or arguments.
Command Default
VRRPv3 and VRRS configuration on a device is not enabled.
Command Modes
Global configuration (config)
Command History
Release
Modification
15.2(4)M
This command was introduced.
15.3(3)M
This command was integrated into Cisco IOS Release 15.3(3)M.
Usage Guidelines
When VRRPv3 is in use, VRRP version 2 (VRRPv2) is unavailable.
Examples
In the following example, a tracking process is configured to track the state of an IPv6 object using a VRRPv3 group. VRRP on GigabitEthernet interface 0/0/0 then registers with the tracking process to be informed of any changes to the IPv6 object on the VRRPv3 group. If the IPv6 object state on serial interface VRRPv3 goes down, then the priority of the VRRP group is reduced by 20:
Enables an object to be tracked using a VRRPv3 group.
vrrpname
Links a VRRS client to a VRRP group.
glbp authentication
To configure an authentication string for the Gateway Load Balancing Protocol (GLBP), use the glbpauthentication command in interface configuration mode. To disable authentication, use the no form of this command.
Specifies an authentication string. The number of characters in the command plus the text string must not exceed 255 characters.
md5
Message Digest 5 (MD5) authentication.
key-stringkey
Specifies the secret key for MD5 authentication. The key string cannot exceed 100 characters in length. We recommend using at least 16 characters.
0
(Optional) Unencrypted key. If no prefix is specified, the key is unencrypted.
7
(Optional) Encrypted key.
key-chainname-of-chain
Identifies a group of authentication keys.
Command Default
No authentication of GLBP messages occurs.
Command Modes
Interface configuration (config-if)
Command History
Release
Modification
12.2(14)S
This command was introduced.
12.2(15)T
This command was integrated into Cisco IOS Release 12.2(15)T.
12.3(2)T
The md5 keyword and associated parameters were added.
12.2(33)SRA
This command was integrated into Cisco IOS Release 12.2(33)SRA.
12.2(33)SXH
This command was integrated into Cisco IOS Release 12.2(33)SXH.
Usage Guidelines
The same authentication method must be configured on all the routers that are configured to be members of the same GLBP group, to ensure interoperation. A router will ignore all GLBP messages that contain the wrong authentication information.
If password encryption is configured with the servicepassword-encryptioncommand, the software saves the key string in the configuration as encrypted text.
Examples
The following example configures stringxyz as the authentication string required to allow GLBP routers in group 10 to interoperate:
Router(config)# interface fastethernet 0/0
Router(config-if)# glbp 10 authentication text stringxyz
In the following example, GLBP queries the key chain “AuthenticateGLBP” to obtain the current live key and key ID for the specified key chain:
To enable the Gateway Load Balancing Protocol (GLBP) client cache, use the glbpclient-cache command in interface configuration mode. To disable a GLBP client cache, use the no form of this command.
Specifies the maximum number of clients the cache will hold for this GLBP group. The range is from 8 to 2000.
timeoutminutes
(Optional) The maximum amount of time, in minutes, a client entry can stay in the GLBP client cache after the client information was last updated. The range is from 1 to 1440.
Command Default
The GLBP client cache is disabled.
Command Modes
Interface configuration (config-if)
Command History
Release
Modification
12.4(15)T
This command was introduced.
12.2(33)SXI
This command was integrated into Cisco IOS Release 12.2(33)SXI.
Usage Guidelines
This command enables a GLBP client cache on a single group only. To enable the client cache on multiple GLBP groups, you must apply this command to each group for which a client cache is required.
You must specify a maximum number of clients that the client cache will hold for a GLBP group to limit the size of the cache. If a GLBP client cache already exists when this command is entered and there are already more clients in the cache than the required number, all of the existing cache entries are discarded.
If you enter the no form of this command when there are already client entries in the cache, all of the client entries are discarded before the GLBP client cache is disabled.
Note
For IPv4 networks, Cisco recommends setting a GLBP client cache timeout value that is slightly longer than the maximum expected end-host Address Resolution Protocol (ARP) cache timeout value.
Examples
The following example shows how to enable a GLBP client cache with a maximum of 1200 clients:
Router(config-if)# glbp 10 client-cache maximum 1200 timeout 245
Related Commands
Command
Description
showglbp
Displays GLBP information.
glbp forwarder preempt
To configure a router to take over as active virtual forwarder (AVF) for a Gateway Load Balancing Protocol (GLBP) group if the current AVF falls below its low weighting threshold, use the
glbpforwarderpreempt command in interface configuration mode. To disable this function, use the
no form of this command.
glbpgroupforwarderpreempt
[ delayminimumseconds ]
noglbpgroupforwarderpreempt
[ delayminimum ]
Syntax Description
group
GLBP group number in the range from 0 to 1023.
delayminimumseconds
(Optional) Specifies a minimum number of seconds that the router will delay before taking over the role of AVF. The range is from 0 to 3600 seconds with a default delay of 30 seconds.
Command Default
Forwarder preemption is enabled with a default delay of 30 seconds.
Command Modes
Interface configuration (config-if)
Command History
Release
Modification
12.2(14)S
This command was introduced.
12.2(15)T
This command was integrated into Cisco IOS Release 12.2(15)T.
12.2(33)SRA
This command was integrated into Cisco IOS Release 12.2(33)SRA.
12.2SX
This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware.
Cisco IOS XE Release 2.1
This command was integrated into Cisco IOS XE Release 2.1.
Examples
The following example shows a router being configured to preempt the current AVF when the current AVF falls below its low weighting threshold. If the router preempts the current AVF, it waits 60 seconds before taking over the role of the AVF.
To activate the Gateway Load Balancing Protocol (GLBP), use the
glbpip command in interface configuration mode. To disable GLBP, use the
no form of this command.
glbpgroupip
[ ip-address [secondary] ]
noglbpgroupip
[ ip-address [secondary] ]
Syntax Description
group
GLBP group number in the range from 0 to 1023.
ip-address
(Optional) Virtual IP address for the GLBP group. The IP address must be in the same subnet as the interface IP address.
secondary
(Optional) Indicates that the IP address is a secondary GLBP virtual address.
Command Default
GLBP is disabled by default.
Command Modes
Interface configuration (config-if)
Command History
Release
Modification
12.2(14)S
This command was introduced.
12.2(15)T
This command was integrated into Cisco IOS Release 12.2(15)T.
12.2(33)SRA
This command was integrated into Cisco IOS Release 12.2(33)SRA.
12.2SX
This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware.
Cisco IOS XE Release 2.1
This command was integrated into Cisco IOS XE Release 2.1.
Usage Guidelines
The
glbpip command activates GLBP on the configured interface. If an IP address is specified, that address is used as the designated virtual IP address for the GLBP group. If no IP address is specified, the designated address is learned from another router configured to be in the same GLBP group. For GLBP to elect an active virtual gateway (AVG), at least one router on the cable must have been configured with the designated address. A router must be configured with, or have learned, the virtual IP address of the GLBP group before assuming the role of a GLBP gateway or forwarder. Configuring the designated address on the AVG always overrides a designated address that is in use.
When the
glbpip command is enabled on an interface, the handling of proxy Address Resolution Protocol (ARP) requests is changed (unless proxy ARP was disabled). ARP requests are sent by hosts to map an IP address to a MAC address. The GLBP gateway intercepts the ARP requests and replies to the ARP on behalf of the connected nodes. If a forwarder in the GLBP group is active, proxy ARP requests are answered using the MAC address of the first active forwarder in the group. If no forwarder is active, proxy ARP responses are suppressed.
Examples
The following example activates GLBP for group 10 on Fast Ethernet interface 0/0. The virtual IP address to be used by the GLBP group is set to 10.21.8.10.
Router(config)# interface fastethernet 0/0
Router(config-if)# ip address 10.21.8.32 255.255.255.0
Router(config-if)# glbp 10 ip 10.21.8.10
The following example activates GLBP for group 10 on Fast Ethernet interface 0/0. The virtual IP address used by the GLBP group will be learned from another router configured to be in the same GLBP group.
Router(config)# interface fastethernet 0/0
Router(config-if)# glbp 10 ip
Related Commands
Command
Description
showglbp
Displays GLBP information.
glbp ipv6
To activate the Gateway Load Balancing Protocol (GLBP) in IPv6, use the glbpipv6command in interface configuration mode. To disable GLBP, use the noform of this command.
glbpgroupipv6
[ ipv6-address | autoconfig ]
noglbpgroupipv6
[ ipv6-address | autoconfig ]
Syntax Description
group
GLBP group number in the range from 0 to 1023.
ip-address
(Optional) Virtual IPv6 address for the GLBP group. The IPv6 address must be in the same subnet as the interface IPv6 address.
autoconfig
(Optional) Indicates a default IPv6 address can be created based on a MAC address.
Command Default
GLBP is disabled by default.
Command Modes
Interface configuration
Command History
Release
Modification
12.4(6)T
This command was introduced.
12.2(33)SXI
This command was modified. It was integrated into Cisco IOS Release 12.2(33)SXI.
Usage Guidelines
The glbpipv6 command activates GLBP on the configured interface. If an IPv6 address is specified, that address is used as the designated virtual IPv6 address for the GLBP group. If no IPv6 address is specified, the designated address is learned from another router configured to be in the same GLBP group. For GLBP to elect an active virtual gateway (AVG), at least one router on the cable must have been configured with the designated address. A router must be configured with, or have learned, the virtual IPv6 address of the GLBP group before assuming the role of a GLBP gateway or forwarder. Configuring the designated address on the AVG always overrides a designated address that is in use.
When the glbpipv6 command is enabled on an interface, the handling of proxy Address Resolution Protocol (ARP) requests is changed (unless proxy ARP was disabled). ARP requests are sent by hosts to map an IPv6 address to a MAC address. The GLBP gateway intercepts the ARP requests and replies to the ARP on behalf of the connected nodes. If a forwarder in the GLBP group is active, proxy ARP requests are answered using the MAC address of the first active forwarder in the group. If no forwarder is active, proxy ARP responses are suppressed.
Examples
The following example enables GLBP on an IPv6 configured interface:
Router(config-if)# glbp ipv6
Related Commands
Command
Description
glbpip
Activates the GLBP in IPv4.
showglbp
Displays GLBP information.
glbp load-balancing
To specify the load-balancing method used by the active virtual gateway (AVG) of the Gateway Load Balancing Protocol (GLBP), use the glbpload-balancing command in interface configuration mode. To disable load balancing, use the no form of this command.
(Optional) Specifies a load balancing method based on the MAC address of a host where the same forwarder is always used for a particular host while the number of GLBP group members remains unchanged.
round-robin
(Optional) Specifies a load balancing method where each virtual forwarder in turn is included in address resolution replies for the virtual IP address. This method is the default.
weighted
(Optional) Specifies a load balancing method that is dependent on the weighting value advertised by the gateway.
Command Default
The round-robin method is the default.
Command Modes
Interface configuration (config-if)
Command History
Release
Modification
12.2(14)S
This command was introduced.
12.2(15)T
This command was integrated into Cisco IOS Release 12.2(15)T.
12.2(33)SRA
This command was integrated into Cisco IOS Release 12.2(33)SRA.
12.2SX
This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware.
Cisco IOS XE Release 2.1
This command was integrated into Cisco IOS XE Release 2.1.
12.4(24)T2
This command was modified. When the no form of this command is configured, if the AVG does not have an AVF, it preferentially replies to ARP requests with the MAC address of the first listening virtual forwarder.
15.0(1)M1
This command was modified. When the no form of this command is configured, if the AVG does not have an Active Virtual Forwarder (AVF), it preferentially replies to ARP requests with the MAC address of the first listening virtual forwarder.
15.1(2)T
This command was modified. When the no form of this command is configured, if the AVG does not have an AVF, it preferentially replies to ARP requests with the MAC address of the first listening virtual forwarder.
Usage Guidelines
Use the host-dependent method of GLBP load balancing when you need each host to always use the same router. Use the weighted method of GLBP load balancing when you need unequal load balancing because routers in the GLBP group have different forwarding capacities.
Examples
The following example shows the host-dependent load-balancing method being configured for the AVG of the GLBP group 10:
To enable IP redundancy by assigning a name to the Gateway Load Balancing Protocol (GLBP) group, use the glbpname command in interface configuration mode. To disable IP redundancy for a group, use the no form of this command.
glbpgroup-numbernamegroup-name
noglbpgroup-numbernamegroup-name
Syntax Description
group-number
GLBP group number. Range is from 0 to 1023.
group-name
GLBP group name specified as a character string. Maximum number of characters is 255.
Command Default
IP redundancy for a group is disabled.
Command Modes
Interface configuration (config-if)
Command History
Release
Modification
12.3(7)T
This command was introduced.
12.2(33)SRA
This command was integrated into Cisco IOS Release 12.2(33)SRA.
12.2SX
This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware.
Cisco IOS XE Release 2.1
This command was integrated into Cisco IOS XE Release 2.1.
Usage Guidelines
The GLBP redundancy client must be configured with the same GLBP group name so that the redundancy client and the GLBP group can be connected.
Examples
The following example assigns the abccomp name to GLBP group 10:
Router(config-if)# glbp 10 name abccomp
Related Commands
Command
Description
glbpauthentication
Configures an authentication string for the GLBP.
glbpforwarderpreempt
Configures a router to take over as AVF for a GLBP group if it has higher priority than the current AVF.
glbpip
Activates GLBP.
glbpload-balancing
Specifies the load-balancing method used by the AVG of GLBP.
glbppreempt
Configures the gateway to take over as AVG for a GLBP group if it has higher priority than the current AVG.
glbppriority
Sets the priority level of the gateway within a GLBP group.
glbptimers
Configures the time between hello packets sent by the GLBP gateway and the time for which the virtual gateway and virtual forwarder information is considered valid.
glbptimersredirect
Configures the time during which the AVG for a GLBP group continues to redirect clients to a secondary AVF.
glbpweighting
Specifies the initial weighting value of the GLBP gateway.
glbpweightingtrack
Specifies a tracking object where the GLBP weighting changes based on the availability of the object being tracked.
showglbp
Displays GLBP information.
track
Configures an interface to be tracked where the GLBP weighting changes based on the state of the interface.
glbp preempt
To configure the gateway to take over as active virtual gateway (AVG) for a Gateway Load Balancing Protocol (GLBP) group if it has higher priority than the current AVG, use the glbppreempt command in interface configuration mode. To disable this function, use the no form of this command.
glbpgrouppreempt
[ delayminimumseconds ]
noglbpgrouppreempt
[ delayminimum ]
Syntax Description
group
GLBP group number in the range from 0 to 1023.
delayminimumseconds
(Optional) Specifies a minimum number of seconds that the router will delay before taking over the role of AVG. The range is from 0 to 3600 seconds with a default delay of 30 seconds.
Command Default
A GLBP router with a higher priority than the current AVG cannot assume the role of AVG.
The default delay value is 30 seconds.
Command Modes
Interface configuration (config-if)
Command History
Release
Modification
12.2(14)S
This command was introduced.
12.2(15)T
This command was integrated into Cisco IOS Release 12.2(15)T.
12.2(33)SRA
This command was integrated into Cisco IOS Release 12.2(33)SRA.
12.2SX
This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware.
Cisco IOS XE Release 2.1
This command was integrated into Cisco IOS XE Release 2.1.
Examples
The following example shows a router being configured to preempt the current AVG when its priority of 254 is higher than that of the current AVG. If the router preempts the current AVG, it waits 60 seconds before assuming the role of AVG.
Sets the priority level of the router within a GLBP group.
glbp priority
To set the priority level of the gateway within a Gateway Load Balancing Protocol (GLBP) group, use the glbppriority command in interface configuration mode. To remove the priority level of the gateway, use the no form of this command.
glbpgroupprioritylevel
noglbpgroupprioritylevel
Syntax Description
group
GLBP group number in the range from 0 to 1023.
level
Priority of the gateway within the GLBP group. The range is from 1 to 255. The default is 100.
Command Default
The GLBP virtual gateway preemptive scheme is disabled
Command Modes
Interface configuration (config-if)
Command History
Release
Modification
12.2(14)S
This command was introduced.
12.2(15)T
This command was integrated into Cisco IOS Release 12.2(15)T.
12.2(33)SRA
This command was integrated into Cisco IOS Release 12.2(33)SRA.
12.2SX
This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware.
Usage Guidelines
Use this command to control which virtual gateway becomes the active virtual gateway (AVG). After the priorities of several different virtual gateways are compared, the gateway with the numerically higher priority is elected as the AVG. If two virtual gateways have equal priority, the gateway with the higher IP address is selected.
Examples
The following example shows a virtual gateway being configured with a priority of 254:
Router(config-if)# glbp 10 priority 254
Related Commands
Command
Description
glbpip
Enables GLBP.
glbppreempt
Configures a router to take over as the AVG for a GLBP group if it has higher priority than the current AVG.
glbp sso
To enable Gateway Load Balancing Protocol (GLBP) support of Stateful Switchover (SSO) if it has been disabled, use the glbpssocommand in global configuration mode. To disable GLBP support of SSO, use the no form of this command.
glbpsso
noglbpsso
Syntax Description
This command has no arguments or keywords.
Command Default
GLBP Support for SSO is enabled by default.
Command Modes
Global configuration (config)
Command History
Release
Modification
12.2(31)SB2
This command was introduced.
12.2(33)SRB
This command was integrated into Cisco IOS Release 12.2(33)SRB.
12.2(33)SXH
This command was integrated into Cisco IOS Release 12.2(33)SXH.
Usage Guidelines
Use this command to enable GLBP support of SSO if it has been manually disabled by the noglbpsso command.
Examples
The following example show how to disable GLBP support of SSO:
Router(config)# no glbp sso
Related Commands
Command
Description
debugglbpevents
Displays debugging messages about GLBP events.
showglbp
Displays GLBP information.
glbp timers
To configure the time between hello packets sent by the Gateway Load Balancing Protocol (GLBP) gateway and the time that the virtual gateway and virtual forwarder information is considered valid, use the glbptimers command in interface configuration mode. To restore the timers to their default values, use the no form of this command.
glbpgrouptimers [msec] hellotime [msec] holdtime
noglbpgrouptimers
Syntax Description
group
GLBP group number in the range from 0 to 1023.
msec
(Optional) Specifies that the following (hellotime or holdtime) argument value will be expressed in milliseconds rather than seconds.
hellotime
Hello interval. The default is 3 seconds (3000 milliseconds).
holdtime
Time before the virtual gateway and virtual forwarder information contained in the hello packet is considered invalid. The default is 10 seconds (10,000 milliseconds).
Command Default
GLBP timers are set to their default values.
Command Modes
Interface configuration (config-if)
Command History
Release
Modification
12.2(14)S
This command was introduced.
12.2(15)T
This command was integrated into Cisco IOS Release 12.2(15)T.
12.2(33)SRA
This command was integrated into Cisco IOS Release 12.2(33)SRA.
12.2SX
This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware.
Cisco IOS XE Release 2.1
This command was integrated into Cisco IOS XE Release 2.1.
Usage Guidelines
Routers on which timer values are not configured can learn timer values from the active virtual gateway (AVG). The timers configured on the AVG always override any other timer settings. All routers in a GLBP group should use the same timer values. If a GLBP gateway sends a hello message, the information should be considered valid for one holdtime. Normally, holdtime is greater than three times the value of hello time, (holdtime > 3 * hellotime). The range of values for holdtime force the holdtime to be greater than the hello time.
Examples
The following example shows the GLBP group 10 on Fast Ethernet interface 0/0 timers being configured for an interval of 5 seconds between hello packets, and the time after which virtual gateway and virtual forwarder information is considered to be invalid to 18 seconds:
To configure the time during which the active virtual gateway (AVG) for a Gateway Load Balancing Protocol (GLBP) group continues to redirect clients to a secondary active virtual forwarder (AVF), use the
glbptimersredirect command in interface configuration mode. To restore the redirect timers to their default values, use the
no form of this command.
glbpgrouptimersredirectredirecttimeout
noglbpgrouptimersredirectredirecttimeout
Syntax Description
group
GLBP group number in the range from 0 to 1023.
redirect
The redirect timer interval in the range from 0 to 3600 seconds. The default is 600 seconds (10 minutes).
Note
The zero value for the
redirect argument cannot be removed from the range of acceptable values because preexisting configurations of Cisco IOS software already using the zero value could be negatively affected during an upgrade. However, be advised that a zero setting is not recommended and, if used, results in a redirect timer that never expires. If the redirect timer does not expire, then when a router fails, new hosts continue to be assigned to the failed router instead of being redirected to the backup.
timeout
The time interval, in the range from 600 to 64,800 seconds, before the secondary virtual forwarder becomes unavailable. The default is 14,400 seconds (4 hours).
Command Default
The GLBP redirect timers are set to their default values.
Command Modes
Interface configuration (config-if)
Command History
Release
Modification
12.2(14)S
This command was introduced.
12.2(15)T
This command was integrated into Cisco IOS Release 12.2(15)T.
12.2(33)SRA
This command was integrated into Cisco IOS Release 12.2(33)SRA.
12.2SX
This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware.
Cisco IOS XE Release 2.1
This command was integrated into Cisco IOS XE Release 2.1.
Usage Guidelines
A virtual forwarder that is assigned a virtual MAC address by the AVG is known as a primary virtual forwarder. If the virtual forwarder has learned the virtual MAC address from hello messages, it is referred to as a secondary virtual forwarder.
The redirect timer sets the time delay between a forwarder failing on the network and the AVG assuming that the forwarder will not return. The virtual MAC address to which the forwarder was responsible for replying is still given out in Address Resolution Protocol (ARP) replies, but the forwarding task is handled by another router in the GLBP group.
Note
The zero value for the
redirect argument cannot be removed from the range of acceptable values because preexisting configurations of Cisco IOS software already using the zero value could be negatively affected during an upgrade. However, be advised that a zero setting is not recommended and, if used, results in a redirect timer that never expires. If the redirect timer does not expire, then when a router fails, new hosts continue to be assigned to the failed router instead of being redirected to the backup.
The timeout interval is the time delay between a forwarder failing on the network and the MAC address for which the forwarder was responsible becoming inactive on all of the routers in the GLBP group. After the timeout interval, packets sent to this virtual MAC address will be lost. The timeout interval must be long enough to allow all hosts to refresh their ARP cache entry that contained the virtual MAC address.
Examples
The following example shows the commands used to configure GLBP group 1 on Fast Ethernet interface 0/0 with a redirect timer of 1800 seconds (30 minutes) and timeout interval of 28,800 seconds (8 hours):
To specify the initial weighting value of the Gateway Load Balancing Protocol (GLBP) gateway, use the
glbpweighting command in interface configuration mode. To restore the default values, use the
noform of this command.
Maximum weighting value in the range from 1 to 254. Default value is 100.
lowerlower
(Optional) Specifies a lower weighting value in the range from 1 to the specified maximum weighting value. Default value is 1.
upperupper
(Optional) Specifies an upper weighting value in the range from the lower weighting to the maximum weighting value. The default value is the specified maximum weighting value.
Command Default
The default gateway weighting value is 100 and the default lower weighting value is 1.
Command Modes
Interface configuration (config-if)
Command History
Release
Modification
12.2(14)S
This command was introduced.
12.2(15)T
This command was integrated into Cisco IOS Release 12.2(15)T.
12.2(33)SRA
This command was integrated into Cisco IOS Release 12.2(33)SRA.
12.2SX
This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware.
Cisco IOS XE Release 2.1
This command was integrated into Cisco IOS XE Release 2.1.
Usage Guidelines
The weighting value of a virtual gateway is a measure of the forwarding capacity of the gateway. If a tracked interface on the router fails, the weighting value of the router may fall from the maximum value to below the lower threshold, causing the router to give up its role as a virtual forwarder. When the weighting value of the router rises above the upper threshold, the router can resume its active virtual forwarder role.
Use the
glbpweightingtrack and
track commands to configure parameters for an interface to be tracked. If an interface on a router goes down, the weighting for the router can be reduced by a specified value.
Examples
The following example shows the weighting of the gateway for GLBP group 10 being set to a maximum of 110 with a lower weighting limit of 95 and an upper weighting limit of 105:
Specifies an object to be tracked that affects the weighting of a GLBP gateway.
track
Configures an interface to be tracked.
glbp weighting track
To specify a tracking object where the Gateway Load Balancing Protocol (GLBP) weighting changes based on the availability of the object being tracked, use the
glbpweightingtrack command in interface configuration mode. To remove the tracking, use the
no form of this command.
Object number representing an item to be tracked. The valid range is 1 to 1000. Use the
track command to configure the tracked object.
decrementvalue
(Optional) Specifies an amount by which the GLBP weighting for the router is decremented (or incremented) when the interface goes down (or comes back up). The value range is from 1 to 254, with a default value of 10.
Command Default
Objects are not tracked for GLBP weighting changes.
Command Modes
Interface configuration (config-if)
Command History
Release
Modification
12.2(14)S
This command was introduced.
12.2(15)T
This command was integrated into Cisco IOS Release 12.2(15)T.
12.2(33)SRA
This command was integrated into Cisco IOS Release 12.2(33)SRA.
12.2SX
This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware.
Cisco IOS XE Release 2.1
This command was integrated into Cisco IOS XE Release 2.1.
15.1(3)T
This command was modified. The valid range for the
object-number argument increased to 1000.
15.1(1)S
This command was modified. The valid range for the
object-number argument increased to 1000.
12.2(50)SY
This command was modified. The valid range for the
object-number argument increased to 1000.
Usage Guidelines
This command ties the weighting of the GLBP gateway to the availability of its interfaces. It is useful for tracking interfaces that are not configured for GLBP.
When a tracked interface goes down, the GLBP gateway weighting decreases by 10. If an interface is not tracked, its state changes do not affect the GLBP gateway weighting. For each GLBP group, you can configure a separate list of interfaces to be tracked.
The optional
value argument specifies by how much to decrement the GLBP gateway weighting when a tracked interface goes down. When the tracked interface comes back up, the weighting is incremented by the same amount.
When multiple tracked interfaces are down, the configured weighting decrements are cumulative.
Use the
track command to configure each interface to be tracked.
As of Cisco IOS Release 15.1(3)T, 15.1(1)S and 12.2(50)SY, a maximum of 1000 objects can be tracked. Although 1000 tracked objects can be configured, each tracked object uses CPU resources. The amount of available CPU resources on a router is dependent upon variables such as traffic load and how other protocols are configured and run. The ability to use 1000 tracked objects is dependent upon the available CPU. Testing should be conducted on site to ensure that the service works under the specific site traffic conditions.
Examples
In the following example, Fast Ethernet interface 0/0 tracks two interfaces represented by the numbers 1 and 2. If interface 1 goes down, the GLBP gateway weighting decreases by the default value of 10. If interface 2 goes down, the GLBP gateway weighting decreases by 5.
Specifies the initial weighting value of a GLBP gateway.
track
Configures an interface to be tracked.
ip gdp
To configure the router discovery mechanism, use the ipgdp command in global configuration mode. To disable the configuration, use the no form of this command.
ipgdp
{ eigrp | irdp [multicast] | rip }
noipgdp
{ eigrp | irdp [multicast] | rip }
Syntax Description
eigrp
Configures a gateway to discover routers transmitting Enhanced Interior Gateway Routing Protocol (EIGRP) router updates.
irdp
Configures a gateway to discover routers transmitting ICMP Router Discovery Protocol (IRDP) router updates.
multicast
(Optional) Specifies the router to multicast IRDP solicitations.
rip
Configures a gateway to discover routers transmitting Routing Information Protocol (RIP) router updates.
Command Default
The router discovery mechanism is not configured.
Command Modes
Global configuration (config)
Command History
Release
Modification
15.0(1)M
This command was introduced in a release earlier than Cisco IOS Release 15.0(1)M.
Usage Guidelines
You must disable IP routing to configure the ipgdp command.
Examples
The following example shows how to configure the RIP router discovery mechanism:
Router# configure terminal
Router(config)# ip gdp rip
Related Commands
Command
Description
iphost
Defines static hostname-to-address mappings in the DNS hostname cache for a DNS view.
iproute
Establishes static routes.
ip irdp
To enable ICMP Router Discovery Protocol (IRDP) processing on an interface, use the
ipirdp command in interface configuration mode. To disable IRDP routing, use the
no form of this command.
(Optional) Use the multicast address (224.0.0.1) instead of IP broadcasts.
holdtimeseconds
(Optional) Length of time in seconds that advertisements are held valid. Default is three times the
maxadvertinterval value. Must be greater than
maxadvertinterval and cannot be greater than 9000 seconds.
maxadvertintervalseconds
(Optional) Maximum interval in seconds between advertisements. The range is from 1 to 1800. A value of 0 means only advertise when solicited. The default is 600 seconds.
minadvertintervalseconds
(Optional) Minimum interval in seconds between advertisements. The range is from 1 to 1800. The default is 450 seconds.
preferencenumber
(Optional) Preference value. The allowed range is -2 31 to 2 31 . The default is 0. A higher value increases the preference level of the router. You can modify a particular router so that it will be the preferred router to which other routers will home.
addressaddress[number]
(Optional) IP address (address) to proxy advertise, and optionally, its preference value (number).
Command Default
IRDP is disabled by deafult. When enabled, IRDP uses these defaults:
Broadcast IRDP advertisements
Maximum interval between advertisements: 600 seconds
Minimum interval between advertisements: 450 seconds
Preference: 0
Command Modes
Interface configuration (config-if)
Command History
Release
Modification
10.0
This command was introduced.
12.2(33)SRA
This command was integrated into Cisco IOS Release 12.2(33)SRA.
12.2SX
This command is supported in the Cisco IOS Release 12.2SX train. Support in a specific 12.2SX release of this train depends on your feature set, platform, and platform hardware.
Usage Guidelines
If you change the
maxadvertinterval value, the other two values also change, so it is important to change the
maxadvertinterval value before changing either the
holdtime or
minadvertinterval values.
The
ipirdpmulticast command allows for compatibility with Sun Microsystems Solaris, which requires IRDP packets to be sent out as multicasts. Many implementations cannot receive these multicasts; ensure end-host ability before using this command.
Examples
The following example sets the various IRDP processes:
Router(config)# interface ethernet 0 !Enable irdp on interface Ethernet 0.
Router(config-if)# ip irdp
Router(config-if)# ip irdp multicast !Send IRDP advertisements to the multicast address.
Router(config-if)# ip irdp preference 900 !Increase router preference from 0 to 900.
Router(config-if)# ip irdp maxadvertinterval 400 !Set maximum time between advertisements to 400 secs.
Router(config-if)# ip irdp minadvertinterval 100 !Set minimum time between advertisements to 100 secs.
Router(config-if)# ip irdp holdtime 6000 !Advertisements are good for 6000 seconds.
Router(config-if)# ip irdp address 10.108.14.5 !Proxy-advertise 10.108.14.5 with default router preference.
Router(config-if)# ip irdp address 10.108.14.6 50 !Proxy-advertise 10.108.14.6 with preference of 50.