Which two commands would set the authentication method for VRRP on an interface to use the key string Cisco123 (one command for MD5 authentication and one command for plaintext authentication)? (Choose two.)

IT Exam Items RepositoryCategory: CCNP ENCOR v9Which two commands would set the authentication method for VRRP on an interface to use the key string Cisco123 (one command for MD5 authentication and one command for plaintext authentication)? (Choose two.)

Which two commands would set the authentication method for VRRP on an interface to use the key string Cisco123 (one command for MD5 authentication and one command for plaintext authentication)? (Choose two.)

  • vrrp 1 authentication md5 key-string Cisco123
  • vrrp authentication md5 key Cisco123
  • vrrp 1 authentication text Cisco123
  • vrrp 1 authentication plaintext key-string Cisco123
  • vrrp authentication key-string Cisco123

Explanation: According to the sources, while modern VRRP standards (RFC 3768 and RFC 5798) removed authentication support, Cisco IOS devices still support plaintext and MD5 authentication mechanisms originally specified in RFC 2338.

The specific command syntax required to implement these on an interface is as follows:

  • Plaintext Authentication: The command used is vrrp [group-number] authentication text [key-string].
  • MD5 Authentication: The command used is vrrp [group-number] authentication md5 key-string [key-string].

In both cases, the group number (1 in this example) must be specified to associate the authentication method with the correct VRRP group on the interface. MD5 is generally the preferred method because it computes a hash on a portion of each message, ensuring that hash keys are never actually exchanged over the network.

Related exam: Modules 1 – 7: Checkpoint Exam: Network Switching Answers (CCNP ENCOR v9)