Friends,
I have several pairs of ASR 9K routers that currently participate in VRRP for gateway redundancy. I need to add a password to those VRRP sessions, but would like to do it without impacting the gateway and current "ownership" of the floating IP.
On an ISR, I would shut down the VRRP on the interface on the secondary/backup VRRP router to prevent it from going split-master during the short duration where I have no applied the password to both routers. Once the password is applied I would no-shut that VRRP session on the secondary to allow it to come back up as a backup. Hitless.
On the ASR, there is no shutdown command I can find for a VRRP session. Can you recommend a best way to implement a VRRP password on an ASR router pair without any impact to the gateway address availability? I'm thinking just removing the VRRP config on the secondary/backup router first would be the closest thing representing what I could perform on the ISR.
Thanks and Regards,
Eric
