Options
VRRP Authentication
So this is nit-picking here - but I just got hit with a Boson question that has me thinking....
The question was a drag and drop and it asked which First Hop Redundancy Protocols supported Authentication.
The question I have should I go into the test thinking that VRRP refers to the earlier RFC 2338 or the later RFC 3768?
RFC 3768 removed the authentication - but from the RFC is says that
" Earlier version of the VRRP specification had several defined
authentication types [RFC 2338]. These were removed in this
specification because operational experience showed that they did not
provide any real security and would only cause multiple masters to be
created.
But then also says...
"5.3.6.2. Authentication Type 1 - Reserved
This authentication type is reserved to maintain backwards
compatibility with RFC 2338."
So - my question is - does the later RFC still accept authentication? Should I just assume for the test that VRRP supports authentication?
The question was a drag and drop and it asked which First Hop Redundancy Protocols supported Authentication.
The question I have should I go into the test thinking that VRRP refers to the earlier RFC 2338 or the later RFC 3768?
RFC 3768 removed the authentication - but from the RFC is says that
" Earlier version of the VRRP specification had several defined
authentication types [RFC 2338]. These were removed in this
specification because operational experience showed that they did not
provide any real security and would only cause multiple masters to be
created.
But then also says...
"5.3.6.2. Authentication Type 1 - Reserved
This authentication type is reserved to maintain backwards
compatibility with RFC 2338."
So - my question is - does the later RFC still accept authentication? Should I just assume for the test that VRRP supports authentication?