Securing HSRP with MD5

Bundle lab · $29.99

Harden an HSRP virtual default gateway with MD5 authentication so only trusted routers can participate. You’ll secure an existing HSRP group on two IOS routers that share a user VLAN via a single L2 switch. Validate the authentication state on both routers and confirm the endpoint still reaches the virtual IP.

Learning objectives

• Explain why unauthenticated HSRP can be hijacked by a rogue router
• Configure HSRP MD5 authentication on both peers with a matching key-string
• Verify HSRP authentication state and active/standby roles with show standby
• Confirm end-host reachability to the virtual default gateway

Troubleshooting focus

• HSRP peers remain in Init or Speak due to mismatched authentication key-string
• Incorrect HSRP group number or virtual IP prevents the pair from forming
• End host default gateway set to a physical router IP instead of the virtual IP