Configuring an Interface to Accept Packets Destined for the Virtual IP Address

To configure an interface to accept packets destined for the virtual IP address, include the accept-data statement:

You can include this statement at the following hierarchy levels:

• [edit interfaces interface-name unit logical-unit-number family (inet | inet6) address address (vrrp-group | vrrp-inet6-group)] group-id
• [edit logical-systems logical-system-name interfaces interface-name unit logical-unit-number family (Inet | inet6) address address (vrrp-group | vrrp-inet6-group)] group-id

To prohibit the interface from accepting packets destined for the virtual IP address, include the no-accept-data statement:

Including the accept-data statement has the following consequences:

• If the master router owns the virtual IP address, the accept-data statement is not valid.
• If the priority of the master router is set to 255, the accept-data statement is not valid.
• To restrict incoming IP packets to ICMP only, you must configure firewall filters to accept only ICMP packets.
• If the master router owns the virtual IP address, the master router responds to Internet Control Message Protocol (ICMP) message requests only.
• If you include the accept-data statement:
  • Your routing platform configuration does not comply with RFC 2378.
  • VRRP clients can process gratuitous ARP.
  • VRRP clients must not use packets other than ARP replies to update their ARP cache.