Accept Packets Destined for the Virtual IP Address
To configure an interface to accept packets destined for the virtual IP address, include the
accept-datastatement:accept-data;To prohibit the interface from accepting packets destined for the virtual IP address, include the
no-accept-datastatement:no-accept-data;You can configure these statements at the following hierarchy levels:
- [
editinterfacesinterface-nameunitlogical-unit-numberfamilyinetaddressaddress
vrrp-groupgroup-number],- [
edit logical-routerslogical-router-nameinterfacesinterface-nameunitlogical-unit-numberfamilyinetaddressaddressvrrp-groupgroup-number]The
accept-datastatement has the following consequences:
- If the master router owns the virtual IP address, the
accept-datastatement is not valid.- If the master router owns the virtual IP address, the master router responds to ICMP message requests only.
- when the priority of the master router is set to 255, the
accept-datastatement is not valid.- To restrict incoming IP packets to ICMP only, you must configure firewall filters to accept only ICMP packets.
- If you include the
accept-datastatement, your router configuration will not comply with RFC 2338.- If you include the
accept-datastatement, VRRP clients should be able to process Gratuitous ARP.- If you include the
accept-datastatement, VRRP clients should not use packets other than ARP replies to update their ARP cache.