Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Configuring Basic VRRP Support for QFX

    To configure basic VRRP support, configure VRRP groups on interfaces by including the vrrp-group statement:

    vrrp-group group-id {priority number;virtual-address [ addresses ];}

    An interface can be a member of multiple VRRP groups.

    You can include this statement at the following hierarchy level:

    • [edit interfaces interface-name unit logical-unit-number family inet address address]

    For each interface, you must configure the following:

    • Group identifier—Assign a value from 0 through 255. You must use the same identifier for each switch in the VRRP group.
    • Priority—Assign a value from 1 through 255. The switch with the highest priority becomes the VRRP master. Assign different priorities to each switch in the VRRP group. If there are two or more switches with the same priority, the switch with the VRRP interface that has the highest IP address becomes the master.
    • Virtual IP address—Normally, you configure only one address per group, but you can configure as many as eight addresses. Do not include a prefix length in a virtual IP address. The following considerations apply to configuring a virtual IP address:
      • You must configure the same address on all the switches in the VRRP group.
      • If you configure a virtual IP address to be the same as a physical interface address, the switch with that interface becomes the master for the group. You must configure the priority to be 255, and you must configure preemption by including the preempt statement.
      • If the virtual IP address is not the same as the physical interface address, you must ensure that the address does not appear anywhere else in the switch configuration. For example, verify that you do not use this address for another interface (including an aggregated Ethernet interface) or for a static ARP entry.

    Note: If you enable MAC source address filtering on an interface, you must include the virtual MAC address in the list of source MAC addresses that you specify in the source-address-filter statement at the [edit interfaces interface-name] hierarchy. MAC addresses ranging from 00:00:5e:00:01:00 through 00:00:5e:00:01:ff are reserved for VRRP, as defined in RFC 3768. The VRRP group number must be the decimal equivalent of the last hexadecimal byte of the virtual MAC address.

    Modified: 2016-04-29