Configuring an Interface to Accept Packets Destined for the Virtual IP Address

To configure an interface to accept packets destined for the virtual IP address, include the accept-data statement:

You can include this statement at the following hierarchy levels:

[edit interfaces interface-name unit logical-unit-number family (inet | inet6) address address (vrrp-group | vrrp-inet6-group)] group-id
[edit logical-systems logical-system-name interfaces interface-name unit logical-unit-number family (Inet | inet6) address address (vrrp-group | vrrp-inet6-group)] group-id

To prohibit the interface from accepting packets destined for the virtual IP address, include the no-accept-data statement:

Including the accept-data statement has the following consequences:

If the master router owns the virtual IP address, the accept-data statement is not valid.
If the priority of the master router is set to 255, the accept-data statement is not valid.
To restrict incoming IP packets to ICMP only, you must configure firewall filters to accept only ICMP packets.
If the master router owns the virtual IP address, the master router responds to Internet Control Message Protocol (ICMP) message requests only.
If you include the accept-data statement:
- Your routing platform configuration does not comply with RFC 3768 (see section 6.4.3 of RFC 3768, Virtual Router Redundancy Protocol (VRRP).
- VRRP clients can process gratuitous ARP.
- VRRP clients must not use packets other than ARP replies to update their ARP cache.