Technical Documentation

Configuring an Interface to Accept Packets Destined for the Virtual IP Address

To configure an interface to accept packets destined for the virtual IP address, include the accept-data statement:

You can include this statement at the following hierarchy levels:

  • [edit interfaces interface-name unit logical-unit-number family (inet | inet6) address address (vrrp-group | vrrp-inet6-group)] group-id
  • [edit logical-systems logical-system-name interfaces interface-name unit logical-unit-number family (Inet | inet6) address address (vrrp-group | vrrp-inet6-group)] group-id

To prohibit the interface from accepting packets destined for the virtual IP address, include the no-accept-data statement:

Including the accept-data statement has the following consequences:

  • If the master router owns the virtual IP address, the accept-data statement is not valid.
  • If the priority of the master router is set to 255, the accept-data statement is not valid.
  • To restrict incoming IP packets to ICMP only, you must configure firewall filters to accept only ICMP packets.
  • If the master router owns the virtual IP address, the master router responds to Internet Control Message Protocol (ICMP) message requests only.
  • If you include the accept-data statement:
    • Your routing platform configuration does not comply with RFC 3768 (see section 6.4.3 of RFC 3768, Virtual Router Redundancy Protocol (VRRP).
    • VRRP clients can process gratuitous ARP.
    • VRRP clients must not use packets other than ARP replies to update their ARP cache.

Published: 2010-04-28