Configuring An Interface To Accept All Packets Destined For The Virtual Ip Address Of A Vrrp Group - Juniper EX9200 Features Manual

High Availability Feature Guide for EX9200 Switches
Configuring an Interface to Accept All Packets Destined for the Virtual IP Address of
a VRRP Group
Related
Documentation
140
In VRRP implementations where the router acting as the master router is not the IP
address owner—the IP address owner is the router that has the interface whose actual
IP address is used as the virtual router's IP address (virtual IP address)— the master
router accepts only the ARP packets from the packets that are sent to the virtual IP
address. Junos OS enables you to override this limitation with the help of the
configuration. When the
accept-data
master router accepts all packets sent to the virtual IP address even when the master
router is not the IP address owner.
NOTE: If the master router is the IP address owner or has its priority set to
255, the master router, by default, accepts all packets addressed to the virtual
IP address. In such cases, the
To configure an interface to accept all packets sent to the virtual IP address, include the
statement:
accept-data
accept-data;
You can include this statement at the following hierarchy levels:
[edit interfaces interface-name unit logical-unit-number family (inet | inet6) address
address (vrrp-group | vrrp-inet6-group) group-id]
[edit logical-systems logical-system-name interfaces interface-name unit
logical-unit-number family (Inet | inet6) address address (vrrp-group | vrrp-inet6-group)
group-id]
To prevent a master router that is the IP address owner or has its priority set to 255 from
accepting packets other than the ARP packets addressed to the virtual IP address, include
the statement:
no-accept-data
no-accept-data;
NOTE:
If you want to restrict the incoming IP packets to ICMP packets only, you
must configure firewall filters to accept only ICMP packets.
If you include the
configuration does not comply with RFC 3768 (see section 6.4.3 of RFC
3768, Virtual Router Redundancy Protocol (VRRP).
Understanding VRRP on page 119
Configuring VRRP on page 150
statement is included in the configuration, the
configuration is not required.
accept-data
statement, your routing platform
accept-data
Copyright © 2017, Juniper Networks, Inc.
accept-data