[j-nsp] VRRP real life examples?

[Hannes Gredler]

in most deployments i have seen, you want to add

[edit interfaces ge-0/0/0]
    unit 202 {
        family inet {
            address 10.128.112.189/26 {
                vrrp-group 202 {
|                   preempt {
|                      hold-time 200;
|                   }
                }
            }
        }
   

which gives you mastership determinism as well as
blackholing avoidance once the master comes
up after e.g. a reboot;

/hannes


On Sat, Jul 30, 2005 at 12:07:11AM +0300, Cougar wrote:
| 
| On Fri, 29 Jul 2005, Joe McGuckin wrote:
| 
| > Would some please post a couple of examples that are more than just the
| > 'toy' examples found in the users guide?
| 
| Primary router:
| 
| interfaces {
|     ge-0/0/0 {
|         vlan-tagging;
|         unit 202 {
|             vlan-id 202;
|             family inet {
|                 address 10.128.112.189/26 {
|                     vrrp-group 202 {
|                         virtual-address 10.128.112.190;
|                         priority 200;
|                         advertise-interval 1;
|                         accept-data;
|                         authentication-type md5;
|                         authentication-key "blaablaa";
|                     }
|                 }
|             }
|         }
|     }
| }
| 
| Backup router:
| 
| interfaces {
|     ge-0/0/0 {
|         vlan-tagging;
|         unit 202 {
|             vlan-id 202;
|             family inet {
|                 address 10.128.112.188/26 {
|                     vrrp-group 202 {
|                         virtual-address 10.128.112.190;
|                         priority 100;
|                         advertise-interval 1;
|                         accept-data;
|                         authentication-type md5;
|                         authentication-key "blaablaa";
|                     }
|                 }
|             }
|         }
|     }
| }
| 
| 
| Interval is very short to allow fast switchover. Also it needs that IGP
| timeouts are lower than normal. I use ISIS 
| 
| protocols {
|     isis {
|         interface ge-0/0/0.202 {
|             level 1 disable;
|             level 2 {
|                 hello-interval 1;
|                 hold-time 3;
|             }
|         }
|     }
| }