[j-nsp] VRRP

Jeff S Wheeler jsw at inconcepts.biz
Mon Jan 23 12:59:18 EST 2006


On Mon, 2006-01-23 at 17:15 +0000, Ian MacKinnon wrote:
> > The only "gotcha" is to ensure that you reserve 3 addresses for your

If you use authentication for your VRRP groups, note also that the VRRP
packets will appear to the routing engine filter as IPSEC packets, and
will not be matched by from { protocol vrrp; }.  You can match on the
multicast destination (224.0.0.18) or the IPSEC AH value.

- J



More information about the juniper-nsp mailing list