[j-nsp] VRRP

[Jeff S Wheeler]

On Mon, 2006-01-23 at 17:15 +0000, Ian MacKinnon wrote:
> > The only "gotcha" is to ensure that you reserve 3 addresses for your

If you use authentication for your VRRP groups, note also that the VRRP
packets will appear to the routing engine filter as IPSEC packets, and
will not be matched by from { protocol vrrp; }.  You can match on the
multicast destination (224.0.0.18) or the IPSEC AH value.

- J