[j-nsp] IPv6 VRRP issue on SRX100

Try Chhay try at eintellego.asia
Sat Dec 29 09:28:53 EST 2012


Problem: *Both SRX100 IPv6 VRRP are master role.*

The topology is that two SRX100 are connected to Cisco 2950 switch. After
configure IPv4 and IPv6 VRRP ready getting IPv4 VRRP is working as normal,
but IPv6 VRRP is not working. A PC is able to ping IPv6 on each SRX100 but
it is unable to ping virtual IPv6 address. Please advice or comment to fix
IPv6 VRRP to work on SRX100. Thanks!

*SRX100-A# show interfaces vlan unit 90
family inet {
    address 192.168.147.2/24 {
        vrrp-group 1 {
            virtual-address 192.168.147.1;
            priority 110;
            preempt;
            accept-data;
        }
    }
}
family inet6 {
    address fe80::2/64;
    address 2001::2/64 {
        vrrp-inet6-group 2 {
            virtual-inet6-address 2001::1;
            virtual-link-local-address fe80::1;
            priority 110;
            preempt;
            accept-data;
        }
    }
}


SRX100-B# show interfaces vlan unit 90
family inet {
    address 192.168.147.3/24 {
        vrrp-group 1 {
            virtual-address 192.168.147.1;
            preempt;
            accept-data;
        }
    }
}
family inet6 {
    address fe80::3/64;
    address 2001::3/64 {
        vrrp-inet6-group 2 {
            virtual-inet6-address 2001::1;
            virtual-link-local-address fe80::1;
            priority 100;
            preempt;
            accept-data;
        }
    }
}
Result:
SRX100-A# run show vrrp
Interface     State       Group   VR state VR Mode   Timer    Type   Address
vlan.90       up              1   master   Active      A  0.196 lcl
192.168.147.2
                                                                vip
192.168.147.1
vlan.90       up              2   master   Active      A  0.369 lcl
2001::2
                                                                vip
fe80::1
                                                                vip
2001::1

SRX100# run show vrrp
Interface     State       Group   VR state VR Mode   Timer    Type   Address
vlan.90       up              1   backup   Active      D  3.310 lcl
192.168.147.3
                                                                vip
192.168.147.1
                                                                mas
192.168.147.2
vlan.90       up              2   master   Active      A  0.734 lcl
2001::3
                                                                vip
fe80::1
                                                                vip
2001::1
*


More information about the juniper-nsp mailing list