[j-nsp] IPv6 VRRP issue on SRX100

[Try Chhay]

Hi,

Please see the config as the follows:

SRX100-A# show interfaces vlan unit 90 family inet6
address fe80::2/64;
address 2001::2/64 {
    vrrp-inet6-group 2 {
        virtual-inet6-address 2001::1;
        virtual-link-local-address fe80::1;
        priority 110;
        inet6-advertise-interval 100;
        preempt;
        accept-data;
    }
}

SRX100-B# show interfaces vlan unit 90 family inet6
address fe80::3/64;
address 2001::3/64 {
    vrrp-inet6-group 2 {
        virtual-inet6-address 2001::1;
        virtual-link-local-address fe80::1;
        priority 100;
        inet6-advertise-interval 100;
        preempt;
        accept-data;
    }
}

On each SRX100
# show protocols
router-advertisement {
    interface vlan.90 {
        max-advertisement-interval 4;
        virtual-router-only;
        prefix 2001:44b8:31b1:7700::/56;
        prefix 2001::/64;
    }
# show security forwarding-options
family {
    inet6 {
        mode packet-based;
    }
}

SRX100-A# run show vrrp
Interface     State       Group   VR state VR Mode   Timer    Type   Address
vlan.90       up              1   master   Active      A  0.843 lcl
192.168.147.2
                                                                vip
192.168.147.1
vlan.90       up              2   master   Active      A  0.038 lcl
2001::2
                                                                vip
fe80::1
                                                                vip
2001::1

SRX100-B# run show vrrp
Interface     State       Group   VR state VR Mode   Timer    Type   Address
vlan.90       up              1   backup   Active      D  3.135 lcl
192.168.147.3
                                                                vip
192.168.147.1
                                                                mas
192.168.147.2
vlan.90       up              2   backup   Active      D  0.283 lcl
2001::3
                                                                vip
fe80::1
                                                                vip
2001::1
                                                                mas
fe80::2

In the result client is unable to ping virtual IPv6 address. Any idea?

*
*



On Mon, Dec 31, 2012 at 3:50 PM, <sthaug at nethelp.no> wrote:

> > After changing to *packet base *for IPv6, the IPv6 VRRP seems to be
> working
> > as expected. The higher priority is master and lower priority is backup.
> > However, client still can not ping virtual IPv6 address while it can ping
> > to each IPv6 on both SRX100.
>
> Do you have "accept-data" under family inet6 address ... vrrp-inet6-group ?
>
> Steinar Haug, Nethelp consulting, sthaug at nethelp.no
>