[j-nsp] SRX and not working VRRP

[Aaron Dewell]

Actually, you have to do that on an MX also.  By default, the virtual IP will not accept anything destined for it (such as pings) unless you enable accept-data.  The "real" IP of the interface will respond, but not the shared address.

Now, I have seen hokey setups before where people had configured a "real" IP as the virtual.  it worked (though I wouldn't guarantee failover results) and it would respond to ping in that case (since it was a "real" IP).  To do it properly, it needs 3 IP addresses (1 for primary, 1 for secondary and one shared).

What's different on the SRX is that the protocol has to be enabled in the zone/interface.

Aaron

On Jan 8, 2013, at 5:16 PM, Robert Hass wrote:
> On Wed, Jan 9, 2013 at 12:40 AM, Chuck Anderson <cra at wpi.edu> wrote:
>> set vrrp-group 0 accept-data
> 
> Thanks a lot !. It helped.
> 
> I used VRRP earlier on MX where this is not necessary to make VRRP
> work (but 10.4 on MX).
> Is above command is SRX (JunOS-ES) specific ?
> 
> Rob
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp