[j-nsp] VRRP for IPv6

Chris Adams cma at cmadams.net
Tue Jan 25 16:53:55 EST 2022


I wasn't planning to use a virtual link-local address, so I didn't put
one.  The JUNOS VRRP for v6 example doesn't include one, although then
the JUNOS documentation for virtual-link-local-address is oddly
confusing:

https://www.juniper.net/documentation/us/en/software/junos/high-availability/topics/ref/statement/virtual-link-local-address-edit-interfaces.html

   Configure a virtual link-local address for a Virtual Router
   Redundancy Protocol (VRRP) IPv6 group. You must explicitly define a
   virtual link-local address for each VRRP for IPv6 group. The virtual
   link-local address must be in the same subnet as the physical
   interface address.

   NOTE: You do not need to configure link-local addresses and virtual
   link-local addresses when configuring VRRP for IPv6. Junos OS
   automatically generates link-local addresses and virtual link-local
   addresses. However, if link local addresses and virtual link-local
   addresses are configured, Junos OS considers the configured
   addresses.

So the first paragraph says you must set it, while the second says you
don't have to.

Once upon a time, Jonas Frey <jf at probe-networks.de> said:
> Looks like you are missing "virtual-link-local-address".
> 
> -Jonas
> 
> Am 2022-01-25 20:51, schrieb Chris Adams via juniper-nsp:
> >I'm trying to add VRRP for IPv6 to a pair of MX150s (that are already
> >running VRRP for IPv4).  I've switched from VRRPv2 to VRRPv3, and
> >the v4
> >VRRP switched over, but both routers think they are master for the v6
> >side.  Looking at "show vrrp interface" on each router, the
> >"Advertisement sent" count is increasing, but if I do a "monitor
> >traffic", I only see the VRRP packets for the v4 IP.
> >
> >Config I've set (from first router, second just has a different address
> >and priority):
> >
> >interfaces {
> >    ae1 {
> >        unit 101 {
> >            vlan-id 101;
> >            family inet6 {
> >                address <block>::2/64 {
> >                    vrrp-inet6-group 26 {
> >                        virtual-inet6-address <block>::1;
> >                        priority 110;
> >                        no-preempt;
> >                        accept-data;
> >                    }
> >                }
> >            }
> >        }
> >    }
> >}
> >protocols {
> >    router-advertisement {
> >        interface ae1.101 {
> >            virtual-router-only;
> >        }
> >    }
> >    vrrp {
> >        version-3;
> >    }
> >}
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp

-- 
Chris Adams <cma at cmadams.net>


More information about the juniper-nsp mailing list