accept-data
Syntax
(accept-data | no-accept-data);
Hierarchy Level
[edit interfaces interface-name unit logical-unit-number family inet address address vrrp-group group-id], [edit interfaces interface-name unit logical-unit-number family inet6 address address vrrp-inet6-group group-id], [edit logical-systems logical-system-name interfaces interface-name unit logical-unit-number family inet address address vrrp-group group-id], [edit logical-systems logical-system-name interfaces interface-name unit logical-unit-number family inet6 address address vrrp-inet6-group group-id]
Description
In a Virtual Router Redundancy Protocol (VRRP) configuration, determine whether or not a router that is acting as the primary router accepts all packets destined for the virtual IP address.
accept-data—Enable the primary router to accept all packets destined for the virtual IP address.no-accept-data—Prevent the primary router from accepting packets other than the ARP packets destined for the virtual IP address.
Default
If the router acting as the primary router is the IP address owner or has its priority set to 255, the primary router, by default, responds to all packets sent to the virtual IP address. However, if the router acting as the primary router does not own the IP address or has its priority set to a value less than 255, the primary router responds only to ARP requests.
If you want to restrict the incoming IP packets to ICMP packets only, you must configure firewall filters to accept only ICMP packets.
If you include the
accept-datastatement, your routing platform configuration does not comply with RFC 3768 (see section 6.4.3 of RFC 3768, Virtual Router Redundancy Protocol (VRRP).
Required Privilege Level
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.
Release Information
Statement introduced before Junos OS Release 7.4.