Actually, you have to do that on an MX also. By default, the virtual IP will not accept anything destined for it (such as pings) unless you enable accept-data. The "real" IP of the interface will respond, but not the shared address.
Now, I have seen hokey setups before where people had configured a "real" IP as the virtual. it worked (though I wouldn't guarantee failover results) and it would respond to ping in that case (since it was a "real" IP). To do it properly, it needs 3 IP addresses (1 for primary, 1 for secondary and one shared). What's different on the SRX is that the protocol has to be enabled in the zone/interface. Aaron On Jan 8, 2013, at 5:16 PM, Robert Hass wrote: > On Wed, Jan 9, 2013 at 12:40 AM, Chuck Anderson <[email protected]> wrote: >> set vrrp-group 0 accept-data > > Thanks a lot !. It helped. > > I used VRRP earlier on MX where this is not necessary to make VRRP > work (but 10.4 on MX). > Is above command is SRX (JunOS-ES) specific ? > > Rob > _______________________________________________ > juniper-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/juniper-nsp _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
