Vrrp Un-Check Ttl - HP 7500 Series High Availability Command Reference

Hide thumbs Also See for 7500 Series:
Table of Contents

Advertisement

Parameters
real-mac: Maps the real MAC address of the interface to the virtual IP address of the VRRP group.
virtual-mac: Maps the virtual MAC address to the virtual IP address of the VRRP group.
Examples
# Map the virtual IP address of a VRRP group to the real MAC address of the interface.
<Sysname> system-view
[Sysname] vrrp method real-mac
Related commands
display vrrp

vrrp un-check ttl

Use vrrp un-check ttl to disable TTL check on VRRP packets.
Use undo vrrp un-check ttl to enable TTL check on VRRP packets.
Syntax
vrrp un-check ttl
undo vrrp un-check ttl
Default
TTL check on VRRP packets is enabled.
Views
Interface view
Default command level
2: System level
Usage guidelines
The master of a VRRP group periodically sends VRRP advertisements to indicate its existence. The VRRP
advertisements are multicast onto the local network segment and not forwarded by a router, and
therefore the packet TTL value is not changed. When the master of a VRRP group advertises VRRP packets,
it sets the packet TTL to 255. After you configure to check the VRRP packet TTL, when the backups of the
VRRP group receive VRRP packets, they check the packet TTL and drop the VRRP packets whose TTL is
smaller than 255 to prevent attacks from other network segments.
Because devices from different vendors might implement VRRP in a different way, when the device is
interoperating with devices of other vendors, VRRP packet TTL check might result in dropping packets that
should not be dropped. In this situation, use the vrrp un-check ttl command to disable TTL check on VRRP
packets.
Examples
# Disable TTL check on VRRP packets.
<Sysname> system-view
[Sysname] interface vlan-interface 2
[Sysname-Vlan-interface2] vrrp un-check ttl
105

Advertisement

Table of Contents
loading

Table of Contents