3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide

236 CHAPTER 15: VRRP CONFIGURATIONS
The priority-reduced argument defaults to 10.
n
You cannot configure interface tracking on the security gateway that is IP address
owner.
Enabling/Disabling
Virtual IP Address
Pinging
This configuration enables the users to ping the virtual IP addresses of the standby
groups. According to VRRP, users cannot ping the virtual IP addresses of standby
groups. In this case, users cannot determine whether an IP address is assigned to a
standby group by using the ping command. If a host on the network uses the
same IP address of a standby group coincidently, all packets in this network will be
forwarded to the host, so that the data in this network segment cannot be
forwarded properly.
However, you can use the following configuration to enable users to ping the
virtual IP addresses of standby groups.
Perform the following configuration in system view.
By default, virtual IP address pinging is disabled.
Note that you must configure this command before creating standby groups.
Once a standby group is created, you cannot use this command and its undo
form.
Enabling/Disabling TTL
Check for VRRP Packets
This configuration disables the backup switch from checking TTL values for VRRP
packets. According to VRRP, the TTL value of VRRP packets must be 255. If
detecting that the TTL value of a packet is not 255, the backup switch will drop
the packet.
You can use the following configuration to disable TTL check for VRRP packets.
Perform the following configuration in VLAN interface view.
Tabl e 252 Configure interface tracking
Operation Command
Configure the interface to be tracked.
vrrp vrid virtual-router-ID track
interface-type interface-number [ reduced
priority-reduced ]
Disable to track the specified interface.
undo vrrp vrid virtual-router-ID track [
interface-type interface-number ]
Tabl e 253 Enable/disable virtual IP address pinging
Operation Command
Enable virtual IP address pinging. vrrp ping-enable
Disable virtual IP address pinging. undo vrrp ping-enable
Tabl e 254 Enable/Disable TTL check for VRRP packets
Operation Command
Disable TTL check for VRRP packets vrrp un-check ttl
Restore TTL check for VRRP packets undo vrrp un-check ttl