Alcatel-Lucent 7750 SR-OS, Руководство по настройке

Страница: 363 / 674

VRRP
7750 SR OS Router Configuration Guide Page 363
This limitation can be disregarded for certain applications. Ping, Telnet and SSH can be individually
enabled or disabled on a per-virtual-router-instance basis.
The ssh-reply command enables the non-owner master to reply to SSH requests directed at the virtual
router instances IP addresses. The SSH request can be received on any routed interface. SSH must not
have been disabled at the management security level (either on the parental IP interface or based on
the SSH source host address). Proper login and CLI command authentication is still enforced.
When ssh-reply is not enabled, SSH requests to non-owner master virtual IP addresses are silently
discarded.
Non-owner backup virtual routers never respond to SSH requests regardless of the ssh-reply setting.
The ssh-reply command is only available in non-owner vrrp nodal context.
By default, SSH requests to the virtual router instance IP addresses are silently discarded.
The no form of the command discards all SSH request messages destined to the non-owner virtual
router instance IP addresses.
Default
no ssh-reply — SSH requests to the virtual router instance IP addresses are discarded.
standby-forwarding
Syntax [ no ] standby-forwarding
Context config>router>if>vrrp
config>router>if>ipv6>vrrp
Description
This command specifies whether this VRRP instance allows forwarding packets to a standby router.
When disabled, a standby router should not forward traffic sent to virtual router's MAC address.
However, the standby router should forward traffic sent to the standby router’s real MAC address.
When enabled, a standby router should forward all traffic.
telnet-reply
Syntax [ no ] telnet-reply
Context config>router>if>vrrp
config>router>if>ipv6>vrrp
Description
This command enables the non-owner master to reply to TCP port 23 Telnet requests directed at the
virtual router instances’ IP addresses.
Non-owner virtual router instances are limited by the VRRP specifications to responding to ARP
requests destined to the virtual router IP addresses and routing IP packets not addressed to the virtual
router IP addresses. Many network administrators find this limitation frustrating when
troubleshooting VRRP connectivity issues.
This limitation can be disregarded for certain applications. Ping, SSH and Telnet can each be
individually enabled or disabled on a per-virtual-router-instance basis.