(Optional) Enabling the Ping to a Virtual IP Address
Context
The device allows user devices to ping a virtual IP address for the following purposes:
- Monitoring the operating status of the master in a VRRP group
- Ensuring that the route between a user device and a network connected through a default gateway that uses the virtual IP address is available
If the ping to a virtual IP address is enabled, a device on an external network can ping the virtual IP address. This exposes the device to ICMP-based attacks. You can use the undo vrrp virtual-ip ping enable command to disable the ping function.