< Home

vrrp virtual-ip ping enable

Function

The vrrp virtual-ip ping enable command enables the master to respond to ping packets sent to a virtual IP address.

The vrrp virtual-ip ping disable command disables the master from responding to ping packets sent to a virtual IP address.

The undo vrrp virtual-ip ping enable command disables the master from responding to ping packets sent to a virtual IP address.

By default, the master is enabled to respond to ping packets sent to a virtual IP address.

Format

vrrp virtual-ip ping enable

vrrp virtual-ip ping disable

undo vrrp virtual-ip ping enable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario
The switch allows user devices to ping a virtual IP address to serve the following purposes:
  • Monitors the operating status of the master in a VRRP group.

  • Monitors communication between a user device and a network connected by a default gateway using the virtual IP address.

Precautions

If the ping to a virtual IP address is enabled, a device on an external network can ping a virtual IP address. This imposes the switch to ICMP-based attacks.

After the undo vrrp virtual-ip ping enable command is run to disable the master from responding to ping packets sent to a virtual IP address, the host route for the virtual IP address is deleted. As a result, services transmitted using the host route are interrupted. For example, after the undo vrrp virtual-ip ping enable command is run, the GRE tunnel with the source IP address of a virtual IP address goes Down.

Example

# Disable the master from responding to ping packets.

<HUAWEI> system-view
[HUAWEI] undo vrrp virtual-ip ping enable
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >