vrrp critical-ip

Defines a local or remote interface IP address that will prevent the VRRP master router from functioning properly should its underlying interface fail.

Syntax

vrrp critical-ip vrid ip-address [priority] [enable | disable] [remote [probe-name probe-name]]
no vrrp critical-ip vrid ip-address [priority] [enable | disable] [remote [probe-name probe-name]]

Parameters

vrid Specifies the virtual router ID to be used on this interface. Valid Values: 1 - 255. Default Value: None.
ip-address Specifies the critical-IP address for this interface.
priority (Optional) Specifies the amount to decrement the VRID operational priority if the interface goes down. Default value: 10.
enable | disable (Optional) Specifies whether the specified critical-IP address is enabled or disabled in the critical-IP address list.
remote (Optional) Specifies that the critical-IP address is a remote address. If probe-name probe-name is not specified, the default $vrrp_default ICMP probe is used by default.
remote probe-name probe-name (Optional) Specifies an administratively configured ICMP probe that will monitor a remote critical-IP interface.

Defaults

  • If the priority is not specified, then a default value of 10 will be used.
  • If neither enabled or disabled is specified, the critical-IP address is enabled in the critical-IP address list by default.
  • If remote is not specified, the critical-IP address is assumed to be a local IP address, and the default probe is not used.
  • If a probe is not specified, and the critical-IP address is a remote address, the $vrrp_default default ICMP probe is used.

Mode

Interface configuration mode.

Usage

A critical-IP address defines an interface that will prevent the master router from functioning properly if the interface were to fail. A critical-IP interface is typically an internet facing interface and does not include the VRRP configured interface between hosts and a VRRP master or backup first-hop router. An IP address of an interface connecting a master router to a router configured for internet access would be considered a critical-IP address for VRRP routing.

The default priority setting is enabled. Setting the critical-IP address priority to enabled signals that the critical-IP will affect the operational priority for the VRID. Setting the priority to disabled signals the critical-IP interface state will have no effect on the operational priority for the VRID.

If the critical-IP interface goes down with priority configured and enabled, the operational priority for the VRID to which this critical-IP address is associated is decremented by the value of the priority specified in this command.

An ICMP probe can be assigned to monitor a remote critical IP interface. The remote keyword must be specified. An ICMP probe is not configurable for a local critical-IP address. If the remote keyword is specified, and a probe is not specified, the default $vrrp_default ICMP probe is used.

Up to 2048 critical-IP addresses can be configured on a device, and up to 10 critical-IP addresses can be configured per VRID.

If the critical-IP address is configured on a router where the VRID IP address is owned by that router, the critical-IP configuration is ignored.

The “no” form of this command clears the critical-IP address or the specified optional parameter.

Example

This example sets the remote IP address 20.20.20.2 on VLAN 20 as the critical-IP address for VRRP instance 1, sets the decrement operational priority to 100 should the interface go down, and assigns ICMP probe ICMP-VRRP to monitor the interface:

System(rw)->configure
System(rw-config)->interface vlan 20
System(rw-config-intf-vlan.0.20)->vrrp critical-ip 1 20.20.20.2 100 remote probe-name ICMP-VRRP enable
System(rw-config-intf-vlan.0.20)->no shutdown
System(rw-config-intf-vlan.0.20)->