Defines a local or remote interface IP address that will prevent the VRRP master router from functioning properly should its underlying interface fail.
vrid | Specifies the virtual router ID to be used on this interface. Valid Values: 1 - 255. Default Value: None. |
ip-address | Specifies the critical-IP address for this interface. |
priority | (Optional) Specifies the amount to decrement the VRID operational priority if the interface goes down. Default value: 10. |
enable | disable | (Optional) Specifies whether the specified critical-IP address is enabled or disabled in the critical-IP address list. |
remote | (Optional) Specifies that the critical-IP address is a remote address. If probe-name probe-name is not specified, the default $vrrp_default ICMP probe is used by default. |
remote probe-name probe-name | (Optional) Specifies an administratively configured ICMP probe that will monitor a remote critical-IP interface. |
Interface configuration mode.
A critical-IP address defines an interface that will prevent the master router from functioning properly if the interface were to fail. A critical-IP interface is typically an internet facing interface and does not include the VRRP configured interface between hosts and a VRRP master or backup first-hop router. An IP address of an interface connecting a master router to a router configured for internet access would be considered a critical-IP address for VRRP routing.
The default priority setting is enabled. Setting the critical-IP address priority to enabled signals that the critical-IP will affect the operational priority for the VRID. Setting the priority to disabled signals the critical-IP interface state will have no effect on the operational priority for the VRID.
If the critical-IP interface goes down with priority configured and enabled, the operational priority for the VRID to which this critical-IP address is associated is decremented by the value of the priority specified in this command.
An ICMP probe can be assigned to monitor a remote critical IP interface. The remote keyword must be specified. An ICMP probe is not configurable for a local critical-IP address. If the remote keyword is specified, and a probe is not specified, the default $vrrp_default ICMP probe is used.
Up to 2048 critical-IP addresses can be configured on a device, and up to 10 critical-IP addresses can be configured per VRID.
If the critical-IP address is configured on a router where the VRID IP address is owned by that router, the critical-IP configuration is ignored.
The “no” form of this command clears the critical-IP address or the specified optional parameter.
This example sets the remote IP address 20.20.20.2 on VLAN 20 as the critical-IP address for VRRP instance 1, sets the decrement operational priority to 100 should the interface go down, and assigns ICMP probe ICMP-VRRP to monitor the interface:
System(rw)->configure System(rw-config)->interface vlan 20 System(rw-config-intf-vlan.0.20)->vrrp critical-ip 1 20.20.20.2 100 remote probe-name ICMP-VRRP enable System(rw-config-intf-vlan.0.20)->no shutdown System(rw-config-intf-vlan.0.20)->