RFC 9568, "Virtual Router Redundancy Protocol (VRRP) Version 3 for IPv4 and IPv6", April 2024

Errata ID: 8300
Status: Verified
Type: Technical
Publication Format(s) : TEXT, PDF, HTML
Reported By: Quentin Armitage
Date Reported: 2025-02-17
Verifier Name: Jim Guichard
Date Verified: 2025-03-06

Section 7.1 says:

 * It MUST verify that the VRID is configured on the receiving
   interface and the local router is not the IPvX address owner
   (Priority = 255 (decimal)).

If any one of the above checks fails, the receiver MUST discard the
packet, SHOULD log the event (subject to rate-limiting), and MAY
indicate via network management that an error occurred.

It should say:

 * It MUST verify that the VRID is configured on the receiving
   interface and the local router is not the IPvX address owner
   (Priority = 255 (decimal)).

 * If the received packet is an IPv6 packet, then:
    - It MUST verify that the first address in the IPvX Address(es)
      field is an IPv6 link-local address.

If any one of the above checks fails, the receiver MUST discard the
packet, SHOULD log the event (subject to rate-limiting), and MAY
indicate via network management that an error occurred.

Notes:

The change only adds checking that the first IPv6 address is link-local.

Section 5.2.9 states:
For IPv6, the first address MUST be the IPv6 link-local address associated with the Virtual Router.

Section 6.1 also states (although this may relate to the configuration rather than the VRRP packet contents):
IPv6_Addresses One or more IPv6 addresses associated with this Virtual Router. Configured list of addresses with no default. The first address MUST be the Link-Local address associated with the Virtual Router.

Report New Errata