Support Support Downloads Knowledge Base Apex Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[SRX] BOOTSTRAP (BSR) implementation on router with VRRP enabled



Article ID: KB35322 KB Last Updated: 24 Dec 2019Version: 1.0

SRX A’s lookpback ( is configured as RP and this router is enabled as Bootstrap router (BSR).
SRX A and C have VRRP enabled with VIP as
SRX B has a static route for RP address ( pointing to VIP (


In this setup, SRX B is unable to learn the RP address.

When the boot strap message is received by SRXB from SRXA, it will be sourced from SRX A’s physical interface IP ( and not from the virtual IP

root@SRXB> monitor traffic interface ge-0/0/3.0
15:43:15.638275 Out IP > >, Hello, length 34
15:43:18.238826  In IP > >, Bootstrap, length 36
15:43:20.698780  In IP > >, Hello, length 34

You can see it in the PIM traceoption.
Dec 10 16:44:57.790848          rp address holdtime 150 priority 1
Dec 10 16:44:57.790930 PIM Bootstrap dropping BSM from BSM not from upstream neighbor towards BSR 
Dec 10 16:45:00.419042 PPMD-PIM hello from IFL 71 absorbed

When SRXB receives BSM, it will checks if the RP address ( is reachable via BSR and finds out the route is towards Virtual IP However, the BSM is from physical IP

root@SRXB>  show pim rps extensive instance TEST
Instance: PIM.TEST
address-family INET
address-family INET6

We need to add the route for RP ( towards the physical interface of SRXA.

root@SRXB# show | compare
[edit routing-instances TEST routing-options static]
     route { ... }
+    route next-hop; <-- Added route toward Physical IP.

++ RP is learnt via bootstrap and from the address

root@SRXB> show pim rps extensive instance TEST
Instance: PIM.TEST
address-family INET
Learned from via: bootstrap 
Mode: Sparse
Time Active: 00:00:37
Holdtime: 150
Device Index: 132
Subunit: 32769
Interface: ppe0.32769
Group Ranges:, 113s remaining
address-family INET6
root@SRXB> show pim bootstrap detail instance TEST
Instance: PIM.TEST
BSR                     Pri Local address           Pri State      Timeout              3 (null)                    0 InEligible     108
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search