#
sysname R3
#
rrpp enable
#
rrpp domain 1
 control-vlan 20
 protected-vlan reference-instance 1
 ring 1 node-mode master primary-port GigabitEthernet0/0/2 secondary-port GigabitEthernet0/0/1 level 1
 ring 1 enable
#
acl number 3000  
 rule 5 deny 112 destination 224.0.0.18 0 
#
traffic classifier VRRP-BLOCK operator and
 if-match acl 3000
#
traffic behavior VRRP-BLOCK
 deny
#
traffic policy ISOLATE-VRRP-DC-R3
 classifier VRRP-BLOCK behavior VRRP-BLOCK
#
interface Vlan 2
 ip address 10.2.100.8 255.255.255.0 
 vrrp vrid 2 virtual-ip 10.2.100.1
#
interface Vlan 50
 ip address 10.38.50.8 255.255.255.0 
 vrrp vrid 50 virtual-ip 10.38.50.1
#
interface GigabitEthernet0/0/1
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 2 21 40 50
 stp disable
 traffic-policy ISOLATE-VRRP-DC-R3 inbound
#
interface GigabitEthernet0/0/2
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 2 21 40 50
 stp disable
 traffic-policy ISOLATE-VRRP-DC-R3 inbound