Source MAC access controls in a virtual redundant router protocol environment

A network device comprising:

• a memory;
• one or more processors operably coupled to the memory, wherein the one or more processors are configured to execute a virtual router to:
• receive an Address Resolution Protocol (ARP) request for an Internet protocol (IP) address from a host device, the IP address comprising a virtual IP address of the virtual router;
• determine a virtual router redundancy protocol (VRRP) virtual router identifier (VRID) associated with the IP address;
• generate a mapping between the IP address of the host device and the determined VRID for forwarding packets to the host device;
• and
• store the mapping in the memory;
• receive a first packet including a destination IP address field specifying the IP address of the host device;
• determine, based on the mapping, a virtual source MAC address of the virtual router that is based on the VRID associated with the IP address;
• and
• forward a second packet to the host device, the second packet specifying the determined virtual source MAC address as a source MAC address for the second packet, and the second packet including a payload of the first packet.

A non-transitory computer-readable storage medium comprising instructions for causing at least one programmable processor of a network device to execute a virtual router, wherein the instructions that cause the at least one programmable processor to execute the virtual router comprise instructions that cause the virtual router to:

• receive an Address Resolution Protocol (ARP) request for a Internet protocol (IP) address of a host device, the IP address comprising a virtual IP address of the virtual router;
• determine a virtual router redundancy protocol (VRRP) virtual router identifier (VRID) associated with the IP address;
• and
• generate a mapping between the IP address of the host device and the determined VRID for forwarding packets to the host device;
• receive a first packet including a destination IP address field specifying the IP address of the host device;
• determine, based on the mapping, a virtual source MAC address of the virtual router that is based on the VRID associated with the IP address of the host device;
• and
• forward a second packet to the host device, the second packet specifying the determined virtual source MAC address as a source MAC address for the second packet, and the second packet including a payload of the first packet.