Centos7 linux系统-firewalld解决keepalived的VIP问题防火墙vrrp

admin

firewall-cmd --direct --permanent --add-rule ipv4 filter INPUT 0 --in-interface em1 --destination 224.0.0.18 --protocol vrrp -j ACCEPT
5 p% I( G1 [+ f5 a% ]4 m
9 M* ?" [0 s* Q. h0 ^8 \& E2 Y7 [+ Mfirewall-cmd --direct --permanent --add-rule ipv4 filter INPUT 0 --in-interface ens3 --destination 224.0.0.18 --protocol vrrp -j ACCEPT
firewall-cmd --reload
, h. L+ ^( J) a8 J1 E3 E* U firewall-cmd --direct --get-all-rules
( s) n# z- E2 y: N. j
! H) y9 B1 Z1 c+ `, L9 l  O$ h
( G; L' n: J6 z7 r/ E: w
6 @& W( m6 B7 g9 \

keepalived的VIP问题

firewall-cmd --direct --permanent --add-rule ipv4 filter INPUT 0 --in-interface ens33 --destination 224.0.0.18 --protocol vrrp -j ACCEPT

admin

[root@controller1 ~]# firewall-cmd --direct --get-all-rules
- W+ Y; Q$ \1 T5 a6 R2 v( S3 fipv4 filter INPUT 0 --in-interface em1 --destination 224.0.0.18 --protocol vrrp -j ACCEPT
: C; K# ~5 z% J: ^ipv4 filter INPUT 0 --in-interface ens3 --destination 224.0.0.18 --protocol vrrp -j ACCEPT
[root@controller1 ~]#

vim /etc/firewalld/direct.xml