Centos7 linux系统-firewalld解决keepalived的VIP问题防火墙vrrp

admin

firewall-cmd --direct --permanent --add-rule ipv4 filter INPUT 0 --in-interface em1 --destination 224.0.0.18 --protocol vrrp -j ACCEPT
/ u; a2 S3 p/ }! _  T
& {, t$ |4 Y: ?5 e$ }: B2 Jfirewall-cmd --direct --permanent --add-rule ipv4 filter INPUT 0 --in-interface ens3 --destination 224.0.0.18 --protocol vrrp -j ACCEPT
3 Z7 n) \2 J5 c7 N! j& q firewall-cmd --reload
7 `: @8 u1 L; R  n firewall-cmd --direct --get-all-rules

) y/ [) d' Y! K% _& [  e& K

  Z+ F% o9 p3 ]/ X$ d2 q* B( \

keepalived的VIP问题

firewall-cmd --direct --permanent --add-rule ipv4 filter INPUT 0 --in-interface ens33 --destination 224.0.0.18 --protocol vrrp -j ACCEPT

$ H& y. H* p* e  g$ M' W2 X+ K

admin

[root@controller1 ~]# firewall-cmd --direct --get-all-rules
ipv4 filter INPUT 0 --in-interface em1 --destination 224.0.0.18 --protocol vrrp -j ACCEPT
5 z1 \6 F' q  t0 W* Oipv4 filter INPUT 0 --in-interface ens3 --destination 224.0.0.18 --protocol vrrp -j ACCEPT
[root@controller1 ~]#

vim /etc/firewalld/direct.xml