Centos7 linux系统-firewalld解决keepalived的VIP问题防火墙vrrp

admin

firewall-cmd --direct --permanent --add-rule ipv4 filter INPUT 0 --in-interface em1 --destination 224.0.0.18 --protocol vrrp -j ACCEPT
' A8 m5 s7 d: W3 [2 v
firewall-cmd --direct --permanent --add-rule ipv4 filter INPUT 0 --in-interface ens3 --destination 224.0.0.18 --protocol vrrp -j ACCEPT
firewall-cmd --reload
firewall-cmd --direct --get-all-rules

9 J9 T) C; ?$ [9 A0 a9 L
0 I5 _( k, }  F; e4 S
7 l1 E0 y0 j# W. K; x. A5 G

keepalived的VIP问题

) A& {# z8 Y3 f) L( H8 `- {7 H

firewall-cmd --direct --permanent --add-rule ipv4 filter INPUT 0 --in-interface ens33 --destination 224.0.0.18 --protocol vrrp -j ACCEPT

admin

[root@controller1 ~]# firewall-cmd --direct --get-all-rules
( Z8 ~' U9 n0 T& mipv4 filter INPUT 0 --in-interface em1 --destination 224.0.0.18 --protocol vrrp -j ACCEPT
ipv4 filter INPUT 0 --in-interface ens3 --destination 224.0.0.18 --protocol vrrp -j ACCEPT
+ g- z* L6 \2 ?) ^6 B[root@controller1 ~]#

vim /etc/firewalld/direct.xml