Centos7 linux系统-firewalld解决keepalived的VIP问题防火墙vrrp

admin

firewall-cmd --direct --permanent --add-rule ipv4 filter INPUT 0 --in-interface em1 --destination 224.0.0.18 --protocol vrrp -j ACCEPT
! ]' j( T2 }/ _+ s0 D2 h7 @
9 O( |4 ?8 E3 U: A2 rfirewall-cmd --direct --permanent --add-rule ipv4 filter INPUT 0 --in-interface ens3 --destination 224.0.0.18 --protocol vrrp -j ACCEPT
firewall-cmd --reload
1 X/ Y8 G2 T8 {2 {4 Z% n firewall-cmd --direct --get-all-rules
: y" M8 g& l2 _9 p4 h
/ v( |$ D! Z& c+ ?9 m. o
7 \3 o4 e" _+ n3 R) p
- X' D7 ^6 }; v! a! W& g" Y

keepalived的VIP问题

firewall-cmd --direct --permanent --add-rule ipv4 filter INPUT 0 --in-interface ens33 --destination 224.0.0.18 --protocol vrrp -j ACCEPT

' v. D/ p- G. w0 i. ^, t, i: H

admin

[root@controller1 ~]# firewall-cmd --direct --get-all-rules
ipv4 filter INPUT 0 --in-interface em1 --destination 224.0.0.18 --protocol vrrp -j ACCEPT
4 {& G- M( v' N6 G7 G2 Sipv4 filter INPUT 0 --in-interface ens3 --destination 224.0.0.18 --protocol vrrp -j ACCEPT
1 J8 o5 k* U! X5 o[root@controller1 ~]#

vim /etc/firewalld/direct.xml