LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: Iptables and Keepalived

To: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: Iptables and Keepalived
From: Sébastien CRAMATTE <s.cramatte@xxxxxxxxxx>
Date: Mon, 09 Oct 2006 15:38:41 +0200
Joseph Mack NA3T a écrit :
> On Mon, 9 Oct 2006, Sébastien CRAMATTE wrote:
>
>> I've got  iptables+netfilter configured over my  2  vrrp keepalived box
>> Do I need to open  some port to allow  packets anouncement ?
>
> yes. How about you don't have any iptables rules until you get it to
> work, then you can bolt it all down.
>
My keepalived config seems to be ok now ...
I've upgraded to  keepalived 1.1.12 

If I start  iptables on the master, immediatly take control of virtual
IP  resulting  that  virtuals  ip appear on twice servers
What is the  iptables rules to allow  "vrrp"

I've tried

iptables -p vrrp -A INPUT -j ACCEPT
iptables -p vrrp -A OUTPUT -j ACCEPT
 
seems that not works :(
Maybe I should add   ?

iptables -p igmp -A INPUT -j ACCEPT
iptables -p igmp -A OUTPUT -j ACCEPT

regards


> Joe
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
> Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
> or go to http://www.in-addr.de/mailman/listinfo/lvs-users
>   
> ------------------------------------------------------------------------
>
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.1.407 / Virus Database: 268.13.1/466 - Release Date: 07/10/2006
>   


<Prev in Thread] Current Thread [Next in Thread>