> If you post your configs, and use the keepalived mailing list
> you might get some answers.
Thanks Graeme! I also sent a mail to keepalived-devel@xxxxxxxxxxxxxxxxxxxxx,
but this list does not seem to be very active. Perhaps you know a better one
:) Here is my network and keepalived config, hope this helps.
Best, Alex
network conf:
--------------
FW1:
eth0: 62.x.x.2 (Internet)
eth3: 10.0.0.1 (Crossover)
bond0: 0.0.0.0 (DMZ)
FW2:
eth0: 62.x.x.3 (Internet)
eth3: 10.0.0.2 (Crossover)
bond0: 0.0.0.0 (DMZ)
keepalived.conf
---------------
# FW1
global_defs {
notification_email
{
stolle@xxxxxxx
}
notification_email_from keepalived@xxxxxxx
smtp_server 127.0.0.1
smtp_connect_timeout 30
lvs_id FW01
}
vrrp_sync_group LVSFW
{
group
{
EXT_IF
DMZ_IF
}
}
# ETH0 - external interface
vrrp_instance EXT_IF
{
state MASTER
interface eth0
lvs_sync_daemon_interface eth3
mcast_src_ip 10.0.0.1
virtual_router_id 51
priority 150
advert_int 1
# smtp_alert
authentication
{
auth_type AH
auth_pass blablablubblubber
}
virtual_ipaddress
{
62.x.x.1/27 brd 62.x.x.x dev eth0
}
}
# BOND0
vrrp_instance DMZ_IF
{
state MASTER
interface bond0
lvs_sync_daemon_interface eth3
mcast_src_ip 10.0.0.1
virtual_router_id 52
priority 150
advert_int 1
# smtp_alert
authentication
{
auth_type AH
auth_pass blablablubblubber
}
virtual_ipaddress
{
212.x.x.1/28 brd 212.x.x.x dev bond0
}
}
---------------------------------------
# FW2
global_defs {
notification_email
{
stolle@xxxxxxx
}
notification_email_from keepalived@xxxxxxx
smtp_server 127.0.0.1
smtp_connect_timeout 30
lvs_id FW02
}
vrrp_sync_group LVSFW
{
group
{
EXT_IF
DMZ_IF
}
}
# ETH0 - external interface
vrrp_instance EXT_IF
{
state BACKUP
interface eth0
lvs_sync_daemon_interface eth3
mcast_src_ip 10.0.0.2
virtual_router_id 51
priority 100
advert_int 1
# smtp_alert
authentication
{
auth_type AH
auth_pass blablablubblubber
}
virtual_ipaddress
{
62.x.x.1/27 brd 62.x.x.x dev eth0
}
}
# BOND0 - public routed/firewalled network
vrrp_instance DMZ_IF
{
state BACKUP
interface bond0
lvs_sync_daemon_interface eth3
mcast_src_ip 10.0.0.2
virtual_router_id 52
priority 100
advert_int 1
# smtp_alert
authentication
{
auth_type AH
auth_pass blablablubblubber
}
virtual_ipaddress
{
212.x.x.1/28 brd 212.x.x.x dev bond0
}
}
|