Re: Keepalived/Vrrp with Shorewall

[Noc Phibee <noc@xxxxxxxxxx>]

Dominik Klein a écrit :
> Please post your configuration file. This looks like some kind of the 
> annoying parse-related-problems keepalived has.
> Noc Phibee schrieb:
> > Thanks for your help ;=)
> > Yes, but the keepalived list have no asnwer ;=)
> > for my problems (2-)
> > his issue happens also when shorewall is desactivated on both 
> > machines and
> > iptables accepts all, this seems to me a keepalive issue no ?
Ok ;=)
You want only my keepalived.conf ?






! Configuration File for keepalived

global_defs {
   router_id FW_KEEP_LYON_SRV1
}

vrrp_sync_group VG1 {
        group {
                VI_1
                VI_2
                VI_3
                VI_4
        }
        notify_master /etc/keepalived/bin/test1.sh
        notify_backup /etc/keepalived/bin/test2.sh

}

vrrp_instance VI_1 {
    state MASTER
    interface eth0
    virtual_router_id 50
    priority 100
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass XXX
    }
    virtual_ipaddress {
        10.0.0.37/29
    }
}

vrrp_instance VI_2 {
    state MASTER
    interface eth1
    virtual_router_id 51
    priority 100
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass XXX
    }
    virtual_ipaddress {
        10.0.1.254/25
    }
}

vrrp_instance VI_3 {
    state MASTER
    interface eth2
    virtual_router_id 52
    priority 100
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass XXX
    }
    virtual_ipaddress {
        10.0.0.156/26
    }
}

vrrp_instance VI_4 {
    state MASTER
    interface eth3
    virtual_router_id 53
    priority 100
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass XXX
    }
    virtual_ipaddress {
        10.0.1.5/29
    }
}

! Configuration File for keepalived

global_defs {
   router_id FW_KEEP_LYON_SRV2
}

vrrp_sync_group VG1 {
        group {
                VI_1
                VI_2
                VI_3
                VI_4
        }
        notify_master /etc/keepalived/bin/test1.sh
        notify_backup /etc/keepalived/bin/test2.sh
}

vrrp_instance VI_1 {
    state BACKUP
    interface eth0
    virtual_router_id 50
    priority 50
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass XXX
    }
    virtual_ipaddress {
        10.0.0.37/29
    }
}

vrrp_instance VI_2 {
    state BACKUP
    interface eth1
    virtual_router_id 51
    priority 50
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass XXX
    }
    virtual_ipaddress {
        10.0.1.254/25
    }
}

vrrp_instance VI_3 {
    state BACKUP
    interface eth2
    virtual_router_id 52
    priority 50
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass XXX
    }
    virtual_ipaddress {
        10.0.0.156/26
    }
}

vrrp_instance VI_4 {
    state BACKUP
    interface eth3
    virtual_router_id 53
    priority 50
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass XXX
    }
    virtual_ipaddress {
        10.0.1.5/29
    }
}