firewall-cmd --direct --permanent --add-rule ipv4 filter OUTPUT 0 --out-interface p4p1 --destination 224.0.0.18 --protocol vrrp -j ACCEPT
firewall-cmd --reload
注意：上述【p4p1】为配置的网卡名称。
4、配置服务启动
cp /home/zz/user/software/keepalived-1.3.8/keepalived/etc/init.d/keepalived /etc/init.d/
mkdir /etc/keepalived
cp /usr/local/etc/keepalived/keepalived.conf /etc/keepalived/
执行完成后，即可使用服务的形式启动Keepalived，如下：
service keepalived start
如果使用 service keepalived status命令查看状态出现如下问题：
/etc/init.d/keepalived:行15: /etc/sysconfig/keepalived: 没有那个文件或目录
则需要执行：
ln -s /usr/local/etc/sysconfig/keepalived /etc/sysconfig/
执行成功后，重启Keepalived服务，即可查看状态。
如果Keepalived启动不成功，错误信息如下：
Keepalived_vrrp exited with permanent error CONFIG. Terminating
说明Keepalived 核心配置文件配置有误，继续往下配置即可，此问题先不用处理。
5、配置双机
Keepalived配置文件为：/etc/keepalived/keepalived.conf，
现进行如下配置：
使用10.122.111.80 为主节点，
使用10.122.111.81为从节点 进行配置，
修改主节点80的配置文件 keepalived.conf，内容修改如下所示：
| ! Configuration File for keepalived global_defs { notification_email { # acassen@firewall.loc # failover@firewall.loc # sysadmin@firewall.loc } notification_email_from Alexandre.Cassen@firewall.loc # smtp_server 192.168.200.1 # smtp_connect_timeout 30 router_id SERVER_1 vrrp_skip_check_adv_addr vrrp_garp_interval 0 vrrp_gna_interval 0 } vrrp_instance VI_1 { state MASTER interface p4p1 virtual_router_id 55 priority 100 protocol TCP advert_int 1 authentication { auth_type PASS auth_pass 1111 } virtual_ipaddress { 10.122.111.99/24 } } |
修改从节点81的配置文件 keepalived.conf，内容修改如下所示：
| ! Configuration File for keepalived global_defs { notification_email { # acassen@firewall.loc # failover@firewall.loc # sysadmin@firewall.loc } notification_email_from Alexandre.Cassen@firewall.loc # smtp_server 192.168.200.1 # smtp_connect_timeout 30 router_id SERVER_2 vrrp_skip_check_adv_addr vrrp_garp_interval 0 vrrp_gna_interval 0 } vrrp_instance VI_1 { state BACKUP interface p4p1 virtual_router_id 55 priority 50 protocol TCP advert_int 1 authentication { auth_type PASS auth_pass 1111 } virtual_ipaddress { 10.122.111.99/24 } } |
配置完成后，分别启动 Keepalived，并进行状态查看，如下图：
