@Jason Ford, it turn out be the iptables issue. Thx a lot.
@Jiajun Liu, I am using the nova-network. So this BP is not helpful. But I
am expecting this feature.
What I done:
1. using virsh to disable the nwfilter for the two vms.
2. stop the iptables in the vms
3. configure the keepalived.
4. work
openstack implemented mac/ip spoofing, so the vrrp packets will be drop by
iptables/ebtables. There is a blueprint (
https://blueprints.launchpad.net/neutron/+spec/allowed-address-pairs) for
binding multiple mac/ip on a port.
On Thu, Aug 8, 2013 at 11:33 AM, Jason Ford wrote:
> Lei,
>
> It is
Lei,
It is probably because iptables is filtering out the heartbeat traffic at the
compute node level. If you are using vlans, it should work without issue
however if you are using the flat network model, you need to allow vrrp in your
compute node iptable rule sets. See this link..
http://sta