• Search
• Free Magazines
• Newest Links
• Categories
• Register
• Login

Firewall-1 NG Rules to Allow VRRP Traffic

Added by Papergrl

By: Mitchell Rowton

Step 1

Create objects for all of the physical and logical IP addresses on both firewalls.

Example

Name	IP Address
PriNSPint3	10.0.0.3
SecNSPint3	10.0.0.2
VirNSPint3	10.0.0.1

Do this for every interface


Step 2

Create a VRRP multicast object.

Example

Name	IP Address
mcast.net- 224.0.0.18	224.0.0.18

Step 3

Create a simple group that contains all of the objects in Step 1.


Step 4

Create a rule with the source as the simple group in step 3 and the destination of the same simple group plus the object created in step 2. Permit the VRRP service between these.

Example

Source
FW_Interface_Group

Destination
FW_Interface_Group

mcast.net-224.0.0.18

Action
Accept

Service
VRRP

IGMP

You don't have permission to post replies.

Please login or register.