Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
ChoiYunSoo
Contributor

I am curious about the role of the 'Accept VRRP packets originating from cluster members.

Hi

 

I am curious about the role of the 'Accept VRRP packets originating from cluster members (VSX IPSO VRRP)

When I read the description, it makes me think that this option allows the packet without having to create an explicit rule to allow '224.0.0.18'.

However, in reality, regardless of whether this option is checked or unchecked, 224.0.0.18 is controlled only by explicit rules in VRRP configuration.

 

I tested on both versions below and the results were the same.

Mgmt: R81.10 / R80.30

GW: R81.10 / R80.10

Of course, I also tested cluster mode and both VRRP and "'3rd Party Solution' and 'Check Point IPSO VRRP'" modes.

 

Am I misunderstanding this option? If not, are there any prerequisites for that option to work?

Please refer to the photo below for logs and configuration, etc.

 

Global_Properties.png

 

Rule.pngLog_2.pngLog_1.pngCluster_mode_1.pngCluster_mode_2.png

 

 

 

 

 

0 Kudos
1 Reply
PhoneBoy
Admin
Admin

The setting is only relevant for a specific legacy operating system (IPSO) with VSX.
It is not relevant in other contexts, thus explaining your behavior.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events