Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I got two firewalls running Keepalived and working ok. I would like to pass the vrrp multicast traffic bethween a direct back to back link between those firewalls (that direct link is already used by conntrackd).

In order to do that I did add a route like that : * U 0 0 0 eth3

Using the command : route add -net netmask dev eth3

But if I type iftop -i eth0 -f vrrp, I still can see multicast traffic on that link and no vrrp traffic at all on eth3...

Any idea why my route is ignored ?


share|improve this question

The VRRP multicast traffic MUST be sent on the interface that vrrpd tracks, otherwise a failure of that network MAY go undetected (you're not only tracking the up/down status of the other host(s), but also their network connectivity).

If your setup is similar to the following:

A - s1 - s2 - B
|             |

how would you (using the direct link between A and B) detect that the link between S1 and S2 (switches, in this case) goes down?

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.