[strongSwan-dev] ClusterIP and Virtualization

[Martin Willi]

Hi Daniel,

> when listening to the bridge (br0), we can also see the ICMP packets.
> Unfortunately, when listening to vnet0 or 10.0.0.3, we see no ICMP
> packets.

Linux bridges do not forward all packets with a multicast MAC addresses
anymore (see [1]).

You can change the default behavior by using:

 echo 2 > /sys/devices/virtual/net/<br>/brif/<if>/multicast_router

Regards
Martin

[1]http://www.linuxfoundation.org/collaborate/workgroups/networking/bridge#Snooping