Connection tracking synchronization 995 Protocols for which local conntrack entries will be synced tcp udp icmp sctp tcp Sync Transmission Control Protocol conntrack entries udp Sync User Datagram Protocol conntrack entries icmp Sync Internet Control Message Protocol conntrack entries sctp Sync Stream Control Transmission Protocol conntrack entries ^(tcp|udp|icmp|sctp)$ Allowed protocols: tcp udp icmp or sctp Directly injects the flow-states into the in-kernel Connection Tracking System of the backup firewall. Queue size for local conntrack events u32 Queue size in MB 8 Protocol for which expect entries need to be synchronized all ftp sip h323 nfs sqlnet ^(all|ftp|sip|h323|nfs|sqlnet)$ Invalid protocol Failover mechanism to use for conntrack-sync VRRP as failover-mechanism to use for conntrack-sync VRRP sync group high-availability vrrp sync-group IP addresses for which local conntrack entries will not be synced ipv4 IPv4 address to ignore ipv4net IPv4 prefix to ignore ipv6 IPv6 address to ignore ipv6net IPv6 prefix to ignore Interface to use for syncing conntrack entries IP address of the peer to send the UDP conntrack info too. This disable multicast. #include Multicast group to use for syncing conntrack entries 225.0.0.50 Queue size for syncing conntrack entries u32 Queue size in MB 1