Both devices have VIP, and the following configuration is required
Firewall added:
-A INPUT -p vrrp -j ACCEPT