OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 18.1 Legacy Series »
  • [SOLVED] Problem with VIP CARP MASTER redundancy
« previous next »
  • Print
Pages: [1]

Author Topic: [SOLVED] Problem with VIP CARP MASTER redundancy  (Read 4114 times)

johjoh

  • Newbie
  • *
  • Posts: 21
  • Karma: 3
    • View Profile
[SOLVED] Problem with VIP CARP MASTER redundancy
« on: March 13, 2018, 03:24:27 pm »
Hello, I have two firewall with CARP VIP configured like the attached images.
On fw1 all IP are Master.
On fw2 3 IPs remain Master this 3 IPs simultaneously and I don't understand why?
If on fw1 I enter in CARP Maintenance Mode the fw2 becomes the Master on all IPs correctly.

Any help appreciated
« Last Edit: April 27, 2018, 04:10:56 pm by johjoh »
Logged

johjoh

  • Newbie
  • *
  • Posts: 21
  • Karma: 3
    • View Profile
Re: Problem with VIP CARP MASTER redundancy
« Reply #1 on: March 27, 2018, 09:07:36 am »
Anyone can help me?
« Last Edit: April 27, 2018, 04:07:47 pm by johjoh »
Logged

doug.dimick

  • Newbie
  • *
  • Posts: 17
  • Karma: 7
    • View Profile
Re: Problem with VIP CARP redundancy
« Reply #2 on: March 27, 2018, 10:17:57 pm »
Are you running OPNsense under VMware? If so, you may find this post helpful.
Logged

johjoh

  • Newbie
  • *
  • Posts: 21
  • Karma: 3
    • View Profile
Re: Problem with VIP CARP MASTER redundancy
« Reply #3 on: March 28, 2018, 01:19:04 pm »
No, two identical hardware with OPNsense installed bare metal
« Last Edit: April 27, 2018, 04:07:37 pm by johjoh »
Logged

5q

  • Newbie
  • *
  • Posts: 1
  • Karma: 0
    • View Profile
Re: Problem with VIP CARP redundancy
« Reply #4 on: March 29, 2018, 02:19:15 pm »
hi johjoh,
sadly I cannot help, but I see the same behaviour in my setup. I am in the early stages -non-production- and followed the CARP setup guide closely. Still I often see "Master" on both nodes. Some manual intervention from the GUI fixes that, but this is not the way I would expect.
regards martin
Logged

johjoh

  • Newbie
  • *
  • Posts: 21
  • Karma: 3
    • View Profile
Re: Problem with VIP CARP MASTER redundancy
« Reply #5 on: March 29, 2018, 06:17:07 pm »
The other problem is that the connection speed slow down because both want to be the master.
Problem with OpenVPN, both reply on WAN.
If you shutdown, for example, the backup firewall, the connection speed drastically increase.
« Last Edit: April 27, 2018, 04:07:28 pm by johjoh »
Logged

johjoh

  • Newbie
  • *
  • Posts: 21
  • Karma: 3
    • View Profile
[SOLVED] Re: Problem with VIP CARP MASTER redundancy
« Reply #6 on: April 27, 2018, 04:10:38 pm »
The problem was the switch installed on WAN
Extreme Network X430
https://www.extremenetworks.com/product/x430-series/

Changed with another and the problem was gone, I think is IGMP Snooping problem like this post
https://doc.pfsense.org/index.php/CARP_Configuration_Troubleshooting#Switch.2FLayer_2_Issues
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 18.1 Legacy Series »
  • [SOLVED] Problem with VIP CARP MASTER redundancy
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2