OPNsense Forum

English Forums => High availability => Topic started by: paul199513 on November 15, 2022, 09:51:46 am

Title: Can't connect HA
Post by: paul199513 on November 15, 2022, 09:51:46 am
I configured HA on both firewalls. I entered the Synchronize Peer IP, the Synchronize Config to IP and the credentials. If i leave the Synchronize Peer IP empty. I see the following traffic in the firewall:
HA      2022-11-15T09:42:35   10.0.0.1   224.0.0.22   igmp   let out anything from firewall host itself   
HA      2022-11-15T09:42:35   10.0.0.1   224.0.0.240   pfsync   let out anything from firewall host itself
But if i enter the correct IP, nothing happens. The firewalls can ping each other and if i click save the master firewall call the second one on port 443.
Title: Re: Can't connect HA
Post by: Patrick M. Hausen on November 15, 2022, 10:56:26 am
Did you change the web UI listen interface from "All (recommended)" to something different?

System > Settings > Administration
Title: Re: Can't connect HA
Post by: paul199513 on November 15, 2022, 10:59:18 am
No i changed nothing there.
Title: Re: Can't connect HA
Post by: Patrick M. Hausen on November 15, 2022, 11:04:56 am
What are the firewall rules on your HA interface?
Title: Re: Can't connect HA
Post by: paul199513 on November 15, 2022, 11:24:13 am
This is the firewall rule, i have set at both firewalls:

IPv4 *   HA net   *   *   *   *   *   Default allow LAN to any rule
Title: Re: Can't connect HA
Post by: paul199513 on November 16, 2022, 11:16:09 am
It works now. It was just my fault. There was a second firewall from my provider and it declined all the traffic from the HA interface.

Thank you for your help :)
Title: Re: Can't connect HA
Post by: Patrick M. Hausen on November 16, 2022, 11:56:15 am
How can you have a firewall between the HA interfaces of your two units? You are supposed to connect them with a simple patch cable ...
Title: Re: Can't connect HA
Post by: paul199513 on November 16, 2022, 04:38:14 pm
That is something i can answer, because i don't know, how the provider do this. The two interfaces are connected directly with a patch cable.
Title: Re: Can't connect HA
Post by: Patrick M. Hausen on November 16, 2022, 05:15:55 pm
Either they are lying or there is no firewall.