OPNsense Forum

English Forums => High availability => Topic started by: chrisp250 on June 14, 2024, 02:44:07 PM

Title: High availability only working over LAN interface
Post by: chrisp250 on June 14, 2024, 02:44:07 PM
Hi all,
I'm testing OPNSense and have installed two instances of 24.1.8.

I have them set up with 3 interfaces each, and also set up virtual IPs for each pair. When I tried to get High Availability working, the only way I was able to get it running was when I used the LAN interface.

Firewall rules for each interface is the same, allow all. Also checked system -> settings -> administration and Listen interfaces is set to All on all interfaces, both firewalls. I am able to access the management console on all 3 interfaces.

Also the second router is a VM clone of the first one, so apart from IP and MAC addresses it's identical.

I looked at other options in the config of the interfaces and they are seem to be the same. I'm at a loss as to why this would only work on the LAN interface.

Thank you
Title: Re: High availability only working over LAN interface
Post by: chrisp250 on June 20, 2024, 03:05:39 PM
Reason why it wasn't working was because two interfaces were on a vxlan networking and needed to reduce the MTU to 1450 make room for the vxlan header.