OPNsense Forum

English Forums => High availability => Topic started by: user31 on August 29, 2025, 01:01:39 PM

Title: The configuration is not synchronized between the primary and backup OPNsense
Post by: user31 on August 29, 2025, 01:01:39 PM
Hello, OPNsense team!
I have configured two OPNsense firewalls to provide high availability (HA), with one as the primary firewall and the other as the backup firewall. The high availability system is working as expected. However, I have encountered an issue where configuration changes made on the primary firewall, such as user and group creation, are not automatically synchronized with the secondary firewall. The synchronization only happens when I manually click the "Synchronize configuration with backup" button in the "System" > "High Availability" > "Status" section.
I created a Cron task and specified the command ha update and reconfigure backup, setting the time to 1 minute. However, the user on the backup OPNsense server did not appear.
I would like to have the configuration synchronized automatically, without the need for manual intervention. Could you please advise on how to configure automatic synchronization?

My current OPNsense version is 25.1.9
Title: Re: The configuration is not synchronized between the primary and backup OPNsense
Post by: Patrick M. Hausen on August 29, 2025, 01:16:03 PM
Quote from: user31 on August 29, 2025, 01:01:39 PMThe synchronization only happens when I manually click the "Synchronize configuration with backup" button in the "System" > "High Availability" > "Status" section.

That is intentional.

Quote from: user31 on August 29, 2025, 01:01:39 PMI created a Cron task and specified the command ha update and reconfigure backup, setting the time to 1 minute. However, the user on the backup OPNsense server did not appear.

Could you show that cron job definition, please?
Title: Re: The configuration is not synchronized between the primary and backup OPNsense
Post by: user31 on August 29, 2025, 01:21:25 PM
https://postimg.cc/xXfcPgZf
Title: Re: The configuration is not synchronized between the primary and backup OPNsense
Post by: Patrick M. Hausen on August 29, 2025, 01:33:31 PM
Please attach to your post here - I block image hosting sites.
Title: Re: The configuration is not synchronized between the primary and backup OPNsense
Post by: user31 on August 29, 2025, 01:40:46 PM
image
Title: Re: The configuration is not synchronized between the primary and backup OPNsense
Post by: Patrick M. Hausen on August 29, 2025, 01:44:35 PM
This will not run the job every minute, but on minute number 1 every hour, i.e. 7:01, 8:01, ...

Place a * into the minute field if you really want every minute. I'd recommemd */5 or */10 for every 5 or 10 minutes, respectively.