OPNsense Forum

English Forums => High availability => Topic started by: bugleboy on October 02, 2025, 04:13:52 PM

Title: VIP ARP issue
Post by: bugleboy on October 02, 2025, 04:13:52 PM
Hello, for quite some time now I've been having an issue with my Multi-WAN HA setup. I cannot get traffic from my WAN1 VIP to work unless I manually send a gratuitous arp using the arping utility (and then it works for about 5mins until something times out). It is my understanding through reading opnsense docs and viewing the VRRP traffic coming from the firewall that when the firewall starts up it should be sending an arp announcement that <VIP IP> is at 00:00:5e:00:01:02. I do not see this traffic occur during start up, and have noticed that traffic from the vip ip only ever originates from the physical mac address of the firewall. I suspect this is why my ISP is constantly timing out the arp entry for the VIP mac addr; it seems that the VIP addr is only ever used for return traffic?

I've been in contact with my ISP about this, and they are insisting that it is a me-problem, and I want to refute them because It works on my WAN2 ISP, but I am struggling to understand the packet behavior myself. Any help would be greatly appreciated.