Hello,
i have two OpnSense (DEC 697) and configured like this https://docs.opnsense.org/manual/how-tos/transparent_bridge.html
LAN1: Management 172.16.16.0/24 + Default GW
LAN2: untagged VLAN 1
LAN3: untagged VLAN 1111
LAN4: PFYNC 10.0.0.x/30
BRIDGE: (LAN2+LAN3)
Alle 6 LANs conntected to Mainswitch Aruba R0X25A
Now we want to have a failover. We have add Pfsync (direct connection between the to nodes)
HA is not working:
With Spanning Tree -> no connection
Without Spanning Tree -> Broadcastflood
With Loop-protect -> better, but if a reboot one node, the interfaces are up, but the bridge not working and then a small broadcastflood.
Has anyone a working solution without a loop?
Best Regards
Momme
I have seen a setup like this before and they were using Spanning Tree to prevent the loop.
If it doesnt work for you maybe it's not properly configured. I wouldn't consider this a standard OPNsense deployment though, transparent filtering bridge with HA is not that common so you might have edge cases that nobody else can help with since almost nobody runs that kind of setup in production.