OPNsense Forum

English Forums => High availability => Topic started by: trinitech on June 28, 2022, 05:31:30 pm

Title: question about backup firewall in High availability
Post by: trinitech on June 28, 2022, 05:31:30 pm

Hi,

I just finished setting up OPNsense High availability for the first time and I can see from the dashboard that 1x firewall is master and the other is backup.

Could anyone please tell me if this message is normal on the backup firewall?
System > High availability > Status
System: High Availability: Status

Code: [Select]

The backup firewall is not accessible or not configured.
Did I miss a step?

Thank you

Title: Re: question about backup firewall in High availability
Post by: ctropamer on August 02, 2022, 02:21:31 pm

Hi,

i have same issue on my testing with 2 VM on ESXi

if someone have an idea ?

Title: Re: question about backup firewall in High availability
Post by: Patrick M. Hausen on August 02, 2022, 03:41:42 pm

This is not an issue.

The master can check if the backup is configured and accessible.
The backup can only log "the backup is not configured", because it doesn't have a backup node itself.

Clustering is a bit ... simple in OPNsense. Only one direction for config sync. OTOH it is not complex, hence easy to debug, and works amazingly well.

Title: Re: question about backup firewall in High availability
Post by: ctropamer on August 02, 2022, 05:06:17 pm

Hi,

for my issue is not on backup node i see error it's on Master and i see traffic on pfsync link between my 2 node.

do you know which log i can check to see on slave why replication didn't works ?

Thanks

Title: Re: question about backup firewall in High availability
Post by: Patrick M. Hausen on August 02, 2022, 06:35:52 pm

You need to have the UI active on the HA interface and permit all rules. The master is logging in to the API of the backup for XML config sync.

Title: Re: question about backup firewall in High availability
Post by: ctropamer on August 03, 2022, 07:38:25 am

Hi,

it's what i did but i still not understand what is blocking

Title: Re: question about backup firewall in High availability
Post by: Patrick M. Hausen on August 03, 2022, 11:03:10 am

Username and password of the backup correct on the master?

Title: Re: question about backup firewall in High availability
Post by: ctropamer on August 03, 2022, 11:06:10 am

Hi,

should be, it's same i use for login on web interface

do you know if we have some log to see what happen on trying sync ?

Thanks

Title: Re: question about backup firewall in High availability
Post by: Patrick M. Hausen on August 03, 2022, 11:12:32 am

cd to /var/log
push sync in UI
ls -lat in shell to see the last updated logfile ...

Title: Re: question about backup firewall in High availability
Post by: ctropamer on August 03, 2022, 11:48:18 am

Hi,

are you sure is correct location for sync log ? nothing moving

Title: Re: question about backup firewall in High availability
Post by: Patrick M. Hausen on August 03, 2022, 11:57:05 am

No, I am not sure.