1
High availability / Re: CARP : Both firewall marked as master
« on: June 12, 2024, 10:03:41 am »
The interface and VLAN are well configured. This interface is working well, except for CARP.
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages: [1]
2
High availability / CARP : Both firewall marked as master
« on: June 11, 2024, 04:55:10 pm »
Hi everyone,
I have configured two firewalls with the aim of achieving high availability. Both firewalls are working well, and PfSync between them is also working correctly. However, I'm facing the following issue:
One interface is marked as Master on both firewalls, while the other 16 interfaces are working as expected (Master on firewall 1 and Backup on firewall 2). When I checked the log files, I saw that when I start the HA, all interfaces are initially Master on firewall 1, then switch to Master on firewall 2, and then switch back to Master on firewall 1 (all within less than a second). However, the problematic interface does not follow this pattern, as if there is no communication between the two firewalls on this interface.
CARP is well configured, and there is a rule in place to allow CARP packets to pass through this interface. I'm running OpnSense 24.1.8.
Thanks for your help!
I have configured two firewalls with the aim of achieving high availability. Both firewalls are working well, and PfSync between them is also working correctly. However, I'm facing the following issue:
One interface is marked as Master on both firewalls, while the other 16 interfaces are working as expected (Master on firewall 1 and Backup on firewall 2). When I checked the log files, I saw that when I start the HA, all interfaces are initially Master on firewall 1, then switch to Master on firewall 2, and then switch back to Master on firewall 1 (all within less than a second). However, the problematic interface does not follow this pattern, as if there is no communication between the two firewalls on this interface.
CARP is well configured, and there is a rule in place to allow CARP packets to pass through this interface. I'm running OpnSense 24.1.8.
Thanks for your help!
Pages: [1]