Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - whph87

#1
Hi all,

I'm running an OPNsense HA setup (version 25.1) with two nodes: defqon01 (preferred/master) and defqon02.
CARP and pfSync are working as expected — the VIP (10.0.10.1) transitions smoothly between nodes, and state sync is reliable.

However, I'm consistently facing the following issue after failback to defqon01:



🐞 Problem Summary:
   •   Interface: ix0_vlan10
   •   VIP: 10.0.10.1 (CARP) → works fine
   •   Static IP on LAN interface: 10.0.10.10
   •   After failback from defqon02 to defqon01, VIP is reachable, but 10.0.10.10 is not
   •   ifconfig ix0_vlan10 down && up on defqon01 instantly resolves the issue
   •   Web GUI, ping and other services on the LAN IP remain unreachable until that interface bounce



🔎 What I've ruled out:
   •   Firewall rules → allow any to 10.0.10.10
   •   Interface is marked UP
   •   IP is bound (seen in ifconfig)
   •   pfSync is working
   •   CARP status transitions as expected
   •   Preemption is enabled
   •   No demotion or failover loops



📸 Confirmed via:
   •   tail -f /var/log/system.log shows normal CARP MASTER transitions
   •   tcpdump shows no ARP/ICMP replies from LAN IP until bounce
   •   sockstat shows services not binding until interface reset
   •   The issue is 100% reproducible
   •   VLAN interface + CARP seem to be the key