Sync interfaces changes in OPNSense HA

[mmaridev]

Hi,

we were trying to setup HA in OPNSense but encountered the following issue: when we add a new interface to the master (e.g. a VLAN), which occurs often, the same interface isn't created in the slave. Therefore,
1. the slave can't handle the new interface if necessary;
2. if you create a new interface in the slave in an ordred that is not congruent with the master (opt3 -> opt2) you'll get many troubles.

Any way this can be fixed? Top would be that when we create a new VLAN in the master this is created in the slave too.

Thanks,
Marco

[mimugmail]

You have to create them in the correct order in both, no other chance

[mmaridev]

May we convert this into a feature request?

[mimugmail]

I rather think this is a documentation issue

[sorano]

Yeah. It seems kinda self explanatory that the firewalls interfaces need to be configured the same in order to be a HA-pair.

[mimugmail]

https://docs.opnsense.org/manual/how-tos/carp.html#setup-interfaces-basic-firewall-rules

[mmaridev]

Okay thanks but this would be anyway a cool feature though. Maybe just for the "virtual" interfaces? Some proprietary firewall has this feature.