question about backup firewall in High availability

[trinitech]

Hi,

I just finished setting up OPNsense High availability for the first time and I can see from the dashboard that 1x firewall is master and the other is backup.

Could anyone please tell me if this message is normal on the backup firewall?
System > High availability > Status
System: High Availability: Status

Code: [Select]

The backup firewall is not accessible or not configured.
Did I miss a step?

Thank you

[ctropamer]

Hi,

i have same issue on my testing with 2 VM on ESXi

if someone have an idea ?

[Patrick M. Hausen]

This is not an issue.

The master can check if the backup is configured and accessible.
The backup can only log "the backup is not configured", because it doesn't have a backup node itself.

Clustering is a bit ... simple in OPNsense. Only one direction for config sync. OTOH it is not complex, hence easy to debug, and works amazingly well.

[ctropamer]

Hi,

for my issue is not on backup node i see error it's on Master and i see traffic on pfsync link between my 2 node.

do you know which log i can check to see on slave why replication didn't works ?

Thanks

[Patrick M. Hausen]

You need to have the UI active on the HA interface and permit all rules. The master is logging in to the API of the backup for XML config sync.

[ctropamer]

Hi,

it's what i did but i still not understand what is blocking

[Patrick M. Hausen]

Username and password of the backup correct on the master?

[ctropamer]

Hi,

should be, it's same i use for login on web interface

do you know if we have some log to see what happen on trying sync ?

Thanks

[Patrick M. Hausen]

cd to /var/log
push sync in UI
ls -lat in shell to see the last updated logfile ...

[ctropamer]

Hi,

are you sure is correct location for sync log ? nothing moving

[Patrick M. Hausen]

No, I am not sure.