Can't ping HA interface IP

[paul199513]

Hello,
i have two OPNsense firewalls which are connected to a switch and also connected directly to use this port as pfsync. I have entered an ip of the same subnet, but the firewalls can't ping or reach each other. Do i need to configure something else?

Thanks i advance

[Patrick M. Hausen]

If you added the HA/pfsync interface as e.g. OPT1, there won't be any firewall rules present for that interface, initially. You need to add a rule permitting everything in on that interface (easiest way to permit "ping" as well as pfsync, XMLRPC, etc.)

[paul199513]

Hi, i configured the firewall rules already. I let every ipv4 traffic on that interface in.

[paul199513]

I was now able to ping the other firewall, but HA isn't working. In the menu is the info that the backup firewall is not accessible or not configured.

[Chris78]

Can the firewalls ping each other or only master to slave but not vica versa? Make sure the synchronize interface is the pfsync interface and that the Master firewall has the ip address of the Backup firewall configured in the pfsync Synchronize Peer IP and vica versa.

For synchronization, only configure XMLRPC Sync on the Master, use the pfsync address of the Backup firewall as Synchronize Config to IP and the admin credentials of the Backup firewall (or dedicated user account for synchronization).

[paul199513]

The firewalls can ping each other. I also checked with a port scan, if the backup firewall listens on the https port on the HA interface and got a succeeded.