CARP OSPF missing system routes

[opnsense@dkeith.com]

have two firewalls/routers, one in each datacenter.

Each router has 3 interfaces
Router A
0- layer 3 lan subnet(2)
1- WAN single public ip address
2- layer 2 lan subnet(1) (vxlan over ipsec vpn over the wan interface)

Router B
0- layer 3 lan subnet(3)
1- WAN single public ip address
2- layer 2 lan subnet(1) (vxlan over ipsec vpn over the wan interface)

The layer 2 subnet(1) uses carp as the default gateway and spans both datacenters
I am using ospf for route redistribution.
There is a site to site vpn tunnel between routers.


In normal operation.
On router A carp Master
OSPF sees the subnets(1) and (2) as Directly Attached.  (GOOD)
OSPF sees the subnets(3) as available over the vpn to router B (GOOD)
system routing table sees subnets (1) and (2) as    Directly Attached (GOOD)
system routing table subnets (3) as available over the vpn to router B (GOOD)

On router B carp backup
OSPF sees the subnets (3) as Directly Attached (GOOD)
OSPF sees the subnets(1) an (2) as available over the vpn to router A (GOOD)
system routing table sees subnets (3) is Directly Attached (GOOD)
system routing table subnets (2) as available over the vpn to router A (BAD)

The carp subnet is not listed in the system routing table
This stops traffic from subnet (3) for accessing subnet (1)

It the minimum I would have expected the interface ip addresses to be in the system routing table. but the carp interfaces are not listed in the system routing table. Should they be listed?

Why is the route from ospf not making its way to the system routing table?

In backup operation (CARP Maintenance mode) on router A
On router A carp BACKUP
OSPF sees the subnets(2) as Directly Attached.  (GOOD)
OSPF sees the subnets(1) and (3) as available over the vpn to router B (GOOD)
system routing table sees subnets (1) and (2) as    Directly Attached (BAD) i think as CARP interface is in BACKUP state?
System routing table subnets(3) as available over the vpn to router B (GOOD)

On router B carp MASTER
OSPF sees the subnets (1) and (3) as Directly Attached (GOOD)
OSPF sees the subnets an (2) as available over the vpn to router A (GOOD)
system routing table sees subnets (1) and (3) is Directly Attached (GOOD)
system routing table subnets (2) as available over the vpn to router A (GOOD)


If we can fix the ospf route missing in normal operation i think we will be good?

any suggestions?
Running on 24.1.9