The configuration is not synchronized between the primary and backup OPNsense

Started by user31, August 29, 2025, 01:01:39 PM

Previous topic - Next topic
Hello, OPNsense team!
I have configured two OPNsense firewalls to provide high availability (HA), with one as the primary firewall and the other as the backup firewall. The high availability system is working as expected. However, I have encountered an issue where configuration changes made on the primary firewall, such as user and group creation, are not automatically synchronized with the secondary firewall. The synchronization only happens when I manually click the "Synchronize configuration with backup" button in the "System" > "High Availability" > "Status" section.
I created a Cron task and specified the command ha update and reconfigure backup, setting the time to 1 minute. However, the user on the backup OPNsense server did not appear.
I would like to have the configuration synchronized automatically, without the need for manual intervention. Could you please advise on how to configure automatic synchronization?

My current OPNsense version is 25.1.9

Quote from: user31 on August 29, 2025, 01:01:39 PMThe synchronization only happens when I manually click the "Synchronize configuration with backup" button in the "System" > "High Availability" > "Status" section.

That is intentional.

Quote from: user31 on August 29, 2025, 01:01:39 PMI created a Cron task and specified the command ha update and reconfigure backup, setting the time to 1 minute. However, the user on the backup OPNsense server did not appear.

Could you show that cron job definition, please?
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)


Please attach to your post here - I block image hosting sites.
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)


This will not run the job every minute, but on minute number 1 every hour, i.e. 7:01, 8:01, ...

Place a * into the minute field if you really want every minute. I'd recommemd */5 or */10 for every 5 or 10 minutes, respectively.
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)