CARP / HA with dual WAN failover

[hollyjohn]

Hello,
I have two OPNsense servers, each with its own dedicated WAN connection, configured with CARP/HA. Failover works as expected if the primary server fails, becomes unresponsive, or is taken offline for maintenance.

The issue I'm seeing is that there is no failover when only the primary server's WAN connection goes down. The primary firewall remains the CARP master, so traffic doesn't switch to the secondary firewall even though its WAN connection is still up.

Can anyone point me in the right direction on what I should be checking or configuring to ensure the backup server takes over when the primary server loses WAN connectivity? Any suggestions would be greatly appreciated.

[viragomann]

The issue I'm seeing is that there is no failover when only the primary server's WAN connection goes down.

HA CARP and WAN failover are different things at all.
HA = two nodes, interfaces failover from one to the other
Dual / multi WAN = multiple upstream gateways (on the same node)

You can combine both of these, however if one of your WANs goes down, just the master node (be it the primary or secondary) should switch over the upstream traffic to the other WAN gateway. But there is no reason to failover to the other box in this case.

To enable WAN failover, it's necessary to configure a gateway failover group and enable gateway monitoring on the WAN gateways.
Possibly you're missing some settings here?