[SOLVED] Problem with VIP CARP MASTER redundancy

[johjoh]

Hello, I have two firewall with CARP VIP configured like the attached images.
On fw1 all IP are Master.
On fw2 3 IPs remain Master this 3 IPs simultaneously and I don't understand why?
If on fw1 I enter in CARP Maintenance Mode the fw2 becomes the Master on all IPs correctly.

Any help appreciated

[johjoh]

Anyone can help me?

[doug.dimick]

Are you running OPNsense under VMware? If so, you may find this post helpful.

[johjoh]

No, two identical hardware with OPNsense installed bare metal

[5q]

hi johjoh,
sadly I cannot help, but I see the same behaviour in my setup. I am in the early stages -non-production- and followed the CARP setup guide closely. Still I often see "Master" on both nodes. Some manual intervention from the GUI fixes that, but this is not the way I would expect.
regards martin

[johjoh]

The other problem is that the connection speed slow down because both want to be the master.
Problem with OpenVPN, both reply on WAN.
If you shutdown, for example, the backup firewall, the connection speed drastically increase.

[johjoh]

The problem was the switch installed on WAN
Extreme Network X430
https://www.extremenetworks.com/product/x430-series/

Changed with another and the problem was gone, I think is IGMP Snooping problem like this post
https://doc.pfsense.org/index.php/CARP_Configuration_Troubleshooting#Switch.2FLayer_2_Issues