• Dual Firewall, dual WAN

    4
    0 Votes
    4 Posts
    277 Views
    V

    @Tadmin
    A CARP setup requires at least two IPs within a subnet for the two nodes and a shared CARP VIP. All three have to be static to get CARP work out of the box. A shared DHCP VIP is not supported.

    However, people posted workarounds here to get it up with DHCP as far as I remember. But this needs some scripting. Try the forum search.

  • HA with IPv4 CARP but using IPv6 for each pfsense instance?

    1
    0 Votes
    1 Posts
    92 Views
    No one has replied
  • Configuring 2 PfSense in HA with CARP in LAN/WAN

    3
    0 Votes
    3 Posts
    258 Views
    T

    @Phelton Don't know what you mean by your last comment but make sure that BASE is e.g. 1 on main and at least 100 on secondary. Also, use a different VHID Group for each network/carp ip

  • IPv6 CARP Gateway possible or even needed?

    1
    0 Votes
    1 Posts
    90 Views
    No one has replied
  • 1 Votes
    2 Posts
    294 Views
    E

    @MrPete You, Sir, are a lifesaver! I spent quite a couple of days figuring this out with no avail! Thank you a hundred times!!!

  • Bug? IPv6 Virtual subnet not added to interface subnet

    7
    0 Votes
    7 Posts
    531 Views
    S

    FWIW : I have moved all AD Server to the dhcp lan subnet, removed the ra server configuration, removed the virtual IP to have a second subnet, and all works flowlessly.

    It seems ipv6 virtual ip routing is not working as expected on the LAN side.

  • Backup Crashes when Saving Config

    1
    0 Votes
    1 Posts
    116 Views
    No one has replied
  • CARP Problems (Two masters)

    5
    0 Votes
    5 Posts
    2k Views
    B

    @antoinef67 I registered an account just to say thank you sir, a life saver!

  • 0 Votes
    10 Posts
    6k Views
    G

    @gkuyuk Had it resolved after spending some time on it. Setting the MTU to 1420 and MSS to 1280 on the sync interface resolved the problem. The switch was set at mtu 9000 and with that setting and default mtu of 1500 things should have been working fine but appearently not. Wanted to put it here if anyone else have a similar problem.s

  • pfsync0 ifconfig output inconsistent

    1
    0 Votes
    1 Posts
    92 Views
    No one has replied
  • CARP in (Hetzner) Cloud

    2
    0 Votes
    2 Posts
    559 Views
    N

    @ccMatze
    Floating ip's in hetzner can be moved only via robot administration, or custom api by making calls.
    If you need carp then you need to order a /29 subnet,
    However I don't see any option for /29 (or any other subnet) for cloud hosts.

    You need to rethink your approach. Hetzner cloud vm's are already redundant. So in case of failure, your pfsense instance will always be available.
    If you really need such redundancy then you should consider using dedicated servers which of course creates its own set of issues and concerns.

  • CARP and ntpd

    1
    0 Votes
    1 Posts
    96 Views
    No one has replied
  • FRR BGP over IPsec , when HA happens (slave-> master, master ->slave)

    32
    0 Votes
    32 Posts
    2k Views
    M

    @vinns said in FRR BGP over IPsec , when HA happens (slave-> master, master ->slave):

    right. thats the same result we got too. so nothing new on that. and i agree on the fact that, it could very well be that the support of HA sync does not include the FRR, afterall that is an additional package. i mean its not the end of the world to copy 30-40 lines from the xml and add them to the second node if that is the case so be it. :) many thanks for looking into this man , appreciate your help :)

    :) 👍

  • 0 Votes
    1 Posts
    206 Views
    No one has replied
  • Can HAProxy Proxy Multiple Web Applications and OpenVPN on Port 443

    1
    0 Votes
    1 Posts
    207 Views
    No one has replied
  • Carp IP needs proxy arp?

    1
    0 Votes
    1 Posts
    271 Views
    No one has replied
  • No State Creator Host IDs visible

    22
    0 Votes
    22 Posts
    2k Views
    J

    @hoba

    This seemed to work for one of our sets, so THANK YOU!

    However, for anyone else that might be in the same boat, our state table was colsossal and therefore this may be a treatment, rather that a cure. *Or may be indicitave of an issue on one of the local networks

    *I waited to hit submit until I found the issue - Camera system, wide open on separate VLAN in this case

    We had the luxury (!) to run this remotely, in non peak times, with alternative, remote access, on the local intefaces - rather than WAN.

    It took about 16 minutes for both on Xeon 3.2 physical, 8 vCpu, 8GB RAM 128GB fixed.

    In fact, if you have alternative remote access to the local network, I'd recommend the exact of above with the states, wait for the states to clear, reboot each, then reenable 'System > High Availability > Synchronize states

    I don't recommend doing this if you will have to travel several hours to complete on-site, and you don't have alternative remote access to the site. *just my 2¢

  • pfsense HA cluster on Hetzner with routed /26 subnet

    3
    0 Votes
    3 Posts
    402 Views
    W

    @SteveITS Thanks for replying. Hetzner got back to me and they can't route a subnet behind another subnet - only behind a single IP. So, I'll try setting this up a single CARP WAN IP and test. If not, 1:1 NAT would work as you suggested - but tbh, I'd prefer it without NAT.

  • CARP failover time using bridges

    5
    1 Votes
    5 Posts
    1k Views
    W

    @plokker We're looking to do the same thing. All our servers are in the same rack and connected via a second 10G NIC to a managed switch.

    What IPs did you use on the CARP WAN side? pfsense recommend a minimum /29 for this.

    Thanks.

  • incomplete config haproxy for nextcloud

    1
    0 Votes
    1 Posts
    142 Views
    No one has replied
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.