Thank you for the advice! Will give it a shot and post my findings

@SEMIJim: I encounter "shoulds" all day long, day in, day out.  If all the "shoulds" turned out to be reality, my job would be significantly more boring than it is ;) You're right, poor turn of phrase. Steve

It appears to have been arp - pointing out that the CARP interface had a different MAC was the key - thank you so much!

No, just in case customers ask. I am happy with default package :)

That would be great!.

I hope you meant 172.16.1.x range, since 172.168. is a routeable IP address used on the Internet… To access your D-Link change the IP of your desktop/laptop to 192.168.1.2 and then set the IP of the D-Link to be something outside of the DHCP range pfSense is allocating (eg 172.16.1.2).

Those are strictly for the WRAP because of a BIOS bug it has that won't be fixed by PC Engines since it's end of life. The 4801 and all other hardware must use the standard images. The 4801 works fine.

Hey Alex Indeed, I recompiled the kernel under FreeBSD 8.0 removing the references to USB and I am able to boot pfSense 2.0. But my network cards are not working. I am really puzzled. My plan B is to install Linux and to get pfSense working inside a qemu virtual machine.

not sure what the plans are there. Eventually we'll have a more full-featured notifications system but that won't be ready any time soon. When that happens, notifying of a mirror failure would be possible. Not sure about mirroring to a loopback device or anything like that, that's all up to gmirror. We can't really automate a lot there safely.

Did you shutdown the first server before starting the second server? If they are running concurrently on the same network you will have multiple interfaces with the same IP address - an invalid configuration. In this case, PERHAPS "setting up gateway monitors" got stuck because a necessary response got sent to the correct IP address but the "wrong" interface.

Got the firewall up.  The interface has to be named and rules set before interface can be activated. My friend and I worked on this for a couple hours to get working. I have firewall up for 3 days now testing before I deploy it. I have a config with passwords XXXXX out if there is a way to post it, I would like to know. Bob

cmb hay thanks for the reply I really do appreciate it. I looked and I do have the CRL certificates for each of the road warrior client machines, do I enter them in the cert manager? Then what about the user accounts, is that something on top of OpenVPN authentication? Is it optional (must be)? That's all my questions, thanks again for shedding light on this for me.  And Oh I looked back and it was back with IPCop that I had individual control over the each client cert, I've not been able to do that sense I moved over to PFSense, until now. Take Care BigBSense!

I found this post as I have the exact same problem. The posted solution works for my needs. Thanks Ventolin!!! ;D ;D

Weeeeell, since the original PE machine was running on a three HDD raid array, i ended up taking one of those and placing it into the second machine. Booted them both so they rebuild the arrays. Now they're fine. Thank you all for your suggestions :)

Thanks Jimp, you certainly earn your money. Actually I already read that page yesterday, but not that section because "it is not the case with me"

Great, i did also get this magnificent hdd failure club.. That hdd were working perfectly before upgrade attempt. –> to the computer hardware shop to get one hdd

When you restore the config you can edit/reassign interfaces and vlans in the gui before it reboots with the restored config. Otherwise, you can open up the backup and do a search/replace on the NIC names.