HA SYNC Works only Once

den2

I have two Pfsense firewalls setup in High Availability configuration mode. Everything seems to work, except that the synchronization works only the first time. Whenever I force Config sync through status  Filter reload the following error is received.
“A communications error occurred while attempting to call XMLRPC method host_firmware_version”
After further investigation I found out that: All the rules on the interface used for synchronization on the SECONDARY firewall are removed and are not replaced with the corresponding rules on the primary firewall. If I re-enter rules again (which allow synchronization to pass) the synchronization again works only once.

It should be pointed out

that the interfaces on both firewalls are setup exactly in the same order.
Both Pfsense versions are 2.5.2.

viragomann

@den2
Set the rule on the master in a way that it is also applicable on the secondary and allow XMLRPC sync.
Additionally add a rule on the secondary again which allow the initial sync.

E.g this is my sync rule set:

The PFSYNC net is a /30 and hence only includes the both HA nodes.

den2

@viragomann

Your suggested settings worked perfectly for my setup thankyou