Re - Compatibility between VRRP and CARP

empbilly

Ok. My doubt is if I need to enable this option on pfbackup:

System > high availability sync

Syncronize states?

viragomann

@empbilly
Yes, only the states sync.
So the state are in sync, when failback to the primary and the connections persist.

But don't enable XMLRPC sync on the secondary.
Config changes must be made on the primary then.

empbilly

@viragomann

pfsync Synchronize Peer IP needs a IP of pfmaster?

viragomann

@empbilly
No, not on the backup!

empbilly

@viragomann

Thanks!!! Sorry for so many questions!!! :)

After setting the IP Peer failover in pfmaster's dhcp, in the dhcp lease option, the pool state needs to be normal, right?

Both pfmaster and pfbackup status is recover.

What causes this?

viragomann

@empbilly
Maybe missing the Failover peer IP in the DHCP settings?
This must be stated on the primary only.

empbilly

@viragomann

Actually, I did. Monday I will review the settings.

Thanks again!!!!

empbilly

@viragomann

We have DNS Forwarder enabled. Do I need to select the VIPs in the DNS Forwarder?

viragomann

@empbilly said in Re - Compatibility between VRRP and CARP:

We have DNS Forwarder enabled. Do I need to select the VIPs in the DNS Forwarder?

Not clear, what you mean. There are no IP to select in the Forwarder settings.

But if you are talking about the DHCP settings, then yes, it doesn't matter if you're running the Resolver or Forwarder or any other DNS server, you have to enter it's IP here. For these ones running on pfSense, this is the interface VIP.

empbilly

@viragomann

I meant that.

But there is still something I am not getting, because I have enabled pfbackup on our network and the WAN is as MASTER in pfbackup and the dhcp leases are not as "normal".

Any hints on what to look for?

viragomann

@empbilly
These are the IPs, the Resolver is listening on. Yes, you should select the respective VIPs there or even keep "all".

because I have enabled pfbackup on our network and the WAN is as MASTER in pfbackup and the dhcp leases are not as "normal".

Don't know, what you mean with the term "the dhcp leases are not as normal".
However, I just rarely use the DHCP server on an HA system, so I'm sadly not experienced with it.
If you have trouble with that you should better open a separate thread to get viable help, I think.

empbilly

@viragomann

Status > DHCP Leases

Pool Status

It is now as "recover state". Regardless if I put pfbackup on the network, with Failover peer IP configured, it is still in "recover state".