Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Vlan & HA

    Scheduled Pinned Locked Moved HA/CARP/VIPs
    18 Posts 3 Posters 896 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • MrGamecaseM
      MrGamecase @viragomann
      last edited by

      @viragomann

      So if i trunk 2 ports on my Cisco 2960s poe+ & plug the lan ports from the 2 PFsense Vms i should see the carp functin?....

      V 1 Reply Last reply Reply Quote 0
      • V
        viragomann @MrGamecase
        last edited by

        @MrGamecase
        Yes. But it should also work on Proxmox.
        Did you enable "VLAN awareness" on the Bridge?

        MrGamecaseM 1 Reply Last reply Reply Quote 0
        • MrGamecaseM
          MrGamecase @viragomann
          last edited by

          @viragomann

          Yes Vlan awareness is enable on the Lan port in Proxmox A & B Server, i have a VM spun up with a tag of 20 and i do not get DHCP from anything apart from the primary lan ??.??.10.?? & only when ther are no vlans involved on the CARP

          Prox A.png Prox B.png pfs master.png

          V MrGamecaseM 2 Replies Last reply Reply Quote 0
          • V
            viragomann @MrGamecase
            last edited by

            @MrGamecase
            Maybe you have forgotten to disable hardware checksum offloading?

            1 Reply Last reply Reply Quote 0
            • MrGamecaseM
              MrGamecase @MrGamecase
              last edited by

              @MrGamecase said in Vlan & HA:

              @viragomann

              Yes Vlan awareness is enable on the Lan port in Proxmox A & B Server, i have a VM spun up with a tag of 20 and i do not get DHCP from anything apart from the primary lan ??.??.10.?? & only when ther are no vlans involved on the CARP

              Prox A.png Prox B.png pfs master.png

              Adding the Vlan ports to the carp, causes everything to display unknon peer state, Both master & backup flick to master on the vlan ports

              PF Carp Master
              carp pfsense a.png

              PF Carp Backup
              carp pfsense b.png

              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @MrGamecase
                last edited by

                @MrGamecase this old post about ha and vlans may still come into play... I would follow derelicts instructions on how to bring up the vlan for your ha.

                https://forum.netgate.com/post/531368

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                MrGamecaseM 1 Reply Last reply Reply Quote 0
                • MrGamecaseM
                  MrGamecase @johnpoz
                  last edited by

                  @johnpoz said in Vlan & HA:

                  @MrGamecase this old post about ha and vlans may still come into play... I would follow derelicts instructions on how to bring up the vlan for your ha.

                  https://forum.netgate.com/post/531368

                  I come across this earlier but did not quie understand, I am but a simple noob when it comes doown to PFSense,


                  When you add VLANs and interfaces to a node in a high availability pair, the changes are not synced. When you finally add the CARP VIP to the master, that is synced.

                  I'm sort of new to pfSense HA, but I've been spending a bit of time with it lately and this is what I have learned:

                  pfSense (pfsync) syncs based on the internal interface designator. These are wan, lan, and optX. It doesn't care what your pretty interface name is.

                  It doesn't matter if you don't use the physical, untagged interfaces. Assign them to pfSense interfaces first thing. Make each HA node match exactly.

                  I can indeed confirm Each PFBox was mede exacly the same down to the ports assigned in Proxmox to the porst assigned in PFSense


                  V 1 Reply Last reply Reply Quote 0
                  • V
                    viragomann @MrGamecase
                    last edited by

                    @MrGamecase
                    Again, did you disable hardware checksum offloading in pfSense?

                    MrGamecaseM 1 Reply Last reply Reply Quote 0
                    • MrGamecaseM
                      MrGamecase @viragomann
                      last edited by

                      @viragomann carp pfsense b.png

                      can coinfirm this on both bopxes

                      MrGamecaseM 1 Reply Last reply Reply Quote 0
                      • MrGamecaseM
                        MrGamecase @MrGamecase
                        last edited by

                        @MrGamecase
                        Receving this on the logs of the second PFServer

                        dhcp.png

                        1 Reply Last reply Reply Quote 0
                        • MrGamecaseM
                          MrGamecase
                          last edited by

                          Ok, so scrambling round for an unused switc, i have discovered the Proxmox on its own wont do layer 2 switching.. once i plugged the 2 vPFsense into a switch they started behaving as expexted....

                          All the CARP HA responded as primary & backup acordingly and failover works like a charm.

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.