Question abaout failover and CARP

hkusulja · Feb 9, 2009, 10:23 AM

Hi!
I have some expirience with pfsense, but not with CARP..

I plan to buy 2 PCs, and make an CARP in means of failover…

internet...
pubip1
pubup2 (pc1) pubip3(pc2)
NAT NAT
lanip2 (pc1) lanip3(pc2)
lanip1
--- other pcs -----

in a case of one pc is down.., will the internet works through other pc...
same thing for WAN access ?

also.., if i configure, for example one firewall rule on pc1 .. will it be automaticaly copied to pc2.., or i have to manualy monitor that the both PCs have same configuration (in mean by firewall rules, proxy and other stuff....)

thank you..

Cloverleaf · Mar 11, 2009, 11:57 PM

1) I'm not sure what you mean by WAN access as opposed to Internet access, but if you mean the network that pubip[1-3] are in, then yes. Same with the Internet (assuming that you've set up NAT and firewall rules allowing access in the first place.

2) PFSense will replicate rules from the "master" machine to the other machine as long as you have configured CARP (in the CARP Settings under Firewall->Virtual IPs->CARP Settings) to do so.