CARP & Failover: what can I expect to synchronize?

[pfastre]

Hi,

I'm relatively new to pfSense, but I have managed to set it up. The purpose is to have a cluster of 2 pfSense-machines as the core of a medium-sized network (200 nodes). Switches are HP Procurve 2810's.

I've created several VLAN's and succeeded in setting up CARP. So on each vlan I have an ip for host 1, one for host 2 and one virtual IP. CARP failover seems to work, the slave sees when the master disappears and promotes to master in this case. So far so good. Firewall rules are replicated too.

But is it really necessary to create all interfaces on both machines? So if I have to add a vlan, I have to add it to both machines and assign ip and virtual ip on both machines. Is this correct?
Another thing I tried is creating a DHCP-scope on a vlan on one pfSense. It didn't get replicated to the other pfSense.

Is this standard behaviour or am I doing something wrong?

Thanks in advance!

Peter

[geewhz01]

That's standard behavior.  You've got it right.

Andy

[pfastre]

Strange, but thanks for the info.