Looking to set up CARP, have a few questions
-
I understand the normal setup for CARP requires multiple IPs on both the WAN and LAN side.
I have that, but not in the "normal" sense:
My ISP provides me with a /30 (so 2 useable IP addresses, one of which is my pfsense WAN IP and the other is its gateway IP)for my public IP, with an additional /28 (in a different address space) routed to my pfsense WAN IP.Example with numbers (yes, the 10.x.x.x subnet isn't public, these are just examples):
pfSense WAN IP: 10.1.1.42/30
WAN_GW: 10.1.1.41Additional External IP Addresses: 10.3.67.160/28
How can I set up CARP in this situation?
-
You can't. Your interconnect with your ISP must be a /29. They should be willing to switch you over to that, it's not an uncommon request since basically every router/firewall redundancy protocol requires it.
-
also make sure they're routing your internal subnet to a CARP IP so it goes to the current master firewall.
-
@cmb:
You can't. Your interconnect with your ISP must be a /29. They should be willing to switch you over to that, it's not an uncommon request since basically every router/firewall redundancy protocol requires it.
Ok, thats what I thought.
I'll see about getting that changed.