Probably a bug (strange behaviour on CARP)
-
I have some strange behaviour on my CARP.
I have 14 networks running on 2 pfsense boxes (1 Master, 1 Slave)
I'm running pfsense 2.0.1-RELEASE (amd64)When I make a an extra carp VIP on my LAN and want to delete it I get an error that the "CARP CARP LAN" is in use (the VIP is certainly not in use), Do I cahnge the interface where the carp is bound to first, I can delete it, but… the IP is still in use until I reboot the box..
On my WAN I have a /29 subnet, let's say the x.x.x.0 is my network, x.x.x.1 is box 1, x.x.x.2 is box 2, x.x.x.3 is my VIP, that works fine, but if I want to add the CARP VIPS for x.x.x.4 and x.x.x.5 the only work for about 10 minutes and then all package are dropped, so I have to run them as IP alias on box 1 now (no failover for the .4 and .5)
My IPSEC mobile client config is running on x.x.x.4 (ip is set as IP alias, no CARP) after a reboot, the IPSEC is not bound to any IP anymore, I have to select that first, restart racoon and then my IPSEC is working again.Somebody know what this could be? btw in the CARP config, the CIDR settings are correct...
If there is adational information needed, please let me know...
Edit: When box1 is powered off, the failover works fine on all 14 networks, also the WAN x.x.x.3 VIP
-
Nobody had a similar problem?
Is there something I could check? some settings, did I do something wrong?