bypass VHID limit (255) with IP Alias

soulearth

Hello,
I want a pfsense cluster in HA for routing more than 255 network. Normaly, the IP alias is the good solution.

But the documentation say :

Stacked IP Alias VIPs must be inside the same subnet as the CARP VIP upon which they are placed."
"Subnet mask should match the interface IP, or be /32. Matching the interface subnet is advised. For IPs in different subnets at least one IP alias VIP must have the correct mask for the new subnet."

Can I have this ? :
VIP IP interface : 192.168.1.249/24
STACK IP ALIAS VIP interface : 192.168.1.14/28

Or

VIP IP interface : 192.168.1.249/24
STACK IP ALIAS VIP interface : 192.168.1.14/32

I want cut my /24 in multiple /28 with a VIP IP ALIAS in each /28, for exemple.

Thanks,
Soulearth

jimp

IIRC on 2.2 and later that limitation no longer applies since the underlying CARP structure in the OS changed.

soulearth

Hello,
Thank you for your reply.

Therefore, the following configuration is normally possible ?

CARP VIP IP interface : 192.168.1.249/24
STACK CARP IP ALIAS VIP interface : 192.168.2.249/24

Thank you again for your help.
Soulearth