Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    CARP with Dynamic PPPoE

    Scheduled Pinned Locked Moved HA/CARP/VIPs
    3 Posts 3 Posters 2.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      Elegant
      last edited by

      Hi guys, I've read around a lot regarding this and am looking for some feedback on what the best option is for this particular setup. I have a HPNA to Ethernet adapter that let's me connect to my ISP using PPPoE where I get my dynamic address from (I can have multiple leases at once). I desire to have failover in my setup where the slave will pickup the connection.

      Currently, I've settled on Dial-on-Demand mode where the slave will connect via PPPoE when it is asked (IE master is down). I'm contemplating using two leases for two connections which should mean that the LAN should migrate using CARP and switch to the PPPoE connection on the slave. My last option is to try and setup CARP after allowing the ISP's provided modem/router to initialize and maintain the PPPoE connection (I hate their equipment). My issue with some of the options is that I make use of DynDNS and the master/slave would fight for associating the external IP with the address.

      Is there a way to "fudge" CARP or setup some kind of script that would only start a PPPoE connection on the slave if the master was offline?

      Thanks for your time!

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        No. You can't use PPPoE WANs with CARP and expect a workable setup. Move the PPPoE to the modem. Your issues with DynDNS won't exist. Both will check the external (public) address and find that it matches and then not update.

        Setup a 1:1 NAT or "DMZ" on the modem to forward all traffic in to the CARP VIP and then inbound should be no problem. Otherwise it should be a fairly standard setup.

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • A
          andipandi
          last edited by

          @Elegant
          You already have Dial on Demand.
          What I have read here http://sirlagz.net/2014/12/22/pfsense-carp-and-pppoe/ and here http://theartofservice.com/pfsense-carp-and-pppoe.html is that you also need to disable the Gateway monitoring. Then PPPoE will only be created on 2nd Firewall when 1st one goes down.
          I have not done this myself though yet.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.