Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to config pfsense to reply the initiator with carp ip as source ip?

    Scheduled Pinned Locked Moved HA/CARP/VIPs
    4 Posts 4 Posters 992 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • I
      ioiioi
      last edited by

      hello, I create a cluster firewall with two pfsense box.
      The carp vip of lan is 192.168.1.1, the master node's lan interface's ip is 192.168.1.2
      when I ping the carp ip address(192.168.1.1) from my laptop, the master node will reply to the laptop with it's lan interface ip: 192.168.1.2. not the carp ip. So the problem is: how can I config pfsense to reply to the initiator with 192.168.1.1 as it's source ip?

      1 Reply Last reply Reply Quote 0
      • G
        gslongo
        last edited by

        Also interested by the solution

        1 Reply Last reply Reply Quote 0
        • jimpJ
          jimp Rebel Alliance Developer Netgate
          last edited by

          With ICMP echo request (ping), the system already replies from the CARP VIP if you ping the CARP VIP. If it isn't, perhaps the test methodology or config is otherwise incorrect.

          Traceroute will appear to respond from the interface address but that's a different concept entirely.

          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

          Need help fast? Netgate Global Support!

          Do not Chat/PM for help!

          1 Reply Last reply Reply Quote 0
          • C
            cmb
            last edited by

            @jimp:

            Traceroute will appear to respond from the interface address but that's a different concept entirely.

            Yes, and consistent with how any router or firewall with VRRP, HSRP, etc. works in that circumstance.

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.