How to config pfsense to reply the initiator with carp ip as source ip?
-
hello, I create a cluster firewall with two pfsense box.
The carp vip of lan is 192.168.1.1, the master node's lan interface's ip is 192.168.1.2
when I ping the carp ip address(192.168.1.1) from my laptop, the master node will reply to the laptop with it's lan interface ip: 192.168.1.2. not the carp ip. So the problem is: how can I config pfsense to reply to the initiator with 192.168.1.1 as it's source ip?
-
Also interested by the solution
-
With ICMP echo request (ping), the system already replies from the CARP VIP if you ping the CARP VIP. If it isn't, perhaps the test methodology or config is otherwise incorrect.
Traceroute will appear to respond from the interface address but that's a different concept entirely.
-
Traceroute will appear to respond from the interface address but that's a different concept entirely.
Yes, and consistent with how any router or firewall with VRRP, HSRP, etc. works in that circumstance.
