LAGG and Broadcast Traffic/DHCP

  • Hello,

    We run multiple pfSense instances in a LAGG configuration. The LAGG protocol selected is Failover.

    We find that if a broadcast packet is transmitted across the network, a LAGGED pfSense instance will receive the packet twice. This is not the case with the bonding driver (ifenslave) on Debian and I just wondered if this was expected behaviour?

    It's quite hilarious when running high availability DHCP on a LAGGed interface because the DHCP clients receive four offers, two from each firewall.

    We've tested versions 2.2.6 and 2.3.2 using physical and virtual switches. The behaviour seems consistent on all of them.


Log in to reply