CARP messing with route and VIP



  • Hi

    i had 2 servers where PfSense (2.3.2) is installed with 2 NIC for each server, each NIC with 2 VLANs so 4 DMZ used per server, i had problems with CARP so i had added 2 other physical NICs, now my 4 DMZ each one use a physical NIC for each server

    my DMZs are
    WAN1
    WAN2
    LAN (192.168.1.1 and 192.168.1.2)
    HA

    3 VIP for CARP
    CARP_WAN1 associated with WAN1
    CARP_WAN2 associated with WAN2
    CARP_LAN associated with LAN (192.168.1.3/32)

    i have 3 gateways configured
    GWWAN1 for WAN1
    GWWAN2 for WAN2
    GWLAN for LAN

    the GWWAN1 and GWWAN2 are configured directly in the interfaces WAN1 and WAN2
    GWLAN is configured in "static routes" where i added 10 routes to some servers

    CARP is well configured, in the master all (XMLRPC Sync) are selected

    the problem :
    when i do some changes in the Master and i do apply, i am getting on the backup server
    "Interface specified for the virtual IP address 192.168.1.3 does not exist. Skipping this VIP"

    checking the backup server, i notice that the CARP_LAN is no more associated with LAN but with WAN1 !!!
    checking the gateways, i notice that the gateway GWLAN changed to disabled and this gateway is no more associated with LAN but with WAN1 !!!

    i have done the test many many times, same problem
    i deleted the LAN gateway, the LAN CARP VIP and re-add them without success

    each time, the same problem, the interface assicated to the LAN gateway and to the LAN CARP VIP changes automatically on the backup server when i do some changes in the alias of the master for example

    if i uncheck "Static Route configuration", "Virtual IPs" in (XMLRPC Sync) on the Master, the CARP works perfectly
    if i uncheck just "Static Route configuration" in (XMLRPC Sync) on the Master, the LAN gateway stay ok and active on the backup but the LAN CARP VIP is faulty as its interface change from LAN to WAN1 automatically

    please any hint to resolve the problem ?
    thanks



  • Use the same interface order on both boxes. For instance, if WAN1 is assigned to network port re0 and WAN2 to re1 on master, ensure that the interfaces are assigned the same way on the backup box.



  • they are aleady absolutely the same for both servers (Master and Backup)

    bge0 –- WAN1
    bge1 --- WAN2
    em0 ---- LAN
    em1 ---- HA


Log in to reply