Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    I need explanation about CARP WAN VIP addressing

    Scheduled Pinned Locked Moved
    HA/CARP/VIPs
    2
    4
    703
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      poopsie
      last edited by

      Here is my setup.  Modem from ISP, LAYER 2 switch off the modem.  One port to PF1, one port to PF2.  They each get their own address and have subnet of /23.  The problem is that one address might be 35.122.211.177/23 on PF1 and 35.222.46.221/23.  My question is how do I know what address to choose for the WAN VIP?  I have tried setting this up a few times, and every time I end up with no internet to the LAN after configuring the DNS Server with the LAN IP and Gateway with LAN IP.

      I appreciate any help!

      1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate
        last edited by

        /23 on WAN?

        Not a /23 routed to another WAN interface subnet?

        Or do you just have a set number of addresses you can use on that /23?

        Sounds like you need a real ISP.

        HA/CARP is wholly incompatible with anything dynamic such as DHCP or PPPoE.

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • P
          poopsie
          last edited by

          DHCP is what I am getting from the ISP.  That would be the issue I am guessing.  My DHCP is on the /23 subnet.  So I need at least 3 static IP to make this work then?

          1 Reply Last reply Reply Quote 0
          • DerelictD
            Derelict LAYER 8 Netgate
            last edited by

            Yes. preferably a /29

            Chattanooga, Tennessee, USA
            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.