Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Set failover peer ip on dhcpd the client can't get ip.

    Scheduled Pinned Locked Moved
    HA/CARP/VIPs
    2
    15
    984
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      akong77
      last edited by

      I set CARP on LAN.
      pfsense1 -- LAN -- 192.168.0.254
      pfsense2 -- LAN -- 192.168.0.252
      CARP LAN -- 192.168.0.253
      If I don't set failover peer ip.The client PC can get ip address.
      But if I set failover peer ip the client PC can't any ip address.
      Whats problem?

      1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate
        last edited by

        What are you setting the failover IP address to? Is the reciprocal syncing to the other node?

        When you have it set, what is the status of the failover group in Status > DHCP Leases?

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • A
          akong77
          last edited by

          pfsense1 : 192.168.10.254
          pfsense2 : 192.168.10.252
          LAN CARP VIP : 192.168.10.253
          I set pfsense1 failover ip is 192.168.10.252 then pfsense2 will auto show failover ip is 192.168.10.254.
          If I set finish.The dhcp lease will error show

          dhcp_opt5 (LAN1) recover 2019/03/29 02:11:58 unknown-state 2019/03/29 02:11:58

          Could I set problem?

          1 Reply Last reply Reply Quote 0
          • DerelictD
            Derelict LAYER 8 Netgate
            last edited by

            Looks like they cannot communicate with each other.

            Chattanooga, Tennessee, USA
            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            1 Reply Last reply Reply Quote 0
            • A
              akong77
              last edited by

              I have test 192.168.10.254 and 192.168.10.252 ping each other.It's can ping.

              1 Reply Last reply Reply Quote 0
              • DerelictD
                Derelict LAYER 8 Netgate
                last edited by

                Well then those would sync up.

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                1 Reply Last reply Reply Quote 0
                • A
                  akong77
                  last edited by

                  I sync all.Please see attachment.
                  擷取.PNG

                  1 Reply Last reply Reply Quote 0
                  • A
                    akong77
                    last edited by

                    The dhcp server setup has sync to pfsense2.But user can't get ip address. And dhcp server show that error.

                    1 Reply Last reply Reply Quote 0
                    • DerelictD
                      Derelict LAYER 8 Netgate
                      last edited by

                      So fix the communications between the DHCP servers on that interface. They use TCP/UDP ports 519 and 520.

                      Perhaps you have some weird floating rules that are blocking it. When you enable HA DHCP pfSense adds pass rules automatically.

                      Chattanooga, Tennessee, USA
                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                      A 1 Reply Last reply Reply Quote 0
                      • A
                        akong77 @Derelict
                        last edited by

                        @Derelict
                        Hello, I found pfsense2 will auto set failover ip to pfsense1 lan ip when I set pfsense1 failover ip to pfsense2 lan ip.
                        Is it sync communication ok?
                        If yes. Have any another problem?

                        1 Reply Last reply Reply Quote 0
                        • DerelictD
                          Derelict LAYER 8 Netgate
                          last edited by Derelict

                          Yes. That is how it is supposed to work. That happens via the XMLRPC sync interface.

                          The two DHCP servers communicate for clustering on the actual interfaces that they are servicing DHCP on.

                          Are there any firewall entries logged for 192.168.10.254 or 192.168.10.252 on ports 519 or 520 on either node?

                          Chattanooga, Tennessee, USA
                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                          A 3 Replies Last reply Reply Quote 0
                          • A
                            akong77 @Derelict
                            last edited by

                            This post is deleted!
                            1 Reply Last reply Reply Quote 0
                            • A
                              akong77 @Derelict
                              last edited by akong77

                              @Derelict
                              I has set firewall on floating and set interface on LAN and set any to any and port set pass 519 and 520 tcp/udp. But it's show unknown-stats on dhcp-lease.

                              I also set firewall on my lan.Please see attachment.lan1.PNG
                              I haven't connect wan. Could it effect dhcp?

                              1 Reply Last reply Reply Quote 0
                              • A
                                akong77 @Derelict
                                last edited by

                                @Derelict
                                Hello, I found some error.
                                Please see attachment.
                                error.PNG
                                You see the mac address is fc:ec:da:d1:ab:40
                                But I search all pfsense1 and pfsense2 network interface. I am not found the same mac address.
                                p1.PNG
                                p2.PNG
                                What's this problem?

                                1 Reply Last reply Reply Quote 0
                                • DerelictD
                                  Derelict LAYER 8 Netgate
                                  last edited by

                                  check the clocks on both nodes

                                  Chattanooga, Tennessee, USA
                                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.