Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Issue with CARP backup status

    Scheduled Pinned Locked Moved HA/CARP/VIPs
    5 Posts 2 Posters 619 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      cygnus21
      last edited by cygnus21

      I have an issue with CARP on my backup firewall. Most of our CARP VIPs do not show Backup status in the GUI. I did some research into this issue and found a post on the bug tracker where someone had a similar issue and it was recommended to make sure that the VIP shows up in ifconfig for that interface. I checked and it did not show there. I did some searching on the forum here and couldn’t find anything in relation to that.

      I checked the VIP settings on both sides and I know 100% that everything is the same except for the VIP password. I didn’t want to cause a potential issue by changing it during production. All of the interfaces have IPs in the same subnet as their associated VIP. They are all on the same L2 network.

      I am wondering what else to look for to correct this issue.

      Thanks.

      DerelictD 1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate
        last edited by

        https://forum.netgate.com/topic/119864/carp-ha-sync-and-xmlrpc-sync-explained

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • DerelictD
          Derelict LAYER 8 Netgate @cygnus21
          last edited by

          @cygnus21 said in Issue with CARP backup status:

          I checked the VIP settings on both sides and I know 100% that everything is the same except for the VIP password.

          Umm. The VIP password has to be the same on both sides.

          Add the VIPs on the primary. Let them sync to the secondary.

          Chattanooga, Tennessee, USA
          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          1 Reply Last reply Reply Quote 0
          • C
            cygnus21
            last edited by

            So I went back and changed the password for the VIPs and they came up now. everything looks good. Not sure how it got changed as these are not new VIPs and I am sire they were working correctly previously.

            Is there any log kept of CARP so if something like this happens again we will be able to see it easily?

            1 Reply Last reply Reply Quote 0
            • DerelictD
              Derelict LAYER 8 Netgate
              last edited by

              System log

              Chattanooga, Tennessee, USA
              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
              Do Not Chat For Help! NO_WAN_EGRESS(TM)

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.