Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    CARP Bug or New Feature

    General pfSense Questions
    2
    5
    160
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      tomli last edited by tomli

      Hi All,

      I have 2 pfsense servers, each server has 4 physical ports (WAN, LAN, OPT1 and OPT2). I create 3 CARP IPs in each interface (expect wan). When I click save button in System --> High Availability Sync page (no change any configuration), I find Active Server CARP IPs status will change from Master to BACKUP. In the log, I find the below message:-

      May 25 01:59:16 pfSense1 kernel: carp: demoted by 240 to 240 (pfsync bulk start)
      ...
      After 1min 30 secs

      May 25 02:00:21 pfSense1 kernel: carp: demoted by -240 to 0 (pfsync bulk fail)
      The CARP IPs status will resume normal.

      In the old version, I also see the above log message
      May 25 02:50:57 pfSense kernel: carp: demoted by 0 to 0 (pfsync bulk start)
      The CARP IPs status will not change.

      Is it a bug or a new feature? please advise.

      1 Reply Last reply Reply Quote 0
      • stephenw10
        stephenw10 Netgate Administrator last edited by

        It's not a new feature. Sounds like more like something is misconfigured.

        Why are you re-saving the HA sync settings though? Are you changing something there?

        Steve

        1 Reply Last reply Reply Quote 0
        • T
          tomli last edited by

          Yes, I changed the Remote System Password. And click save button.

          d4a23898-ae0b-4244-bbeb-caff661d0467-image.png

          Thanks,

          1 Reply Last reply Reply Quote 0
          • T
            tomli last edited by

            More information for your reference.
            1bd31f74-ada1-4215-852c-146f44f34fee-image.png

            a2586b01-7f93-4e0a-93b0-83a755364863-image.png

            advskew is 0 and carp is in BACKUP status. It is very strange !!!

            1 Reply Last reply Reply Quote 0
            • stephenw10
              stephenw10 Netgate Administrator last edited by

              Mmm, that shouldn't be possible.

              Try running a packet capture on that interface and check the time between the CARP packets. The Sec would have to be sending in less than 1s intervals to demote the Pri.

              Or maybe something else using those VHIDs?

              Steve

              1 Reply Last reply Reply Quote 0
              • First post
                Last post