NAT Mapping for local address

[maverickws]

Hi guys,

I was looking at my NAT mappings on a couple of HA/CARP pfsense firewalls, and noticed the NAT Address on 127.0.0.1 and ::1 is set to interface address, shouldn't it be the CARP VIP as well? Thanks

[viragomann]

@maverickws
No, that is for pfSense itself.
If you use the CARP VIP here, the backup box would not be able to communicate with the internet, e.g. for system updates, cause the VIP is occupied by the master.

[maverickws]

Alright man ofc that makes perfect sense. Many thanks for your reply.