CARP og IP Alias on additional IPs routed to us by the data center
-
Hello.
We are just about to go live from 1 pfsense box, to 2x Netgate 7100-1U.
Last question i have.
CARP on the new IP does not seem to work.
WAN@14 is our IP, and WAN@15 is a routed IP to our router.Today we use IP alias.
With HA, can i use CARP? Will it just activate this IP on both boxes?
Like if i had set IP Alias on both pfsense boxes?Thanks.
-
@professor You don't need any VIPs to use a routed subnet for certain things. It depends on what you want to do with them.
https://docs.netgate.com/pfsense/en/latest/firewall/virtual-ip-address-comparison.html
You need to be sure that upstream is routing the subnet to a CARP VIP on the interface subnet, though, so the route will follow the VIP if it moves to the other host.
If you need to use IP Aliases then set the interface to a WAN CARP VIP, not WAN itself. That way the VIP will swing with the MASTER CARP status.
-
@professor
No, keep it as IP alias, but hook it up on the WAN CARP VIP now. -
@derelict
Yeah, same conclusion i had.@viragomann
Yup.