CARP Mode Multicast / Unicast ?

Yathus

Hello,

We are using two pfsense in CARP Mode (latest version 23.09.1), Multicast.

In the documentation there is information about unicast peer ip : https://docs.netgate.com/pfsense/en/latest/highavailability/index.html

Can someone confirm that we have to put the IP in the subnet of the interface ?

We have one inferface for PFSYNC (192.168.120.0/24) and one LAN interface (192.168.110.0/24), first node is 192.168.110.1, second node is 192.168.110.2, if we want a CARP IP 192.168.110.254, we have to put 192.168.110.2 in "peer ip" and not 192.168.120.2 (IP of second node in PFSYNC interface).

Thanks

Yathus

kiokoman

@Yathus
indeed, if you can't use multicast., peer address is the second node for primary pfsense and vice versa for secondary pfsense
forget about PFSYNC interface it is used only for configuration synchronization and pfsync state synchronization

Yathus

@kiokoman said in CARP Mode Multicast / Unicast ?:

@Yathus
indeed, if you can't use multicast., peer address is the second node for primary pfsense and vice versa for secondary pfsense
forget about PFSYNC interface it is used only for configuration synchronization and pfsync state synchronization

I made a test, i create a "Virtual IP" on primary pfsense and i put IP from secondary on "peer IP" and it's working. I create only on the primary node, nothing on second node, Sync did the job.