Other way for redundancy
-
I don't know if this post is in the right topic, but I think it will be the best place because it's related to CARP
I want to make a redundant sollution, but I have only 1 IP on the WAN side.
But I was thinking, if I make something so that 1 pfsense box is master and 1 is slave, it has sync nic where I run pfsync over and xmlrpc.
On the spare I set the same MAC adres on the WAN nic as the master, but keep the NIC down, when the master fails the slave's nic will become active, this should take over the traffic.Is there something I haven't over seen?
If this should work, I could make a package or something (have to see where I get the time for it)
Please let me know what you are thinking of this.
-
CARP can't work with just 1 IP. I think your best bet might just be a second box that is ready to go except for a config restore. It wouldn't fail over automatically but it would only take a minute or two to do if you were in the building.
-
Thanks for your answer.
That's right it, it should switch over also when there is no one in the building.I know CARP can't work with 1 IP, but what if I just sync the config and the state table with the spare server (not using CARP)?
-
It wouldn't sync the interface config (WAN, LAN, etc) and IPs, so you'd have a lot of manual changes to make.