CARP, 1:1 NAT, multiple WAN subnets

  • I've done a lot of searching and reading, but I'm not sure if what I want to do is possible.

    For IPv4 conservation reasons the campus network my WAN port is plugged into has two subnets; one publicly routable, and one for machines that only need to be accessed from elsewhere on campus.  I have machines with both types of addresses, routed through my pfSense firewall via proxy ARP and 1:1 NAT.  So far this all works fine.

    My question is, is it possible to make CARP failover work in a situation like this?  Can I switch the PARP IPs to CARP, or will this cause problems since they're not all on the same subnet?

  • So, I set up a test network and answered my own question: No, it doesn't work.  I can have multiple CARP IPs on an interface but they all have to be on the same subnet.

  • Also, found a gotcha with Virtual IP sync that's worth noting.  The sync doesn't work properly – the virtual IP appears on the slave, but in the CARP Status page it lacks a carp interface.  It won't function until you edit the virtual IP assignment (on the slave) and click Save without making any changes -- after that it functions.

Log in to reply