Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Virtual IPs split between two CARP members?

    Scheduled Pinned Locked Moved HA/CARP/VIPs
    3 Posts 3 Posters 2.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bubble1975
      last edited by

      Hi Y'all,

      I have an interesting question…  I have 2 pfSense firewalls (2.0-RELEASE, amd64), in a CARP config such that fw1 is the "master" and syncs everything to fw2.  Now, I have 4 virtual IPs (LAN side) on fw1 that are the master.  Works great.  What I wanted to do was some load balancing, such that I move two of the virtual IPs over the the "slave" box, fw02.  So, I kicked up the 'skew' on the virtual IP on fw01, such that fw02 would have the lower skew and would become the Master.  But, when I do that, I notice the slave (fw02) automatically kicks up the skew on it's side by 100, such that my old master on fw01 is still the master...?

      Is there anyway to do this?  Should I not be syncing virtual IPs or something, and trying to set up the master/slave manually?  I get the feeling that the sync bit is somehow incrementing the skew on the slave when I change it on the master.

      Any help appreciated!

      1 Reply Last reply Reply Quote 0
      • K
        kloana
        last edited by

        Hi,

        yes your problem is the sync of carp settings. This would use on backup always the same as on master, exept the skew settings. Skew on backup is master +100.

        Disable syncing of carp and configure it manually on both sides and it should work.

        regards
        Herbert

        1 Reply Last reply Reply Quote 0
        • marcellocM
          marcelloc
          last edited by

          could be done but not supported officially

          http://forum.pfsense.org/index.php/topic,40917.0.html

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.