PROBS: HA setup (carp) with uplink failover and SIP-traffic not switching uplink



  • Hi All

    I have the problem that SIP-traffic ist not changing the gateway after one uplink is not available anymore.

    The setup is as following:
    Two pfsense 2.0.2 with 6 Interfaces (WAN1, WAN2, DMZ, int1, int2, sync) setup with CARP.
    Two Uplinks with fixed IP-networks.
    One WAN-Group (one Uplink Tier1 the other Tier2)
    Manual Outbound-NAT:

    • one rule for each uplink for internal network with the virtual-CARP-IP as NAT-IP and using the Gateway-Group

    • a special UDP Rule from internal network for each uplink with the same virtual-CARP-IP as NAT-IP but with static ports for SIP and also using the gateway-group

    With that setup the following is working fine:

    • normal email and web traffic works with failover of the two pfsense

    • SIP phones (with one provider) working fine also in case of failover

    • Uplink failover works for normal TCP traffic! Every client is using the backup-gateway and the other NAT-IP[\li]

      The only thing wich is not working:
      In case of a uplink failover the SIP-phone will not follow to the Tier2 Uplink Gateway!

      I tried to log the FW-rule (internal-SIP-phone, UDP -> any) to see whats going on but I can't see any registration with that rule at all (not even the working case with the Tier1 Uplink!).
      But in the state-table I can see that the SIP-phone has opened the correct static port to the sip registrar.

      The phone is configured to reregister after 2 minutes. So in case of an failover it should reregister after that time.
      But it's dead afterwords and I can't see a new(or changed) state with the failover NAT-IP.

      Has someone an idea why I can't see someting logged in the FW-rule with the UDP-traffic regarding SIP-traffic and why only the SIP-traffic is somehow not using the second gateway of the Gateway-Group?

      I would be very glad to hear any comment or ideas to that?!

      Best regards
      Patrick



  • Same problem here…

    Any ideas?  8)



  • We upgraded to 2.1.5.
    If I am right there was something about that in the version-info.
    With the new version it works because they changed things in the behavior on CARP failover regarding to deleting states.

    Best regards
    Patrick