Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to add a second virtual IP for CARP ????

    Scheduled Pinned Locked Moved HA/CARP/VIPs
    4 Posts 4 Posters 1.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      pedreter
      last edited by

      First of all… hello everybody!!!!!  :)

      I am having an problem with CARP and i would like to ask for your help and/or feedback, please....

      I have Firewall-A  and  Firewall-B  working in HA with CARP perfectly!  they have a virtual IP (CARP type) that works as a floating IP. So far so good...

      If i want to add now a second IP floating IP address??? how do i do it?

      i have tried to add a second CARP virtual IP and it works... but after a couple of hours, both virtual IPs.... the first one and the second i created stop working and no traffic can pass the fw!

      am i doing right? does PfSense support 2 carp virtual IPs?? what is the correct to do it?

      Thanks in advance!

      Pedreter.

      1 Reply Last reply Reply Quote 0
      • A
        andrew4902
        last edited by

        Are you setting up your firewalls as described here: https://doc.pfsense.org/index.php/Configuring_pfSense_Hardware_Redundancy_(CARP)? I setup a pair of firewalls with pfSense 2.1.4 with VIPs on the LAN and WAN interfaces without any trouble.

        1 Reply Last reply Reply Quote 0
        • S
          secgeek
          last edited by

          I don't believe you can add a second CARP IP to the interfaces.  The simple configuration what is described in the book and in the online documentation seems to be the only one that works.

          I tried to turn a CARP setup without a dedicated pfSync interface that didn't work either; actually it doesn't seem to fail from the start but sometime afterwards.

          1 Reply Last reply Reply Quote 0
          • JeGrJ
            JeGr LAYER 8 Moderator
            last edited by

            @secgeek: Don't know what you are trying to say, but it doesn't make sense.
            @pedreter: we run a datacenter firewall cluster with HA and carp on multiple physical interfaces (6) with about a dozen VIPs on our second WAN link and minimum one on the remaining links (WAN, XFER, MGMT, etc.). No problem with that. Seems like a configuration issue to me rather than any problem with CARP or IPs.

            Greets

            Don't forget to upvote 👍 those who kindly offered their time and brainpower to help you!

            If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.