• Hi,

    I'm trying to mount 2 CARPs (WAN and LAN side) on a pair of pfSense in a way that LAN CARP depends on WAN CARP. If WAN link gets down, the LAN CARP should move the VIP to the standby pfSense. I've tried it but it doesn't works, may you help me? :)

  • Verify your CARP setup is correct. This should be the default behavior. You can check the relevant sysctl: sysctl net.inet.carp.preempt
    Per the man page:
    net.inet.carp.preempt    Allow virtual hosts to preempt each other.  It
          is also used to failover carp interfaces as a
          group.  When the option is enabled and one of
          the carp enabled physical interfaces goes down,
          advskew is changed to 240 on all carp inter-
          faces.  See also the first example.  Disabled
          by default.

    On pfsense, the sysctl defaults to 1 (enabled)

  • I feel a little dumb… I missed to get the correct Base advertising frequency on both nodes of one carp VIP config...