CARP + pfsync problem

  • hello.
    i have 2 Soekris net4801 machines ( and i try to make a small cluster with.
    After reading the tutorial from here ( i start my configuration:
    i have this config :
    FW-1 : wan (sis1) - x.x.x.183                                                  FW-2 : wan (sis1) - x.x.x 184
              lan  (sis0) -                                          lan (sis0) -       
              opt1 (sis2) -      < crossover-cable >      opt1 (sis2) -

    I set the virtual IP for CARP-WAN x.x.x.181 and the virtual IP for CARP-LAN
    The problem is that after all the configuration the STATUS->CARP from the second machine is empty. (on the left one it's ok).
    Could be the crossover cable? or something alse?

    p.s durring the configuration i notted that when i should make the VIRT.IP->CARP SETTINGS i never find the Preemption option.

  • nobady made it?

  • The preemption setting is gone as it is enabled by default now behind the scenes. If your backup is empty it means something went wrong with the config sync from master to slave. Make sure you have set up firewallrules on the slave to accept the config sync and that password and so on is correct and you have checked all neccessary sync options. In case a sync goes wrong you usually get an alert. What do your systemlogs tell you when you save settings? This usually triggers a sync (if setup correctly and the settings are configured to be synced over).

  • so my setup was this:
    -firewall->rules->opt1(or sync)->add  -on fw-1
    -firewall->rules->opt1(or sync)->add  -on fw-2

    -firewall->V.IP->CARP set->syncronize enbled    -on fw2
    -firewall->V.IP->CARP set->syncronize enbled,sync rules, sync nat, sync V.ip /sync to ip, & passwd        -on fw-1

    -firewall->V.IP->Add->carp, WAN + ip wan x.x.x.181  (wan-carp)  -on fw-1
    -firewall->V.IP->Add->carp, LAN + ip lan  (lan-carp)  -on fw-1
    -firewall->NAT->Outbound->edit rule-add target wan-carp.

    The fw-1 tell me this: A communication error occured while attempting XMLRPC to sync with username admin
    seems that i don't have connections between 192.168.201 and trough the crossover cable.

  • i don't know wath the problem was, but after an undesired reboot it just work fine.
    Thank you for all.

  • ~~I'm ending up with the same problem on a 1.2 STABLE release.

    I have:

    • both machines up-to-date
    • usernames the same
    • passwords the same
    • firewall rules on the SYNC interfaces on * * * *

    I also rebooted both machines, but this gives no clue.

    HTTPS or HTTP set on both machines doesn't make any difference also.

    What could be wrong here ?~~

    I have solved this issue. It should have been a subnet that needed to be test on /24… this was also in the second trouble shooting part.

Log in to reply