CARP for VLANs? Gateway issue.

[Ragnar-Kon]

I've had CARP setup and running for quite some time now with much success.  One of my UPS units died this past weekend and HA/CARP handled everything beautifully except for my VLANs.  I didn't even realize that VLANs also needed a CARP IP, but it makes sense.

Fixed it this past week… except for one problem:  The gateway the VLAN devices pick up is NOT the CARP IP, but rather one of the VLAN IPs of the PFsense boxes.

PFsense01 IP : 172.16.0.11
PFsense02 IP : 172.16.0.12
CARP IP : 172.16.0.10

PFsense01 VLAN IP : 172.17.0.2
PFsense02 VLAN IP : 172.17.0.3
CARP IP : 172.17.0.1

Despite the fact that the VLAN DHCP server gateway and DNS server is clearly set to 172.17.0.1… the devices on that VLAN still pick up 172.17.0.2 or 172.17.0.3.  Different devices pick up different gateways, and renewing DHCP leases on devices will often cause it to switch to the other gateway.

I should also note that devices not on the VLAN pick up the shared CARP IP (172.16.0.10) just fine.

Any ideas?

[viragomann]

Have you entered the CARP IP for gateway in DHCP config?

[Ragnar-Kon]

Yup…