Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    bypass VHID limit (255) with IP Alias

    HA/CARP/VIPs
    2
    3
    872
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      soulearth last edited by

      Hello,
      I want a pfsense cluster in HA for routing more than 255 network. Normaly, the IP alias is the good solution.

      But the documentation say :

      • Stacked IP Alias VIPs must be inside the same subnet as the CARP VIP upon which they are placed."
      • "Subnet mask should match the interface IP, or be /32. Matching the interface subnet is advised. For IPs in different subnets at least one IP alias VIP must have the correct mask for the new subnet."

      Can I have this ? :
      VIP IP interface : 192.168.1.249/24
      STACK IP ALIAS VIP interface :  192.168.1.14/28

      Or

      VIP  IP interface : 192.168.1.249/24
      STACK IP ALIAS VIP interface :  192.168.1.14/32

      I want cut my /24 in multiple /28 with a VIP IP ALIAS in each /28, for exemple.

      Thanks,
      Soulearth

      1 Reply Last reply Reply Quote 0
      • jimp
        jimp Rebel Alliance Developer Netgate last edited by

        IIRC on 2.2 and later that limitation no longer applies since the underlying CARP structure in the OS changed.

        1 Reply Last reply Reply Quote 0
        • S
          soulearth last edited by

          Hello,
          Thank you for your reply.

          Therefore, the following configuration is normally possible ?

          CARP VIP IP interface : 192.168.1.249/24
          STACK CARP IP ALIAS VIP interface :  192.168.2.249/24

          Thank you again for your help.
          Soulearth

          1 Reply Last reply Reply Quote 0
          • First post
            Last post

          Products

          • Platform Overview
          • TNSR
          • pfSense Plus
          • Appliances

          Services

          • Training
          • Professional Services

          Support

          • Subscription Plans
          • Contact Support
          • Product Lifecycle
          • Documentation

          News

          • Media Coverage
          • Press
          • Events

          Resources

          • Blog
          • FAQ
          • Find a Partner
          • Resource Library
          • Security Information

          Company

          • About Us
          • Careers
          • Partners
          • Contact Us
          • Legal
          Our Mission

          We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

          Subscribe to our Newsletter

          Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

          © 2021 Rubicon Communications, LLC | Privacy Policy