[pfSense] CARP: Promote backup to master/master to backup without halting master
martin.fuchs at trendchiller.com
Sat Nov 26 18:22:41 EST 2011
Ok, let's see...
You have set up CARP-IPs for WAN and LAN ?
for example your interfaces could be configured like this:
WAN: FW1: 1xx.2xx.2xx.91, FW2: 1xx.2xx.2xx.92, CARP: 1xx.2xx.2xx.90, GW: 1xx.2xx.2xx.89
LAN: FW1: 10.2xx.2xx.11, FW2: 10.2xx.2xx.12, CARP: 10.2xx.2xx.10
You connect to the gui over 10.2xx.2xx.10 or th explicitely choose a system .11, .12
Now both systems should have correct internet connectivity because it's all routed cleanly...
Remember you should have enough external IPs to use CARP for WAN ;-)
Von: list-bounces at lists.pfsense.org [mailto:list-bounces at lists.pfsense.org] Im Auftrag von Danny
Gesendet: Freitag, 25. November 2011 11:48
An: pfSense support and discussion
Betreff: Re: [pfSense] CARP: Promote backup to master/master to backup without halting master
I can reach internet from backup only if I halt the master fw
On Fri, Nov 25, 2011 at 11:36 AM, Fuchs, Martin <martin.fuchs at trendchiller.com<mailto:martin.fuchs at trendchiller.com>> wrote:
Sounds like the GW of the backup system is not correct.
Can the backup reach the internet using ping or else ?
Am 25.11.2011 um 11:05 schrieb "Danny" <metalito at gmail.com<mailto:metalito at gmail.com>>:
> I´ve got a cluster of pfsense 1.2.3 firewalls, but I´m having troubles to install packages on backup firewall.
> I need to promote backup firewall to master without switching off the master (reason is that squid is only in master firewall and cannot halt the system to force backup promotion)
> Would be enough to change in Virtual IPs the Advertising Frequency from 0 to 100 in master, and 100 to 0 in backup?
> In CARP settings for both fw Sync is enabled, but in backup fw checkboxes are not checked, preventing surprises....
> Thank you
> Best Regards
> List mailing list
> List at lists.pfsense.org<mailto:List at lists.pfsense.org>
List mailing list
List at lists.pfsense.org<mailto:List at lists.pfsense.org>
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the List