Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

In pfSense 2.0, I have a bunch of WAN CARP Virtual IPs and a bunch of 1:1 NAT rules defined associating these IPs to LAN subnet hosts.

  • If I set up Port Forwarding rules that forward from CARP IPs that I have already defined in 1:1 to other hosts, which rule takes precedence? 1:1 or Port Forwarding?
  • If I set up a load balancer for web servers and have it listen on a CARP IP that I already have a 1:1 definition for, which one takes precedence?

And on a similar note, can I set up a CARP VIP on the WAN IP defined for pfSense? Does pf really need this IP to operate?

  • For example, if my WAN subnet IP is, can I setup a CARP for and port forward requests directed to to other hosts?
share|improve this question
up vote 0 down vote accepted

Read the book. The ordering is described in detail there and is all applicable to 2.0. In short, port forwards and the server load balancer both win over 1:1.

You can't do CARP on the WAN IP, each WAN must have its own IP and it cannot fail over. Same as HSRP, VRRP, etc.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.