The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
1answer
16 views

Set an network interface in FreeBSD as DHCP-enabled, but totally silent until explicitly enabled

I'm setting up a FreeBSD carp router/firewall backup, my provider is giving out IP by DHCP, it's static and tied to MAC address of my NIC, so when carp switches state I'm trying to switch off the ...
0
votes
0answers
74 views

How would a CARP virtual IP defined with the wrong subnet mask manifest itself?

I have a VMware cluster that hosts two pfSense virtual appliances in a CARP configuration: +-----------+------------------+------------------+--------------+ | Interface | pf0 | ...
1
vote
0answers
468 views

pfSense 2.2: HAProxy for HTTP + CARP + MultiWAN with VIPs issue (Outbound NAT?)

I have two pfSense firewalls with CARP setup, 2 WANs and HAProxy that points to HTTP servers in my LAN. Scheme: **pfSense server #1** ISP#1 - Public IP1.1 - pfSense#1 with HAProxy - HTTP ISP#2 - ...
0
votes
2answers
186 views

Is it possible to configure carp using /etc/network/interfaces?

Lots of tutorials out there show to set-up carp using ifconfig: https://www.netbsd.org/docs/guide/en/chap-carp.html I'm wondering if it's possible to do the same using /etc/network/interfaces? For ...
0
votes
0answers
962 views

site-to-site OpenVPN tunnel with PFSense + CARP enabled causes regular drops

I have two datacenters, and in each datacenter I have two pfSense 2.1.5 servers running in CARP failover mode. I've established a OpenVPN, shared-key tunnel between the two datacenters, pointing at ...
1
vote
1answer
483 views

Active CARP network loop

I have to setup, no matter what, a cluster of 3 active OpenBSD 5.5 with CARP on 3 separate ESXi 5.5 hosts. I think I'm close to the end but I have this message in /var/log/messages : carp0: replay ...
0
votes
1answer
1k views

CARP Virtual IP does not ping in virtualized environment

We have three physical machines with SmartOS on them in a LAN. Two of them, 10.40.0.30 and 10.40.0.240 are hypervisors with two pfSense-based virtualized gateways on them. These gateways have 10.40.0....
0
votes
2answers
350 views

pfsense CARP - wan failure on firewall

I have recently configured 2 firewall (on 2 DELL PowerEdge R210II with ESXI 5.1) with pfsense. We have several LANs and 2 WANs. Everything is running fine but i have a strange behavior: i can access ...
2
votes
0answers
640 views

Configure SSH while using UCARP for failover

I have SSH installed, and UCARP configured to fail over a virtual IP when one of the two boxes goes down. The problem that I'm having is when a VM is running, and the ucarp interface is active (eth0:...
4
votes
3answers
4k views

Does two pfsense + CARP necessarily require two WAN IP?

I am looking to setup CARP following this guide across two pfSense firewalls. I have setup CARP before on a WAN link with a big IP space, so allocating a distinct WAN IP per each device (as shown in ...
4
votes
2answers
2k views

UCARP: prevent the original master from taking over the VIP when it comes back after failure?

Keepalived can do this by combining the nopreempt option and the BACKUP state on the both nodes: Prevent VRRP Master from becoming Master once it has failed Prevent master to fall back to master ...
2
votes
1answer
2k views

Physical network setup for pfsense w/ CARP for redundant firewalls

So I'm looking at this diagram: http://doc.pfsense.org/index.php/Configuring_pfSense_Hardware_Redundancy_(CARP) Does this assume that the "DSL Router" at the top of the drawing has two physical RJ45 ...
1
vote
0answers
2k views

Redundant Firewalls And Switches HSRP and CARP

I currently have planned 2 x uplinks (HSRP Active/Standby) 2 x pfsense firewalls (Carp Enabled) 2 x layer2 switches Please criticize or offer help on the correct way to do this. I have a feeling im ...
0
votes
1answer
512 views

openbsd carp with multiple external vip's

Is there any way to setup multiple carp vip's without creating a separate hostname.if file for each address? Our colo has provided us with a /25 external network. Three addresses from this range are ...
3
votes
1answer
1k views

Heartbeat compared to CARP?

Provided I only require virtual IP (migrated between servers), is there any sense in using heartbeat, or CARP is enough?
5
votes
3answers
1k views

*nix CARP or VMWare Fault Tolerance?

We're experimenting with what VMWare called a "Fully Collapsed DMZ" on blade centre. Basically our DMZ goes straight into a vSwitch and all the security appliances are virtualised. I've spent days ...
2
votes
1answer
579 views

IPTables INPUT and ucarp

What rule(s) are needed to allow ucarp traffic on IPTables?
1
vote
2answers
6k views

CARP: two machines think they're the master, but only on one interface

I have two machines, each configured identically as a firewall/load balancer for a busy website. I have set them up with CARP and pfsync on both the internal and external interfaces. The internal ...
3
votes
2answers
9k views

redundant openvpn configuration

I have two openbsd nat/firewall boxes with carp for failover / high availability purposes. What would be the best possible practice to ensure that OpenVPN, which I plan on running on these boxes, ...
0
votes
1answer
379 views

OpenLDAP running on OpenBSD + CARP setup

I'm setting up OpenLDAP on a router/firewall that's running OpenBSD + CARP + pfsync. Curious enough, I'm wondering what's my best approach to making sure the setup stays redundant between the two ...