The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
0answers
3 views

How to make the virtual IP on LAN interface become Master on the only pfSense node with a working/connected WAN interface?

I'm trying to build a multi Wan configuration with High Availability (CARP) functionality. Currently the setup is on virtual machines (before it's released to production). It is on vmware Fusion with ...
0
votes
2answers
15 views

Is it possible to configure carp using /etc/network/interfaces?

Lots of tutorials out there show to set-up carp using ifconfig: https://www.netbsd.org/docs/guide/en/chap-carp.html I'm wondering if it's possible to do the same using /etc/network/interfaces? For ...
0
votes
0answers
320 views

site-to-site OpenVPN tunnel with PFSense + CARP enabled causes regular drops

I have two datacenters, and in each datacenter I have two pfSense 2.1.5 servers running in CARP failover mode. I've established a OpenVPN, shared-key tunnel between the two datacenters, pointing at ...
1
vote
1answer
114 views

Active CARP network loop

I have to setup, no matter what, a cluster of 3 active OpenBSD 5.5 with CARP on 3 separate ESXi 5.5 hosts. I think I'm close to the end but I have this message in /var/log/messages : carp0: replay ...
0
votes
1answer
291 views

CARP Virtual IP does not ping in virtualized environment

We have three physical machines with SmartOS on them in a LAN. Two of them, 10.40.0.30 and 10.40.0.240 are hypervisors with two pfSense-based virtualized gateways on them. These gateways have ...
0
votes
2answers
157 views

pfsense CARP - wan failure on firewall

I have recently configured 2 firewall (on 2 DELL PowerEdge R210II with ESXI 5.1) with pfsense. We have several LANs and 2 WANs. Everything is running fine but i have a strange behavior: i can access ...
2
votes
0answers
359 views

Configure SSH while using UCARP for failover

I have SSH installed, and UCARP configured to fail over a virtual IP when one of the two boxes goes down. The problem that I'm having is when a VM is running, and the ucarp interface is active ...
0
votes
0answers
113 views

how to carp two interfaces on same node?

I have this CentOS machine with 2 interfaces. eth0--> br0 (.10) eth1--> br1 (.11) Although part of the same network, each interface is being fed from a different switch. I use each bridge in ...
3
votes
2answers
2k views

Does two pfsense + CARP necessarily require two WAN IP?

I am looking to setup CARP following this guide across two pfSense firewalls. I have setup CARP before on a WAN link with a big IP space, so allocating a distinct WAN IP per each device (as shown in ...
4
votes
2answers
1k views

UCARP: prevent the original master from taking over the VIP when it comes back after failure?

Keepalived can do this by combining the nopreempt option and the BACKUP state on the both nodes: Prevent VRRP Master from becoming Master once it has failed Prevent master to fall back to master ...
2
votes
1answer
1k views

Physical network setup for pfsense w/ CARP for redundant firewalls

So I'm looking at this diagram: http://doc.pfsense.org/index.php/Configuring_pfSense_Hardware_Redundancy_(CARP) Does this assume that the "DSL Router" at the top of the drawing has two physical RJ45 ...
1
vote
0answers
1k views

Redundant Firewalls And Switches HSRP and CARP

I currently have planned 2 x uplinks (HSRP Active/Standby) 2 x pfsense firewalls (Carp Enabled) 2 x layer2 switches Please criticize or offer help on the correct way to do this. I have a feeling im ...
0
votes
1answer
328 views

openbsd carp with multiple external vip's

Is there any way to setup multiple carp vip's without creating a separate hostname.if file for each address? Our colo has provided us with a /25 external network. Three addresses from this range are ...
3
votes
1answer
1k views

Heartbeat compared to CARP?

Provided I only require virtual IP (migrated between servers), is there any sense in using heartbeat, or CARP is enough?
5
votes
3answers
795 views

*nix CARP or VMWare Fault Tolerance?

We're experimenting with what VMWare called a "Fully Collapsed DMZ" on blade centre. Basically our DMZ goes straight into a vSwitch and all the security appliances are virtualised. I've spent days ...
1
vote
1answer
432 views

IPTables INPUT and ucarp

What rule(s) are needed to allow ucarp traffic on IPTables?
1
vote
2answers
3k views

CARP: two machines think they're the master, but only on one interface

I have two machines, each configured identically as a firewall/load balancer for a busy website. I have set them up with CARP and pfsync on both the internal and external interfaces. The internal ...
3
votes
2answers
6k views

redundant openvpn configuration

I have two openbsd nat/firewall boxes with carp for failover / high availability purposes. What would be the best possible practice to ensure that OpenVPN, which I plan on running on these boxes, ...
0
votes
1answer
345 views

OpenLDAP running on OpenBSD + CARP setup

I'm setting up OpenLDAP on a router/firewall that's running OpenBSD + CARP + pfsync. Curious enough, I'm wondering what's my best approach to making sure the setup stays redundant between the two ...