Well, finally, there were two problems

I think I forget to mention I was using failover.

1) Time drift between both boxes


-------------IMPORTANT:-------------------------------------------------------
2) I've setup dhcp for two interfaces.One of them was working fine, the other never could get synchronized.

Looking at the sockstat output on pf1 I saw that it had ports 519/tcp open for both failover IPs.On pf2 it had port 520/tcp open for both IPs, one ip from each interface with dhcp enabled and providing failover service.

The problem (and I think it's a nasty bug) is that connecting from pf1->pf2'sFIRST_FAILOVER_IP:519 was working right, but connecting from pf1->pf2'sSECOND_FAILOVER_IP:519 was not working.

The problem was solved by creating a rule which allows tcp ports 519-520 from and to failover ips.

Hope it helps in the future somebody else.

Thanks for your help.


Matias Surdi escribió:
Hi,

I'm using pfSense 1.2 , and suddenly DHCP seems to have stopped working. On the system log, i see the following:

Oct 7 22:23:34     dhcpd: Internet Systems Consortium DHCP Server V3.0.5
Oct 7 22:23:34     dhcpd: Copyright 2004-2006 Internet Systems Consortium.
Oct 7 22:23:34     dhcpd: All rights reserved.
Oct 7 22:23:34 dhcpd: For info, please visit http://www.isc.org/sw/dhcp/ Oct 7 22:23:34 dhcpd: failover peer declaration with no referring pools. Oct 7 22:23:34 dhcpd: In order to use failover, you MUST refer to your main failover declaration Oct 7 22:23:34 dhcpd: in each pool declaration. You MUST NOT use range declarations outside
Oct 7 22:23:34     dhcpd: of pool declarations.




Any idea?
        


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to