hi chris

2013/1/5 Chris Buechler <[email protected]>

>
> That's not a proper supported HA config, but it should work if you
>

for sure, I know.
simply here is necessary http and VPN für users.
so we need no CARP / VIP on WAN.
also the ISP can not provide in this contractmodel fixed PA's....



> bind the client to the LAN CARP IP.
>

great !! that works !!
- I modified the open vpn client config to use as "Interface" the LAN VIP
- enabled CARP synchronizing or OpenVPN settings again

now failover works fine, and also OpenVPN status shows on CARP backup that
there is no master daemon running

many, many thanks for help

cheers
stephan


<http://www.wolfsec.ch>
_______________________________________________
List mailing list
[email protected]
http://lists.pfsense.org/mailman/listinfo/list

Reply via email to