If you want more help with this then you need to provide a network diagram and some details. Are your switches linked? If not then that is your problem. Did you disable mac spoofing on your switches? What make and model are your switches. Did you do any LACP bonding between switches?
Since your issue happens with both pfsense and other software. Then your issue is either your setup itself, your switches or your understanding of how a carp setup must be made. Rgds, LSF On Thu, Jun 8, 2017, 11:19 Daniel <[email protected]> wrote: > > https://www.dropbox.com/s/pq953p0wbsfseu7/Screenshot%202017-06-08%2011.19.07.png?dl=0 > > Yes i am sure ;) > > > -- > Grüsse > > Daniel > > Am 08.06.17, 01:12 schrieb "List im Auftrag von Espen Johansen" < > [email protected] im Auftrag von [email protected]>: > > Are you sure you disabled IGMP completely? > > On Wed, Jun 7, 2017, 16:44 Mark Wiater <[email protected]> > wrote: > > > > > > > On 6/7/2017 10:10 AM, Daniel wrote: > > > Hi, > > > > > > the Sync interface is connected directly without a Switch. > > > But Carp is running WAN/LAB for example. > > > > Let's go back to your original email, this behavior can be duplicated > > with different software, it's not a pfSense issue. Is that right? > Both > > Sophos UTM and something on Linux both exhibit something similar? > > > > CARP sends broadcast traffic to 224.0.0.18. The device that you > > configured as the primary will send a packet every second by default, > > for each carp ip address, on the relevant interface. > > > > If the secondary does not receive these packets, it starts sending > it's > > own, with a higher priority and assumes ownership of the CARP > addresses. > > > > When the primary device is again available, it starts sending higher > > priority CARP packets. The secondary receives those, stops sending > it's > > CARP packets and reverts to a backup role, because it knows that the > > primary is back up and functional. > > > > All that said, if your devices keep flipping back and forth, I'd > guess > > that you don't see these carp packets at the backup device. > > > > tcpdump -ni wan|lan CARP > > > > on the backup device will tell a lot. > > > > Any chance you've got the wan and lan of the primary firewall going > to > > the opposite switches as the secondary? > > > > _______________________________________________ > > pfSense mailing list > > https://lists.pfsense.org/mailman/listinfo/list > > Support the project with Gold! https://pfsense.org/gold > > > _______________________________________________ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold > > > _______________________________________________ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold _______________________________________________ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
