On 23/03/11 21:08, Bret Lambert wrote: > On Mon, Mar 21, 2011 at 10:27 PM, Kapetanakis Giannis > <bil...@edu.physics.uoc.gr> wrote: >> Hi, >> >> I'm testing a new setup of a pair of firewalls (master/backup) using carp, >> pfsync etc. >> >> Can I use ifstated to monitor virtual interfaces like pfsync0 and enc0? >> >> I want the master after it reboots (if backup is up) to wait for pfsync0 >> interface to come up, get the missing states from backup firewall and only >> then advskew carp. This is because pfsync runs on ipsec, which sometimes >> takes about 2 minutes to become operational (at least on some of my tests). > Are you running sasyncd as well?
No, I don't need any redundancy in any ipsec gateway. Giannis [demime 1.01d removed an attachment of type application/pkcs7-signature which had a name of smime.p7s]
