I've been using CARP for years and it's always done exactly what I wanted and
expected.  We recently added a second ISP and another NIC to each of our
firewalls.  Each firewall now has 3 NIC's and three CARP interfaces.  The
original two are working fine, but the third CARP interface (carp2) shows up
as MASTER on both the primary and failover firewalls.  I have verified password,
vhid and pf.conf and still can't figure out what I might have done wrong.

Both firewalls have net.inet.carp.preempt=1

Here is some output from tcpdump:

firewall-master

10:34:01.697488 CARPv2-advertise 36: vhid=10 advbase=1 advskew=15 demote=0 (DF) 
[tos 0x10]
10:34:01.975823 CARPv2-advertise 36: vhid=10 advbase=1 advskew=99 demote=0 (DF) 
[tos 0x10]
10:34:02.767475 CARPv2-advertise 36: vhid=10 advbase=1 advskew=15 demote=0 (DF) 
[tos 0x10]
10:34:03.375808 CARPv2-advertise 36: vhid=10 advbase=1 advskew=99 demote=0 (DF) 
[tos 0x10]
10:34:03.837465 CARPv2-advertise 36: vhid=10 advbase=1 advskew=15 demote=0 (DF) 
[tos 0x10]
10:34:04.776092 CARPv2-advertise 36: vhid=10 advbase=1 advskew=99 demote=0 (DF) 
[tos 0x10]
10:34:04.907466 CARPv2-advertise 36: vhid=10 advbase=1 advskew=15 demote=0 (DF) 
[tos 0x10]
10:34:05.977465 CARPv2-advertise 36: vhid=10 advbase=1 advskew=15 demote=0 (DF) 
[tos 0x10]
10:34:06.176254 CARPv2-advertise 36: vhid=10 advbase=1 advskew=99 demote=0 (DF) 
[tos 0x10]

firewall-backup

10:34:42.225616 CARPv2-advertise 36: vhid=10 advbase=1 advskew=15 demote=0 (DF) 
[tos 0x10]
10:34:42.449469 CARPv2-advertise 36: vhid=10 advbase=1 advskew=99 demote=0 (DF) 
[tos 0x10]
10:34:43.295464 CARPv2-advertise 36: vhid=10 advbase=1 advskew=15 demote=0 (DF) 
[tos 0x10]
10:34:43.849458 CARPv2-advertise 36: vhid=10 advbase=1 advskew=99 demote=0 (DF) 
[tos 0x10]
10:34:44.365459 CARPv2-advertise 36: vhid=10 advbase=1 advskew=15 demote=0 (DF) 
[tos 0x10]
10:34:45.249484 CARPv2-advertise 36: vhid=10 advbase=1 advskew=99 demote=0 (DF) 
[tos 0x10]
10:34:45.435175 CARPv2-advertise 36: vhid=10 advbase=1 advskew=15 demote=0 (DF) 
[tos 0x10]



Suggestions please?

Thanks!


        
-- 

Reply via email to