Hi,

Having got a nice redundant firewall setup working with openbsd 4.2 pf + carp + pfsync. My next step was to integrate it with ospf. My initial plan was to continue to treat the firewall pair, as a single 'virtual firewall' within the network and use ospf to advertise routes through just the carp interfaces. Looking at a couple of docs for ospf though, I was disappointed to find out I can't do this. I am not familiar with the internals of ospf, so there may be an obvious reason for this limitation, is it easy to explain, or could someone point me towards an explanation?

Instead of doing this, I am now intending to drop carp out of the picture altogether and just use ospf to provide the failover. Is this the recommended solution? Does anyone else run this solution?

Thanks in advance!

Reply via email to