Hello,

I have a setup with 2 openBSD boxes used as firewall, redundancy is made using
CARP.
Each has 4 NIC : 1 for internet, 1 for pfsync, and the two last are used as a
trunk, collecting all other VLANs.
Master's advskew is 10, slave's is 50.
All worked like a charm since nearly 2 years, but since 3 weeks I have odd
problems :
* on the net interface, the backup becomes master, but the master remains
master -> Nearly half of the packets are lost
I did a tcpdump on the slave's interface, carp packets from the master arrive.
But it remains master !
Jun 22 16:42:50.572205 00:00:5e:00:01:0a 01:00:5e:00:00:12 0800 70:
CARPv2-advertise 36: vhid=10 advbase=1 advskew=10 demote=0 (DF) [tos 0x10]
Jun 22 16:42:50.748122 00:00:5e:00:01:0a 01:00:5e:00:00:12 0800 70:
CARPv2-advertise 36: vhid=10 advbase=1 advskew=50 demote=0 (DF) [tos 0x10]

* on my DMZ interface (vlan 4), the carp is in INIT state. By the way, as it
is part of a trunk, physical connections are good : they work for all other
VLANs. When I shut down the corresponding carp interface on the slave
(ifconfig carp4 down), master becomes master again.

Could you give me any clue to keep my master in master state ?

Thank you

--
Cordialement,
 
Pierre BARDOU
CSIM - Bureau 012
 
Midi Picardie Informatique Hospitalihre
12 rue Michel Labrousse
BP93668
F-31036 Toulouse CEDEX 1
 
Til : 05 67 31 90 84
Fax : 05 34 61 51 00
Mail : [email protected]

Reply via email to