Here you go:
root@pf1:~# /usr/local/pf/bin/pfcmd checkup Checking configuration sanity... root@pf1:~# /usr/local/pf/bin/cluster/node Node pf1 is currently enabled Node pf2 is currently enabled Node pf3 is currently enabled root@pf1:~# *Daniel J. Zook* *a.k.a. "Zookie" *(he/him/his) Eastern Mennonite University On Thu, May 2, 2024 at 3:56 PM Zammit, Ludovic <luza...@akamai.com> wrote: > Hello, > > Can you show the output of: > > /usr/local/pf/bin/pfcmd checkup > > /usr/local/pf/bin/cluster/node > > Thanks, > > *Ludovic Zammit* > *Product Support Engineer Principal Lead* > *Cell:* +1.613.670.8432 > Akamai Technologies - Inverse > 145 Broadway > Cambridge, MA 02142 > Connect with Us: <https://community.akamai.com> <http://blogs.akamai.com> > <https://twitter.com/akamai> <http://www.facebook.com/AkamaiTechnologies> > <http://www.linkedin.com/company/akamai-technologies> > <http://www.youtube.com/user/akamaitechnologies?feature=results_main> > > On May 2, 2024, at 3:07 PM, Daniel Zook <daniel.z...@emu.edu> wrote: > > Thanks for the reply Ludovic. > > I followed your suggestion, however, on the sync step, I discovered that > the networks.conf file reverted the change back to the node's registration > network IP address. > > Here is a screenshot showing it corrected to use the VIP of 10.9.0.5 for > the gateway and dns: > <image.png> > > And here is a screenshot showing the same file after running sync > --as-master, where it reverted back to 10.9.0.2 > <https://urldefense.com/v3/__http://10.9.0.2__;!!GjvTz_vk!XqebG65mp8VMMKYH7bZYSxzmPgFsggCxgWehOQiBihXbVSICNFNbgYKNFLB7H0YUxQ6hJfepPEVYtAOvQdIw$> > : > <image.png> > > I did not go any further after that. > > Your thoughts? > > *Daniel J. Zook* *a.k.a. "Zookie" *(he/him/his) > Eastern Mennonite University > > > On Thu, May 2, 2024 at 8:58 AM Zammit, Ludovic <luza...@akamai.com> wrote: > >> Hello Daniel, >> >> Make sure the configuration is consistent on all members on the cluster. >> >> Do on the firs node : >> >> vim /usr/local/pf/conf/networks.conf (Make sure the VIP IP address is >> used for the gateway and DNS ) >> >> /usr/local/pf/bin/pfcmd configreload hard >> >> /usr/local/pf/bin/cluster/node/sync --as-master >> >> Then on node 2 and node 3: >> >> /usr/local/pf/bin/pfcmd configreload hard >> >> /usr/local/pf/bin/pfcmd service pf restart >> >> Thanks, >> >> >> *Ludovic Zammit* >> *Product Support Engineer Principal Lead* >> *Cell:* +1.613.670.8432 >> Akamai Technologies - Inverse >> 145 Broadway >> Cambridge, MA 02142 >> Connect with Us: <https://community.akamai.com/> >> <http://blogs.akamai.com/> >> <https://urldefense.com/v3/__https://twitter.com/akamai__;!!GjvTz_vk!XqebG65mp8VMMKYH7bZYSxzmPgFsggCxgWehOQiBihXbVSICNFNbgYKNFLB7H0YUxQ6hJfepPEVYtEl4NKwt$> >> <https://urldefense.com/v3/__http://www.facebook.com/AkamaiTechnologies__;!!GjvTz_vk!XqebG65mp8VMMKYH7bZYSxzmPgFsggCxgWehOQiBihXbVSICNFNbgYKNFLB7H0YUxQ6hJfepPEVYtFTUlZEm$> >> <https://urldefense.com/v3/__http://www.linkedin.com/company/akamai-technologies__;!!GjvTz_vk!XqebG65mp8VMMKYH7bZYSxzmPgFsggCxgWehOQiBihXbVSICNFNbgYKNFLB7H0YUxQ6hJfepPEVYtLSkTVWQ$> >> <https://urldefense.com/v3/__http://www.youtube.com/user/akamaitechnologies?feature=results_main__;!!GjvTz_vk!XqebG65mp8VMMKYH7bZYSxzmPgFsggCxgWehOQiBihXbVSICNFNbgYKNFLB7H0YUxQ6hJfepPEVYtKOPHyV5$> >> >> On Apr 30, 2024, at 11:19 AM, Daniel Zook via PacketFence-users < >> packetfence-users@lists.sourceforge.net> wrote: >> >> I have a working packetfence cluster and everything seems to be setup and >> working fine except that when a guest connects on the Registration VLAN, >> DNS fails. It acts as if there is a firewall blocking it, or there is no >> service listening. >> >> If I stop IPTables on one or more cluster members, DNS starts working >> again. Unfortunately, PacketFence somehow restarts IPTables after a period >> of time even if I set it to "disabled" (and DNS fails to work again.) >> >> What do I need to do to prevent IPTables from running so that DNS keeps >> working on the Registration network? >> >> Thanks in advance for your help. >> _______________________________________________ >> PacketFence-users mailing list >> PacketFence-users@lists.sourceforge.net >> >> https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!U0N9vfZORkZrsZMlMngvIxLK9YrfKlEED3Lq3jCNRwl8G8DKAstUjvGZqphnSe5Vr_wZ3vUdrcUIyaDw8_Q8NYBnzXS-EP9RkcL7CA$ >> >> >> >
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
