On 07/13/2008 08:14:30 PM, Ryan McBride wrote:
On Sat, Jul 12, 2008 at 04:12:14PM -0500, Karl O. Pinc wrote:
> Aside from dumping state tables on the master and standby
> boxes and comparing them, is there a way to ask
> if the state tables are synchronized?
Not really, because
> Knowing would help prevent shutting down the master when the standby
> is not yet synchronized.
Don't shut your "master" down until all it's carp interfaces are in
the
MASTER state.
The case I'm now concerned about is shutting down the active
firewall before the standby firewall has synchronized it's
state and and is ready to take over. E.g. while doing
maintenance after rebooting the standby firewall
you'd want to know it's synchronized (mostly anyhow)
before shutting down the active firewall.
Maybe it's a non-issue because synchonization(ish) happens
fast enough even on a slow box that it's just not likely
to ever happen.
Karl <[EMAIL PROTECTED]>
Free Software: "You don't pay back, you pay forward."
-- Robert A. Heinlein
