Re: [pfSense] pfsense ha issues

2017-12-12 Thread Eero Volotinen
Well. I did not tested that. I need to do that when I can switch carp cluster back online. I did rollback to single firewall as ha setup caused packet loss issues on production network (office). -- Eero 2017-12-12 22:26 GMT+02:00 Steve Yates : > I get the actual LAN IP back

Re: [pfSense] pfsense ha issues

2017-12-12 Thread Steve Yates
I get the actual LAN IP back from a traceroute also so that's normal. In the sense of "that's the router handling the packet" that makes sense. Do you get packet loss if you ping out from the pfSense? Steve -Original Message- From: List [mailto:list-boun...@lists.pfsense.org] On

Re: [pfSense] pfsense ha issues

2017-12-12 Thread Eero Volotinen
Well, I did traceroute 8.8.8.8 and that shows traffic via 192.168.1.7 which is primary firewall lan address. DHCP gives default route to 192.168.1.1 which is the carp vip. I got only continuos packet loss to internet not to .1 (vip) or .7 addresses and carp status is stable. (ie. primary

Re: [pfSense] pfsense ha issues

2017-12-12 Thread Steve Yates
They aren't swapping master/backup are they? If you turn off one of the two what happens? Not sure how you're determining traffic going to the .7 IP...? The gateway on a device on the LAN should be .1 (the "CARP" LAN IP). Are you getting packet loss if you ping the .1 address? The .7

[pfSense] pfsense ha issues

2017-12-12 Thread Eero Volotinen
Hi, installed pfsense ha system on office. it works, but experiencing about 25% packet loss. any idea why? switch issue? failover works fine. VIP lan gw ip is .1 but looks like traffic is going to .7 ip (normal ip of fw) even dhcp offers .1 as gw. is this normal? Eero