Re: carp not reverting to master

2014-10-15 Thread Marko Cupać
On Thu, 02 Oct 2014 18:02:23 +0100 Andy a...@brandwatch.com wrote: Hi Try setting the advskew to a number greater than 200 and less then 254. This seems to be the most stable. For best practice our primary runs with carp and pfsync values of '1'. And the backup runs with carp and pfsync

Re: carp not reverting to master

2014-10-15 Thread Alan McKay
On Wed, Oct 15, 2014 at 2:13 PM, Marko Cupać marko.cu...@mimar.rs wrote: Oct 14 15:21:19 bgp1 /bsd: carp2: state transition: MASTER - BACKUP Oct 14 15:21:19 bgp1 /bsd: carp1: state transition: MASTER - BACKUP Oct 14 15:21:22 bgp1 /bsd: carp1: state transition: BACKUP - MASTER Oct 14 15:21:22

Re: carp not reverting to master

2014-10-15 Thread Andy Lemin
Please excuse typos, sent from my phone On 15 Oct 2014, at 19:13, Marko Cupać marko.cu...@mimar.rs wrote: On Thu, 02 Oct 2014 18:02:23 +0100 Andy a...@brandwatch.com wrote: Hi Try setting the advskew to a number greater than 200 and less then 254. This seems to be the most stable.

Re: carp not reverting to master

2014-10-15 Thread Andy Lemin
Please excuse typos, sent from my phone On 15 Oct 2014, at 19:13, Marko Cupać marko.cu...@mimar.rs wrote: On Thu, 02 Oct 2014 18:02:23 +0100 Andy a...@brandwatch.com wrote: Hi Try setting the advskew to a number greater than 200 and less then 254. This seems to be the most stable.

carp not reverting to master

2014-10-02 Thread Marko Cupać
Hi, I have carp setup on two pairs of interfaces on our internal firewalls that sit between private network and DMZ. The problem is that, for some unknown reason, from time to time, carp fails over to nat2 (backup), and does not revert to nat1 (master), until I manually carpdemote nat2. If I

Re: carp not reverting to master

2014-10-02 Thread Andy
nat1 will only preempt the nat2 after a fail-over to nat2 if the carp group and the pfsync group have the same demotion counter. ifconfig -g carp ifconfig -g pfsync So if the failover which is happening for some unknown reason is affecting the demotion counters in anyway, preemption back to

Re: carp not reverting to master

2014-10-02 Thread Marko Cupać
On Thu, 02 Oct 2014 10:37:19 +0100 Andy a...@brandwatch.com wrote: nat1 will only preempt the nat2 after a fail-over to nat2 if the carp group and the pfsync group have the same demotion counter. ifconfig -g carp ifconfig -g pfsync So if the failover which is happening for some unknown

Re: carp not reverting to master

2014-10-02 Thread Alan McKay
You have not yet shown the output of ifconfig Check the advskew values on the interfaces. When carpdemote values are equal then advskew determines who is MASTER

Re: carp not reverting to master

2014-10-02 Thread Marko Cupać
On Thu, 2 Oct 2014 09:59:10 -0400 Alan McKay alan.mc...@gmail.com wrote: You have not yet shown the output of ifconfig Check the advskew values on the interfaces. When carpdemote values are equal then advskew determines who is MASTER Hi Alan, I have posted advskew values in initial

Re: carp not reverting to master

2014-10-02 Thread Alan McKay
On Thu, Oct 2, 2014 at 11:03 AM, Marko Cupać marko.cu...@mimar.rs wrote: I have posted advskew values in initial mail (0 on masters, 100 on backups). That shows me what they are supposed to be. That does not show me what they actually are. ifconfig output will show what they actually are.

Re: carp not reverting to master

2014-10-02 Thread Andy
Hi Try setting the advskew to a number greater than 200 and less then 254. This seems to be the most stable. For best practice our primary runs with carp and pfsync values of '1'. And the backup runs with carp and pfsync values of '2'. We do this for two reasons. 1) it is extremely

Re: carp not reverting to master

2014-10-02 Thread Andy
PS; I would recommend setting the carpdemote to be a maximum (lowest) of 1, becuase then if something happens to the primary box, and you can't get into it for some reason, at least you could set the carp demotion counters on the backup to 0' and remotely preempt your primary. On 02/10/14