Re: carp status master on both firewalls

2023-04-14 Thread mabi
--- Original Message --- On Friday, April 14th, 2023 at 7:14 AM, Janne Johansson wrote: > Not impossible to have switches(*) that dislike/filter/bug on > multicast too I guess, so I would suggest rigging the carps up (at > least temporary) with carppeer against the "real" ip of the

Re: carp status master on both firewalls

2023-04-14 Thread mabi
--- Original Message --- On Friday, April 14th, 2023 at 10:50 AM, Markus Wernig wrote: Thank you Markus for your answer, as mentioned to Janne it was the switch the problem. For the sake of documenting I answered your questions below. > - Do the two fw actually have a link on their

Re: carp status master on both firewalls

2023-04-14 Thread Markus Wernig
for my external carp interface both firewalls show master as status The config is below for reference: /etc/hostname.carp0 on fw1 inet x.x.x.114 255.255.255.240 x.x.x.127 vhid 40 carpdev em2 pass password advskew 1 inet alias x.x.x.115 0xfff0 inet alias x.x.x.116 0xfff0

carp status master on both firewalls

2023-04-13 Thread mabi
Hello, I am running two OpenBSD 7.3 firewalls with pfsync and CARP for redundancy and have one carp interface carp0 for the public internet and one carp interface carp1 for my private (NAT) internal network. The private carp interface has status master on the first firewall and status backup