Did you check layer 2 connectivity it seems the secondary firewall do not receive any carp pack et
Mike -------- Message original -------- Objet : CARP problem De : Jeff à : misc@openbsd.org Cc : I've been using CARP for years and it's always done exactly what I wanted and expected. We recently added a second ISP and another NIC to each of our firewalls. Each firewall now has 3 NIC's and three CARP interfaces. The original two are working fine, but the third CARP interface (carp2) shows up as MASTER on both the primary and failover firewalls. I have verified password, vhid and pf.conf and still can't figure out what I might have done wrong. Both firewalls have net.inet.carp.preempt=1 Here is some output from tcpdump: firewall-master 10:34:01.697488 CARPv2-advertise 36: vhid=10 advbase=1 advskew=15 demote=0 (DF) [tos 0x10] 10:34:01.975823 CARPv2-advertise 36: vhid=10 advbase=1 advskew=99 demote=0 (DF) [tos 0x10] 10:34:02.767475 CARPv2-advertise 36: vhid=10 advbase=1 advskew=15 demote=0 (DF) [tos 0x10] 10:34:03.375808 CARPv2-advertise 36: vhid=10 advbase=1 advskew=99 demote=0 (DF) [tos 0x10] 10:34:03.837465 CARPv2-advertise 36: vhid=10 advbase=1 advskew=15 demote=0 (DF) [tos 0x10] 10:34:04.776092 CARPv2-advertise 36: vhid=10 advbase=1 advskew=99 demote=0 (DF) [tos 0x10] 10:34:04.907466 CARPv2-advertise 36: vhid=10 advbase=1 advskew=15 demote=0 (DF) [tos 0x10] 10:34:05.977465 CARPv2-advertise 36: vhid=10 advbase=1 advskew=15 demote=0 (DF) [tos 0x10] 10:34:06.176254 CARPv2-advertise 36: vhid=10 advbase=1 advskew=99 demote=0 (DF) [tos 0x10] firewall-backup 10:34:42.225616 CARPv2-advertise 36: vhid=10 advbase=1 advskew=15 demote=0 (DF) [tos 0x10] 10:34:42.449469 CARPv2-advertise 36: vhid=10 advbase=1 advskew=99 demote=0 (DF) [tos 0x10] 10:34:43.295464 CARPv2-advertise 36: vhid=10 advbase=1 advskew=15 demote=0 (DF) [tos 0x10] 10:34:43.849458 CARPv2-advertise 36: vhid=10 advbase=1 advskew=99 demote=0 (DF) [tos 0x10] 10:34:44.365459 CARPv2-advertise 36: vhid=10 advbase=1 advskew=15 demote=0 (DF) [tos 0x10] 10:34:45.249484 CARPv2-advertise 36: vhid=10 advbase=1 advskew=99 demote=0 (DF) [tos 0x10] 10:34:45.435175 CARPv2-advertise 36: vhid=10 advbase=1 advskew=15 demote=0 (DF) [tos 0x10] Suggestions please? Thanks! --
