Re: [pfSense] pfsense in ha - sync interface rule disapear
Ok Thanx for information! -Luc -- ! ( o o ) --oOO(_)OOo-- Luc Paulin email: paulinster(at)gmail.com Skype: paulinster 2016-10-13 13:08 GMT-04:00 Steve Yates <st...@teamits.com>: > The rules should sync at every rule change. (alias, etc.) If > states are syncing those are in real time. > > -- > > Steve Yates > ITS, Inc. > > -Original Message- > From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Luc Paulin > Sent: Thursday, October 13, 2016 12:00 PM > To: pfSense Support and Discussion Mailing List <list@lists.pfsense.org> > Subject: Re: [pfSense] pfsense in ha - sync interface rule disapear > > I think I am good now .. I have delete the sync interface and then > recreate it ... All look good now and system is syncing beetween > each-other. > > One more question, can we change the frequency of the sync ? Look like the > default is ~10min > > -Luc > > > -- > ! >( o o ) > --oOO(_)OOo-- >Luc Paulin >email: paulinster(at)gmail.com >Skype: paulinster > > > 2016-10-13 12:13 GMT-04:00 Steve Yates <st...@teamits.com>: > > > What version pfSense? We are on 2.3.2 without the latest patch > > (2.3.2_1), using CARP/sync, since whatever version was in spring 2015, > > and haven't had this issue. > > > > -- > > > > Steve Yates > > ITS, Inc. > > > > -Original Message- > > From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Luc > > Paulin > > Sent: Thursday, October 13, 2016 10:11 AM > > To: pfSense Support and Discussion Mailing List > > <list@lists.pfsense.org> > > Subject: Re: [pfSense] pfsense in ha - sync interface rule disapear > > > > Rule is disapearing on the slave only ... > > Yes both firewall's interface's description are the same and assign to > > the same interface... > > > > -Luc > > > > > > > > > > > > -- > > ! > >( o o ) > > --oOO(_)OOo-- > >Luc Paulin > >email: paulinster(at)gmail.com > >Skype: paulinster > > > > > > 2016-10-13 11:00 GMT-04:00 Steve Yates <st...@teamits.com>: > > > > > Are your rules disappearing on the slave, the master, or both? > > > > > > Brainstorming, do both have the same name for the pfsync interface? > > > Meaning the slave isn't named PFSYNC-SLAVE or something like that? > > > > > > -- > > > > > > Steve Yates > > > ITS, Inc. > > > > > > -Original Message- > > > From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Luc > > > Paulin > > > Sent: Thursday, October 13, 2016 9:10 AM > > > To: list@lists.pfsense.org > > > Subject: [pfSense] pfsense in ha - sync interface rule disapear > > > > > > Hi Everyone, > > > I am new to pfsense and I have to say to that I am very impressed to > > > see all the feature available out of box. > > > > > > I am currently testing it to see how well it work and perform for > > > our environement. We would like to replace our HA linux firewall > > > running IPTable/fwbuiler scripts. Currently trying to setup the HA > > > but having hard time to make it work properly. I am following the > > > wiki guide ( https://doc.pfsense.org/index.php/Configuring_pfSense_ > > > Hardware_Redundancy_(CARP) > > > ). > > > > > > The issue that I have is that the rule I added on both firewall to > > > allow SYNC interface to communicate keep disapear on the slave > > > firewall once the connection got established. So XMLRPC did copy > > > rules from master to slave, but the PFSYNC interface rules disapear, > > > therefore this cause communication issue after > > > (/rc.filter_synchronize: New alert found: A communications error > > > occurred while attempting XMLRPC sync with username admin > > > https://172.16.199.2:443.) > > > > > > > > ___ > > pfSense mailing list > > https://lists.pfsense.org/mailman/listinfo/list > > Support the project with Gold! https://pfsense.org/gold > > > ___ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold > ___ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold > ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
Re: [pfSense] pfsense in ha - sync interface rule disapear
The rules should sync at every rule change. (alias, etc.) If states are syncing those are in real time. -- Steve Yates ITS, Inc. -Original Message- From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Luc Paulin Sent: Thursday, October 13, 2016 12:00 PM To: pfSense Support and Discussion Mailing List <list@lists.pfsense.org> Subject: Re: [pfSense] pfsense in ha - sync interface rule disapear I think I am good now .. I have delete the sync interface and then recreate it ... All look good now and system is syncing beetween each-other. One more question, can we change the frequency of the sync ? Look like the default is ~10min -Luc -- ! ( o o ) --oOO(_)OOo-- Luc Paulin email: paulinster(at)gmail.com Skype: paulinster 2016-10-13 12:13 GMT-04:00 Steve Yates <st...@teamits.com>: > What version pfSense? We are on 2.3.2 without the latest patch > (2.3.2_1), using CARP/sync, since whatever version was in spring 2015, > and haven't had this issue. > > -- > > Steve Yates > ITS, Inc. > > -Original Message- > From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Luc > Paulin > Sent: Thursday, October 13, 2016 10:11 AM > To: pfSense Support and Discussion Mailing List > <list@lists.pfsense.org> > Subject: Re: [pfSense] pfsense in ha - sync interface rule disapear > > Rule is disapearing on the slave only ... > Yes both firewall's interface's description are the same and assign to > the same interface... > > -Luc > > > > > > -- > ! >( o o ) > --oOO(_)OOo-- >Luc Paulin >email: paulinster(at)gmail.com >Skype: paulinster > > > 2016-10-13 11:00 GMT-04:00 Steve Yates <st...@teamits.com>: > > > Are your rules disappearing on the slave, the master, or both? > > > > Brainstorming, do both have the same name for the pfsync interface? > > Meaning the slave isn't named PFSYNC-SLAVE or something like that? > > > > -- > > > > Steve Yates > > ITS, Inc. > > > > -Original Message- > > From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Luc > > Paulin > > Sent: Thursday, October 13, 2016 9:10 AM > > To: list@lists.pfsense.org > > Subject: [pfSense] pfsense in ha - sync interface rule disapear > > > > Hi Everyone, > > I am new to pfsense and I have to say to that I am very impressed to > > see all the feature available out of box. > > > > I am currently testing it to see how well it work and perform for > > our environement. We would like to replace our HA linux firewall > > running IPTable/fwbuiler scripts. Currently trying to setup the HA > > but having hard time to make it work properly. I am following the > > wiki guide ( https://doc.pfsense.org/index.php/Configuring_pfSense_ > > Hardware_Redundancy_(CARP) > > ). > > > > The issue that I have is that the rule I added on both firewall to > > allow SYNC interface to communicate keep disapear on the slave > > firewall once the connection got established. So XMLRPC did copy > > rules from master to slave, but the PFSYNC interface rules disapear, > > therefore this cause communication issue after > > (/rc.filter_synchronize: New alert found: A communications error > > occurred while attempting XMLRPC sync with username admin > > https://172.16.199.2:443.) > > > > > ___ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold > ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
Re: [pfSense] pfsense in ha - sync interface rule disapear
I think I am good now .. I have delete the sync interface and then recreate it ... All look good now and system is syncing beetween each-other. One more question, can we change the frequency of the sync ? Look like the default is ~10min -Luc -- ! ( o o ) --oOO(_)OOo-- Luc Paulin email: paulinster(at)gmail.com Skype: paulinster 2016-10-13 12:13 GMT-04:00 Steve Yates <st...@teamits.com>: > What version pfSense? We are on 2.3.2 without the latest patch (2.3.2_1), > using CARP/sync, since whatever version was in spring 2015, and haven't had > this issue. > > -- > > Steve Yates > ITS, Inc. > > -Original Message- > From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Luc Paulin > Sent: Thursday, October 13, 2016 10:11 AM > To: pfSense Support and Discussion Mailing List <list@lists.pfsense.org> > Subject: Re: [pfSense] pfsense in ha - sync interface rule disapear > > Rule is disapearing on the slave only ... > Yes both firewall's interface's description are the same and assign to the > same interface... > > -Luc > > > > > > -- > ! >( o o ) > --oOO(_)OOo-- >Luc Paulin >email: paulinster(at)gmail.com >Skype: paulinster > > > 2016-10-13 11:00 GMT-04:00 Steve Yates <st...@teamits.com>: > > > Are your rules disappearing on the slave, the master, or both? > > > > Brainstorming, do both have the same name for the pfsync interface? > > Meaning the slave isn't named PFSYNC-SLAVE or something like that? > > > > -- > > > > Steve Yates > > ITS, Inc. > > > > -Original Message----- > > From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Luc > > Paulin > > Sent: Thursday, October 13, 2016 9:10 AM > > To: list@lists.pfsense.org > > Subject: [pfSense] pfsense in ha - sync interface rule disapear > > > > Hi Everyone, > > I am new to pfsense and I have to say to that I am very impressed to > > see all the feature available out of box. > > > > I am currently testing it to see how well it work and perform for our > > environement. We would like to replace our HA linux firewall running > > IPTable/fwbuiler scripts. Currently trying to setup the HA but having > > hard time to make it work properly. I am following the wiki guide ( > > https://doc.pfsense.org/index.php/Configuring_pfSense_ > > Hardware_Redundancy_(CARP) > > ). > > > > The issue that I have is that the rule I added on both firewall to > > allow SYNC interface to communicate keep disapear on the slave > > firewall once the connection got established. So XMLRPC did copy > > rules from master to slave, but the PFSYNC interface rules disapear, > > therefore this cause communication issue after > > (/rc.filter_synchronize: New alert found: A communications error > > occurred while attempting XMLRPC sync with username admin > > https://172.16.199.2:443.) > > > > > ___ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold > ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
Re: [pfSense] pfsense in ha - sync interface rule disapear
What version pfSense? We are on 2.3.2 without the latest patch (2.3.2_1), using CARP/sync, since whatever version was in spring 2015, and haven't had this issue. -- Steve Yates ITS, Inc. -Original Message- From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Luc Paulin Sent: Thursday, October 13, 2016 10:11 AM To: pfSense Support and Discussion Mailing List <list@lists.pfsense.org> Subject: Re: [pfSense] pfsense in ha - sync interface rule disapear Rule is disapearing on the slave only ... Yes both firewall's interface's description are the same and assign to the same interface... -Luc -- ! ( o o ) --oOO(_)OOo-- Luc Paulin email: paulinster(at)gmail.com Skype: paulinster 2016-10-13 11:00 GMT-04:00 Steve Yates <st...@teamits.com>: > Are your rules disappearing on the slave, the master, or both? > > Brainstorming, do both have the same name for the pfsync interface? > Meaning the slave isn't named PFSYNC-SLAVE or something like that? > > -- > > Steve Yates > ITS, Inc. > > -Original Message- > From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Luc > Paulin > Sent: Thursday, October 13, 2016 9:10 AM > To: list@lists.pfsense.org > Subject: [pfSense] pfsense in ha - sync interface rule disapear > > Hi Everyone, > I am new to pfsense and I have to say to that I am very impressed to > see all the feature available out of box. > > I am currently testing it to see how well it work and perform for our > environement. We would like to replace our HA linux firewall running > IPTable/fwbuiler scripts. Currently trying to setup the HA but having > hard time to make it work properly. I am following the wiki guide ( > https://doc.pfsense.org/index.php/Configuring_pfSense_ > Hardware_Redundancy_(CARP) > ). > > The issue that I have is that the rule I added on both firewall to > allow SYNC interface to communicate keep disapear on the slave > firewall once the connection got established. So XMLRPC did copy > rules from master to slave, but the PFSYNC interface rules disapear, > therefore this cause communication issue after > (/rc.filter_synchronize: New alert found: A communications error > occurred while attempting XMLRPC sync with username admin > https://172.16.199.2:443.) > > ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
Re: [pfSense] pfsense in ha - sync interface rule disapear
Rule is disapearing on the slave only ... Yes both firewall's interface's description are the same and assign to the same interface... -Luc -- ! ( o o ) --oOO(_)OOo-- Luc Paulin email: paulinster(at)gmail.com Skype: paulinster 2016-10-13 11:00 GMT-04:00 Steve Yates <st...@teamits.com>: > Are your rules disappearing on the slave, the master, or both? > > Brainstorming, do both have the same name for the pfsync interface? > Meaning the slave isn't named PFSYNC-SLAVE or something like that? > > -- > > Steve Yates > ITS, Inc. > > -Original Message- > From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Luc Paulin > Sent: Thursday, October 13, 2016 9:10 AM > To: list@lists.pfsense.org > Subject: [pfSense] pfsense in ha - sync interface rule disapear > > Hi Everyone, > I am new to pfsense and I have to say to that I am very impressed to see > all the feature available out of box. > > I am currently testing it to see how well it work and perform for our > environement. We would like to replace our HA linux firewall running > IPTable/fwbuiler scripts. Currently trying to setup the HA but having hard > time to make it work properly. I am following the wiki guide ( > https://doc.pfsense.org/index.php/Configuring_pfSense_ > Hardware_Redundancy_(CARP) > ). > > The issue that I have is that the rule I added on both firewall to allow > SYNC interface to communicate keep disapear on the slave firewall once the > connection got established. So XMLRPC did copy rules from master to slave, > but the PFSYNC interface rules disapear, therefore this cause communication > issue after (/rc.filter_synchronize: New alert found: A communications > error occurred while attempting XMLRPC sync with username admin > https://172.16.199.2:443.) > > > ___ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold > ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
Re: [pfSense] pfsense in ha - sync interface rule disapear
Are your rules disappearing on the slave, the master, or both? Brainstorming, do both have the same name for the pfsync interface? Meaning the slave isn't named PFSYNC-SLAVE or something like that? -- Steve Yates ITS, Inc. -Original Message- From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Luc Paulin Sent: Thursday, October 13, 2016 9:10 AM To: list@lists.pfsense.org Subject: [pfSense] pfsense in ha - sync interface rule disapear Hi Everyone, I am new to pfsense and I have to say to that I am very impressed to see all the feature available out of box. I am currently testing it to see how well it work and perform for our environement. We would like to replace our HA linux firewall running IPTable/fwbuiler scripts. Currently trying to setup the HA but having hard time to make it work properly. I am following the wiki guide ( https://doc.pfsense.org/index.php/Configuring_pfSense_Hardware_Redundancy_(CARP) ). The issue that I have is that the rule I added on both firewall to allow SYNC interface to communicate keep disapear on the slave firewall once the connection got established. So XMLRPC did copy rules from master to slave, but the PFSYNC interface rules disapear, therefore this cause communication issue after (/rc.filter_synchronize: New alert found: A communications error occurred while attempting XMLRPC sync with username admin https://172.16.199.2:443.) ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
[pfSense] pfsense in ha - sync interface rule disapear
Hi Everyone, I am new to pfsense and I have to say to that I am very impressed to see all the feature available out of box. I am currently testing it to see how well it work and perform for our environement. We would like to replace our HA linux firewall running IPTable/fwbuiler scripts. Currently trying to setup the HA but having hard time to make it work properly. I am following the wiki guide ( https://doc.pfsense.org/index.php/Configuring_pfSense_Hardware_Redundancy_(CARP) ). The issue that I have is that the rule I added on both firewall to allow SYNC interface to communicate keep disapear on the slave firewall once the connection got established. So XMLRPC did copy rules from master to slave, but the PFSYNC interface rules disapear, therefore this cause communication issue after (/rc.filter_synchronize: New alert found: A communications error occurred while attempting XMLRPC sync with username admin https://172.16.199.2:443.) Thanx for your help! -- ! ( o o ) --oOO(_)OOo-- Luc Paulin email: paulinster(at)gmail.com Skype: paulinster ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
