Re: [pfSense] pfsync state full resync

2014-02-17 Thread Joel Robison
Hey guys- good questions! I remember asking myself the same question and what helped me was reading the RFC for VRRP/CARP. essentially when the old master domes back up it will pick up the changes because there will already be a master running on the pvid, what used to be the slave. To be

Re: [pfSense] pfsync state full resync

2014-02-17 Thread Brian Candler
On 16/02/2014 20:25, Joel Robison wrote: Hey guys- good questions! I remember asking myself the same question and what helped me was reading the RFC for VRRP/CARP. essentially when the old master domes back up it will pick up the changes because there will already be a master running on the

Re: [pfSense] pfsync state full resync

2014-02-17 Thread rajan agarwal
Hi Brian and Joel, I resolved the sync issue today in my environment, I just supplied the IP address of primary(Master) server in the secondary(Slave) server's pfsync config in the section for syncing state tables (I already had the sync state table enabled on secondary server), now if the master

Re: [pfSense] pfsync state full resync

2014-02-17 Thread Jim Thompson
See your link http://www.openbsd.org/faq/pf/carp.html It's all in there. -- Jim On Feb 16, 2014, at 12:03, rajan agarwal rajanagarwa...@gmail.com wrote: I was about to post the same question. Thanks Brian, been facing a problem with this in my 2 pfsense setup. On Sun, Feb 16, 2014

Re: [pfSense] pfsync state full resync

2014-02-17 Thread Brian Candler
On 17/02/2014 14:33, Jim Thompson wrote: See your link http://www.openbsd.org/faq/pf/carp.html Yes I've read it. As far as I can see, it talks about state change messages and state table updates only. I see nothing about re-synchronising the entire state table; if that happens, under what

Re: [pfSense] pfsync state full resync

2014-02-17 Thread Jim Pingle
On 2/17/2014 12:17 PM, Brian Candler wrote: I don't know whether the version of pf in pfsense/FreeBSD 8.3 implements this. If this functionality has been in there since the introduction of pfsync then presumably it does. Also: pfsense optionally lets you configure an IP to unicast state

[pfSense] pfsync state full resync

2014-02-16 Thread Brian Candler
I have a question about pfsync failover. Suppose you have a master/slave firewall pair; the master is broadcasting updates to its state table and the slave is picking them up. Then you reboot the master firewall. The slave firewall takes over. When the master firewall comes back, its state

Re: [pfSense] pfsync state full resync

2014-02-16 Thread rajan agarwal
I was about to post the same question. Thanks Brian, been facing a problem with this in my 2 pfsense setup. On Sun, Feb 16, 2014 at 7:20 PM, Brian Candler b.cand...@pobox.com wrote: I have a question about pfsync failover. Suppose you have a master/slave firewall pair; the master is