HA pf setup ?

2004-03-12 Thread matthew zeier
I have build two pf boxes with carp and pfsync running. If one whole box goes away, it works nicely. However, if just the outside interface on the "master" goes done, the other unit becomes "master" for the outside but remains "backup" on the inside and routing is broken. How have others solved

Re: HA pf setup ?

2004-03-13 Thread Camiel Dobbelaar
On Fri, 12 Mar 2004, matthew zeier wrote: > However, if just the outside interface on the "master" goes done, the other > unit becomes "master" for the outside but remains "backup" on the inside and > routing is broken. > > How have others solved this? ifstated is meant to solve these type of p

Re: HA pf setup ?

2004-03-13 Thread matthew zeier
> On Fri, 12 Mar 2004, matthew zeier wrote: > > However, if just the outside interface on the "master" goes done, the other > > unit becomes "master" for the outside but remains "backup" on the inside and > > routing is broken. > > > > How have others solved this? > > ifstated is meant to solve the

Re: HA pf setup ?

2004-03-13 Thread Camiel Dobbelaar
On Sat, 13 Mar 2004, matthew zeier wrote: > > ifstated is meant to solve these type of problems. See usr.sbin/ifstated > > in a current src tree. > > The man page for that is pretty light and there isn't any sample config > file. src/etc/ifstated.conf