Well, we aren't using IPSEC right now, so that isn't a deal breaker.
Is pfsync stable?
Scott Ullrich wrote:
SASYNCD is not fully finished yet. With that said failover works
fine for me and my IP phone that is VPN'd into work.
On 11/10/05, Lynn A. Roth <[EMAIL PROTECTED]> wrote:
If you need anyone to test, let me know. We aren't in production yet
with these firewalls, so it's not a big deal. Failover is one of the
big reasons we picked pfsense, so I am interested in helping to get it
working well. Thanks for all your work on this.
Lynn
Scott Ullrich wrote:
I've been noticing interesting CARP problems here too. Mainly the
state is INIT. I'm looking into the problem. I plan on moving back
to RELENG_6 (we're now on RELENG_6_0) to see if it solves the issues.
On 11/9/05, Lynn A. Roth <[EMAIL PROTECTED]> wrote:
I have my two machines set up. (Thanks Scott for the kernel patch).
I followed the CARP Failover tutorial to setup failover. I have a
couple of problems. I'll name the two machines A and B. A is supposed
to be the primary and B the backup.
First, B always grabs master on the carp interfaces. The Advertising
Frequency on A (on all the VIPs) is 0. It is 100 on all the VIPs on B.
Preemption is set on both machines.
It does pass traffic over the CARP interfaces, so I decided to test the
failover. When I reboot B, A takes over fine. When B finishes booting
back up, it starts to take over from A, but in the process A actually
loses the IP on the Sync interface (opt1 named Sync) (no inet address
for bge1 via ifconfig) The failback then seems to be in an odd state
until I go to the SYNC interface on A and click Save. (ifconfig then
shows the IP again) and B takes over everything.
I would appreciate any help that anyone could give on this.
Thanks,
Lynn A. Roth
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
