On 22/12/2010 15:25, Seth Mos wrote: > Op 22-12-2010 16:15, Vincent Hoffman schreef: > >> I'm already using a CARP address as the VPN endpoint. So the failover >> will fire up racoon on the backup node, or do i need to have racoon >> started on the backup node already and it just wont negotiate until its >> master for that CARP interface? > > The carp backup always has racoon started and configured but the > backup will never see the traffic until failover. > > At that point negotiation should just start over and go. Ok that makes sense. It was only because after syncing the configs etc the racoon service on the backup node wasn't runnning automatically that I didnt work this out. I'll start it up in that case.
Thanks, Vince > > Regards, > > Seth > > --------------------------------------------------------------------- > To unsubscribe, e-mail: support-unsubscr...@pfsense.com > For additional commands, e-mail: support-h...@pfsense.com > > Commercial support available - https://portal.pfsense.org --------------------------------------------------------------------- To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org