well. my plan was to add first carp vip addresses to old configuration with gui and then switching them to main addresses using search and replace.
and then just restore config to main firewall and use config sync to replicate it to secondary.. -- Eero 2017-12-04 18:41 GMT+02:00 Chris L <[email protected]>: > On Dec 4, 2017, at 8:11 AM, Eero Volotinen <[email protected]> wrote: > > > > Well. is that really so hard? > > > > thinking to add carp ip addresses and switching them to main addresses by > > editing xml backup and then restoring it to firewall.. > > > > I have same hardware (3* sg-8860). one for backup.. > > It depends on how complicated your setup is. > > If there were lots of interfaces and physical interface name changes, I > might edit the configuration to change the interface names and the > interface addresses (many people use .2 for the primary, .3 for the > secondary, and .1 for the CARP VIP, for instance) but after that I would > use the GUI to make the HASYNC interface, VIPs and configure HA. > > I would not try to configure the secondary that way. I would configure it > from scratch and let the configuration for everything exceopt the > interfaces, etc sync over. > > > > > Eero > > > > 4.12.2017 17.49 "Steve Yates" <[email protected]> kirjoitti: > > > >> I don't think it would qualify as "simple" since it involves setting up > an > >> additional interface on each as well as the CARP virtual IPs. > >> > >> If you're asking about linking your old router to a new router, the > >> routers have to use the same hardware interface (NIC) names in order to > >> sync firewall states (em0 to igb0 won't sync). > >> > >> -- > >> > >> Steve Yates > >> ITS, Inc. > >> > >> -----Original Message----- > >> From: List [mailto:[email protected]] On Behalf Of Eero > >> Volotinen > >> Sent: Saturday, December 2, 2017 11:04 AM > >> To: pfSense Support and Discussion Mailing List <[email protected] > > > >> Subject: [pfSense] single pfsense to ha conversion > >> > >> Hi List, > >> > >> I just bought two pieces of sg-8860 netgate devices and planning to > convert > >> old unit to ha solution. > >> > >> Is there simple way to convert units to ha with a bit editing xml > backup? > >> > >> -- > >> Eero > >> _______________________________________________ > >> pfSense mailing list > >> https://lists.pfsense.org/mailman/listinfo/list > >> Support the project with Gold! https://pfsense.org/gold > >> _______________________________________________ > >> pfSense mailing list > >> https://lists.pfsense.org/mailman/listinfo/list > >> Support the project with Gold! https://pfsense.org/gold > >> > > _______________________________________________ > > pfSense mailing list > > https://lists.pfsense.org/mailman/listinfo/list > > Support the project with Gold! https://pfsense.org/gold > > _______________________________________________ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold > _______________________________________________ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
