On Thu, Aug 04, 2005 at 08:28:49AM -0400, Monah Baki wrote:
> Hi all,
>
> Implementing carp, I have 2 net4801's that seem to be synchronizing, when I do
> a ifconfig -a on the secondary I see carp0 on the slave becomes Master when
> the primary goes down.
> The internal machines are working fine accessing the internet and all.
>
> The pf.conf rule has the 2 rules:
>
> pass quick on { sis2 } proto pfsync
> pass on { sis0 sis1 } proto carp keep state
>
>
> However when I physiclly remove the ethernet cable from sis0 on the master,
> the internal machine cannot access the net anymore.
> Do I need to copy the pf.conf from the master to the scondary unit, have them
> both identical????
The way I understand it (someone correct me if I'm wrong), is that if
the slave has no ruleset (or a non identical ruleset), when the master
goes down, the slave will have all the states that the master did, but
packets will not pass unless there are rules that explicitly allow them.
-jon
