On Mon, Mar 21, 2011 at 10:27 PM, Kapetanakis Giannis <bil...@edu.physics.uoc.gr> wrote: > Hi, > > I'm testing a new setup of a pair of firewalls (master/backup) using carp, > pfsync etc. > > Can I use ifstated to monitor virtual interfaces like pfsync0 and enc0? > > I want the master after it reboots (if backup is up) to wait for pfsync0 > interface to come up, get the missing states from backup firewall and only > then advskew carp. This is because pfsync runs on ipsec, which sometimes > takes about 2 minutes to become operational (at least on some of my tests).
Are you running sasyncd as well? > > thanx > > Giannis
