Hi,

I'm a bit confused on setting appropriate netmask on carp interface when the carpdev has an IP address.

Till yesterday (following http://openbsd.org/faq/pf/carp.html#failover) my carp interfaces had the same netmask as the carpdev interfaces:
em1:
   (no inet adddress)

vlanXX:
   vlan: 102 priority: 0 parent interface: em1
   inet xxx.xxx.xxx.18 netmask 0xfffffff8 broadcast xxx.xxx.xxx.23

carp0:
   carp: MASTER carpdev vlanXX
   inet xxx.xxx.xxx.20 netmask 0xfffffff8 broadcast xxx.xxx.xxx.23

I've read this from Henning http://marc.info/?l=openbsd-misc&m=123464537104366&w=2
so I tried to switch to /32 netmask on the carp interfaces
# ifconfig carp0 xxx.xxx.xxx.20/32

But now I get

Nov 21 11:45:09 fw /bsd: carp0: state transition: BACKUP -> MASTER
Nov 21 11:45:09 fw /bsd: arp_rtrequest: bad gateway value
Nov 21 11:45:10 fw /bsd: carp1: state transition: BACKUP -> MASTER
Nov 21 11:45:10 fw /bsd: arp_rtrequest: bad gateway value

every time the state changes on each firewall. Apart from this I don't see any other problem.

Is this normal behavior? Should I change back to the /29 netmask?

regards,

Giannis

Reply via email to