Jon Hart wrote: > On Thu, Nov 10, 2005 at 09:31:15PM -0500, Nick Holland wrote: >> I'd have prefered that a more experienced person answer this one, but >> they don't seem to have, so be forewarned: everything I say here might >> be wrong. However, through the glory of mail lists, if I say something >> wrong, fifty people will jump all over me, and Google will put it at the >> top of the list when people google for my name. :) > > Consider it done!
1 down, 49 left...Oh, there's Henning, 48 left... To the top of google we go! :) >> > I set up two OpenBSD 3.7 -stable firewalls using carp. Everything works >> > except preemption. >> > >> > When only one interface on the master side fails (pull the Cable) the >> > regarding carp0 interface on the backup side becomes master. But not >> > carp1. >> >> Right. Nothing's wrong with the master carp1, why should it demote >> itself and have the backup take over? > > Because that is what preemption is supposed to do. When one interface > on the carp master goes into BACKUP state (or is it any state that is > not MASTER?), the others should become BACKUPs too. My experience is > *sometimes* this is not instantaneous. At a minimum, the advskew should > change and they should become BACKUPs in short order. yes. I missed/forgot a major function of preemption, obviously. ... > Yes, you *can* do this with ifstated, but I'm not sure how recommended > it is. I think the stock example that comes with ifstated is going down > this path, but I'm not 100% sure. > > My suggestion would be to see that the advskew changes on the other carp > interfaces when carp0 becomes a backup. If they do, that means > preemption is definitely turned on and should work. so, why didn't you answer the OP earlier? I left you guys 15 hours! :) ok, a few other ideas... are all the interfaces really in the carp group? are the interfaces accurately and reliably detecting the cable-unplug? Might some NICs (or their drivers) have trouble detecting that the cable was suddenly unplugged, and thus, the change in advskew doesn't take place? maybe I should shut up and go to bed before I make myself look even sillier? :) Nick.