--On Monday, April 04, 2016 12:26:06 AM +0300 Mihai Popescu
<mih...@gmail.com> wrote:
However, if carp IS in use, I can see the upstream router do the arp
request, followed by the firewall arp reply (with the carp MAC),
Is it the 'carp MAC' the MAC of vr2?
No. It is the lladdr shown in a `ifconfig carp2`, which would be
00:00:5e:00:01:03. The lladdr of vr2 (the underlying carpdev) is
different.
however the upstream router seems to ignore the answer and does
continuous arp requests.
Maybe that router is not receiving the arp response. Why would someone
ignore an ARP message?
Indeed. It's not clear why the arp replies are honoured in the non-carp
case but not in the carp case.
Devin
