sorry for the delay in responding.
The two firewalls cannot hear each other's CARP announcements. Test
> with tcpdump; do you see the CARP packets coming from the other
> firewall? If not, you have a switching problem, like the two firewalls
> are not in the same VLAN together.
>
> that there wa
Mike Barnard wrote:
>
> FW1 is connected to SW1 and FW2 is connected to SW2. Both SW1 and SW2
> connected to the aggregating switch.
>
> I have configured CARP in failover mode and the interesting thing is both
> firewall carp interfaces come up as master:
>
> FW1:
> carp0: flags=49 metric 0 mtu