Re: carp/pfsync-problem: carp states stuck in "INIT" on boot on both machines but work correctly if called manually via /etc/netstart

2015-10-02 Thread Andre Ruppert
...I don't believe it... I ssh'd all the time to the gateways and never had a look to the bootmessages 2x "ifconfig invalid argument" was the hint at boot. The fault (syntax typo?) was included in hostname.carp[0,1] - "\" for a 2-liner didn't work... despite the usage of blanks only.

Re: Carp/Pfsync problem

2006-07-31 Thread Tim Pushor
Kian Mohageri wrote: On 7/31/06, Tim Pushor <[EMAIL PROTECTED]> wrote: Sorry to bump this thread, but I'd really like to know how to troubleshoot something like this. I'd suggest tcpdump'ing at the point when the connection fails, on the pflog(4) interface of both machines, especially

Re: Carp/Pfsync problem

2006-07-31 Thread Kian Mohageri
On 7/31/06, Tim Pushor <[EMAIL PROTECTED]> wrote: > > Sorry to bump this thread, but I'd really like to know how to > troubleshoot something like this. I'd suggest tcpdump'ing at the point when the connection fails, on the pflog(4) interface of both machines, especially the backup which is appar

Re: Carp/Pfsync problem

2006-07-31 Thread Tim Pushor
Sorry to bump this thread, but I'd really like to know how to troubleshoot something like this. Should this work? Should I expect the firewall to fail over a TCP session? I'm thinking yes, since it does what its supposed to when shutting down the active firewall mid-stream, but not when I pull

Re: Carp/Pfsync problem

2006-07-20 Thread Stuart Henderson
On 2006/07/20 20:32, Ashley Moran wrote: > You don't need a new carp interface for every IP if they use the same > carpdev, you can add the others as aliases (that definitely works for > IPs in the same subnet, and I'm pretty sure it will work for IPs in > different subnets too). It makes th

Re: Carp/Pfsync problem

2006-07-20 Thread Ashley Moran
On Sep 20, 2006, at 7:18 pm, Tim Pushor wrote: As for the multiple carp addresses - This is in a lab environment but will end up protecting a rack of machines in a colo. I'm planning on having a carp address for each external address that's required (not many - maybe 4-5 eventually). Tim

Re: Carp/Pfsync problem

2006-07-20 Thread Tim Pushor
Thanks Kian, That didn't have an effect. I suspected that it woudn't as I am getting state information, and ifconfig listed fxp0 as the syncdev even though I had syncif in the hostname file. As for the multiple carp addresses - This is in a lab environment but will end up protecting a rack o

Re: Carp/Pfsync problem

2006-07-20 Thread Kian Mohageri
Change 'syncif' to 'syncdev' in your hostname.pfsync files. Also, out of curiosity, why are there two CARP addresses between the workstation and firewalls? Kian On 9/20/06, Tim Pushor <[EMAIL PROTECTED]> wrote: > > Hi friends, > > I am trying to setup my first firewall w/failover via carp & pfsy