From owner-freebsd-net@FreeBSD.ORG Wed Feb 2 08:50:16 2011 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5A736106566C for ; Wed, 2 Feb 2011 08:50:16 +0000 (UTC) (envelope-from mike.barnardq@gmail.com) Received: from mail-yw0-f54.google.com (mail-yw0-f54.google.com [209.85.213.54]) by mx1.freebsd.org (Postfix) with ESMTP id 155BB8FC0A for ; Wed, 2 Feb 2011 08:50:15 +0000 (UTC) Received: by ywp6 with SMTP id 6so3043397ywp.13 for ; Wed, 02 Feb 2011 00:50:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:date :message-id:subject:from:to:content-type; bh=3l8ukaLKg9djexEjBpDD2WviLP1hUrRjynzCt1iE+a0=; b=hJWNZ8fKkRU26OOcOuiLBwaGTOYvFVlUZ5L3kENsqpX3EDQ/AANL0gn8CuXY3BkIor yPJRHsMCxaxMWunQNvAtzACcswpQJhUy5xE/SwYDXyV6w4305MEOic7qiTXAjWzW9X4Y kVfq2jEy6I28Nsy2/QwP6EbVUadwPdpDXxGFQ= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=wo6YeghsjPpHMys0GaLSpZnWiwvVYMPpG6fLchXNH0DMUl7ZWDPmCtdkcVHUoz4Xzj ZBLPPX//gHIb245A/qbp7SpUTpXjVV8/YVtvDiSnvGjbMc+XDyCFYBKJpcW5KAlX8ZxV REOyyA2owLvhOiGkxtKL4bykuRitO2pu8ZKTo= MIME-Version: 1.0 Received: by 10.100.215.12 with SMTP id n12mr5601935ang.191.1296636615103; Wed, 02 Feb 2011 00:50:15 -0800 (PST) Received: by 10.100.116.7 with HTTP; Wed, 2 Feb 2011 00:50:15 -0800 (PST) In-Reply-To: <20110128173921.GY316@verio.net> References: <20110128173921.GY316@verio.net> Date: Wed, 2 Feb 2011 11:50:15 +0300 Message-ID: From: Mike Barnard To: freebsd-net@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: Re: CARP Failover X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Feb 2011 08:50:16 -0000 sorry for the delay in responding. The two firewalls cannot hear each other's CARP announcements. Test > with tcpdump; do you see the CARP packets coming from the other > firewall? If not, you have a switching problem, like the two firewalls > are not in the same VLAN together. > > that there was the problem. The interfaces on the different nodes were not in the same vlan. -- Mike Of course, you might discount this possibility, but remember that one in a million chances happen 99% of the time. ------------------------------------------------------------