From owner-freebsd-stable@FreeBSD.ORG  Tue Jun 14 09:34:33 2011
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id ED726106564A
	for <freebsd-stable@freebsd.org>; Tue, 14 Jun 2011 09:34:33 +0000 (UTC)
	(envelope-from ml@my.gd)
Received: from mail-wy0-f182.google.com (mail-wy0-f182.google.com
	[74.125.82.182])
	by mx1.freebsd.org (Postfix) with ESMTP id 8E7118FC14
	for <freebsd-stable@freebsd.org>; Tue, 14 Jun 2011 09:34:33 +0000 (UTC)
Received: by wyf23 with SMTP id 23so5841623wyf.13
	for <freebsd-stable@freebsd.org>; Tue, 14 Jun 2011 02:34:32 -0700 (PDT)
Received: by 10.227.9.131 with SMTP id l3mr3909102wbl.54.1308042379967;
	Tue, 14 Jun 2011 02:06:19 -0700 (PDT)
Received: from dfleuriot-at-hi-media.com ([83.167.62.196])
	by mx.google.com with ESMTPS id p21sm4864170wbh.57.2011.06.14.02.06.17
	(version=SSLv3 cipher=OTHER); Tue, 14 Jun 2011 02:06:17 -0700 (PDT)
Message-ID: <4DF72488.6050806@my.gd>
Date: Tue, 14 Jun 2011 11:06:16 +0200
From: Damien Fleuriot <ml@my.gd>
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US;
	rv:1.9.2.17) Gecko/20110414 Thunderbird/3.1.10
MIME-Version: 1.0
To: "freebsd-stable@freebsd.org" <freebsd-stable@freebsd.org>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Subject: Networking - CARP interfaces
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 14 Jun 2011 09:34:34 -0000

Hello list,



Here I am today, setting up CARP interfaces on our backup firewalls, and
I'm wondering something...


Let's take the following scenario:


Datacenter PRIM, firewall PRIM:
- carp13 has public IPs X and Y and is master (advskew 100)

Datacenter PRIM, firewall BACK:
- carp13 has public IPs X and Y and is backup (advskew 150)


Datacenter BACK, firewall PRIM:
- carp13 has public IPs X, Y, W and Z (advskew 230, down)

Datacenter BACK, firewall BACK:
- carp13 has public IPs X, Y, W and Z (advskew 250, down)



If I bring up my carp13 interfaces on the backup datacenter, will they
become master because the carp interfaces on the primary datacenter is
lacking 2 public IPs ?

That would be a problem...

Has anyone faced this situation before ?

Also, adding IPs W and Z on my primary datacenter is not an option at
the moment.