Product ManualXG-7100-1U
2.5 Troubleshooting High Availability
In the event that any of the testing fails (Testing High Availability), there are a few common things to check.
2.5.1 Review the Configuration
Before digging too deep into the technical details below, first review the configuration and ensure all steps were
followed accurately.
2.5.2 Troubleshooting CARP
Check Interface Status
If an interface shows “INIT” for the CARP state, as shown in CARP Status on Primary with Disconnected Interface,
most commonly this indicates that the interface upon which this VIP resides is not connected to anything. If there is
no link to a switch or another port, the interface is down and the VIP cannot be fully initialized. If the NIC is plugged
in and appears to have a link when this occurs, edit, save, and apply changes for the VIP in question to reconfigure it.
Fig. 8: CARP Status on Primary with Disconnected Interface
Conflicting VHIDs
The VHID determines the virtual MAC address used by that CARP IP. The input validation in pfSense will not permit
using conflicting VHIDs on a single pair of systems, however if there are multiple systems on the same broadcast
domain running CARP, it is possible to create a conflict. VRRP also uses the same virtual MAC address scheme, so a
VRRP IP using the same VRID as a CARP IP VHID will also generate the same MAC address conflict.
When using CARP on the WAN interface, this also means VRRP or CARP used by the ISP can also conflict. Be sure
to use VHIDs that are not in use by the ISP on that broadcast domain.
In addition to creating a MAC conflict which can interfere with traffic, it can also interfere with the CARP VIP status.
Incorrect Subnet Mask
The subnet mask for a CARP VIP must match the subnet mask on the Interface IP address for the same subnet. For
example, if an interface IP address is 192.168.1.2/24, the CARP VIP must also be 192.168.1.1/24.
2.5. Troubleshooting High Availability 61
To Next Page
Loading...
