Hi Guys,
Currently set things up with CARP here.. I got two machines, supposed to
be doing IP load balancing when I setup them to be like this,
NET-B----CARP Machines----NET-A
________ _________ ________
| | __|Machine A|__ | |
| NET-B | | |_________| | | NET-A |
| |______| |Machine B| |_____| |
|________| |__|_________|_| |________|
and there Layer 2 cisco 3524 switch and 2948 switch between them. So, I
setup pf to pass everything in/out. The machine it self is a 4.2 -current,
just compiled last night.
So, I boot the machines.. tried them on, ping form net A to net B.. it
works. But, when I intentionaly shutdown the master, carp stop
forwarding/routing, no fail-over, the ping between net-B and net-B just
frezee. Is there something wrong with the config? this is the pf.conf on
both machines
ext_if="em0"
int_if0="vlan2"
int_if1="vlan22"
int_if2="em1"
int_if3="em2"
sync_if="rl0"
#table <spamd-white> persist
set skip on {lo $sync_if}
set ruleset-optimization basic
set optimization aggressive
scrub in
#nat-anchor "ftp-proxy/*"
#rdr-anchor "ftp-proxy/*"
#nat on $ext_if from !($ext_if) -> ($ext_if:0)
#rdr pass on $int_if proto tcp to port ftp -> 127.0.0.1 port 8021
#no rdr on $ext_if proto tcp from <spamd-white> to any port smtp
#rdr pass on $ext_if proto tcp from any to any port smtp \
# -> 127.0.0.1 port spamd
#anchor "ftp-proxy/*"
block in
pass out
#pass quick on $int_if no state
pass in on $sync_if all no state
pass in on {$int_if0 $int_if1 $int_if2 $int_if3} all
pass in on $ext_if all
antispoof quick for { lo }
#pass in on $ext_if proto tcp to ($ext_if) port ssh
#pass in log on $ext_if proto tcp to ($ext_if) port smtp
#pass out log on $ext_if proto tcp from ($ext_if) to port smtp
The Bridge Table on cat 2948G-L3:
GREENDISTRO#sh bridge 22
Total of 300 station blocks, 212 free
Codes: P - permanent, S - self
Bridge Group 22:
Address Action Interface
0000.5e00.0104 forward Fa37.22
0015.1725.0a9d forward Fa37.22
Bridge Group 2:
Address Action Interface
0000.5e00.0102 forward Fa37.2
0015.1725.0a9e forward Fa37.2
The ifconfig:
Machine A#
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 33168
groups: lo
inet 127.0.0.1 netmask 0xff000000
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x6
em0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:15:17:25:0a:9d
description: CARPdev0
media: Ethernet autoselect (100baseTX full-duplex)
status: active
inet6 fe80::215:17ff:fe25:a9d%em0 prefixlen 64 scopeid 0x1
inet 10.10.12.254 netmask 0xffffff00 broadcast 10.10.12.255
rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:80:48:1f:75:53
description: SYNCDEV
groups: egress
media: Ethernet autoselect (100baseTX full-duplex)
status: active
inet6 fe80::280:48ff:fe1f:7553%rl0 prefixlen 64 scopeid 0x2
inet 10.10.10.254 netmask 0xffffff00 broadcast 10.10.10.255
em1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:07:e9:0f:44:ac
description: CARPdev1
media: Ethernet autoselect (1000baseT full-duplex,rxpause,txpause)
status: active
inet6 fe80::207:e9ff:fe0f:44ac%em1 prefixlen 64 scopeid 0x3
em2: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:15:17:25:0a:9e
media: Ethernet autoselect (100baseTX full-duplex)
status: active
inet6 fe80::215:17ff:fe25:a9e%em2 prefixlen 64 scopeid 0x4
enc0: flags=0<> mtu 1536
vlan112: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:15:17:25:0a:9e
vlan: 112 priority: 0 parent interface: em2
groups: vlan
inet6 fe80::215:17ff:fe25:a9e%vlan112 prefixlen 64 scopeid 0x7
vlan122: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:15:17:25:0a:9d
vlan: 122 priority: 0 parent interface: em0
groups: vlan
inet6 fe80::215:17ff:fe25:a9d%vlan122 prefixlen 64 scopeid 0x8
vlan2: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:15:17:25:0a:9e
vlan: 2 priority: 0 parent interface: em2
groups: vlan
inet6 fe80::215:17ff:fe25:a9e%vlan2 prefixlen 64 scopeid 0x9
vlan22: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:15:17:25:0a:9d
vlan: 22 priority: 0 parent interface: em0
groups: vlan
inet6 fe80::215:17ff:fe25:a9d%vlan22 prefixlen 64 scopeid 0xa
pfsync0: flags=41<UP,RUNNING> mtu 1460
pfsync: syncdev: rl0 syncpeer: 10.10.10.253 maxupd: 128
groups: carp pfsync
pflog0: flags=141<UP,RUNNING,PROMISC> mtu 33168
groups: pflog
carp0: flags=b843<UP,BROADCAST,RUNNING,SIMPLEX,LINK0,LINK1,MULTICAST> mtu
1500
lladdr 00:00:5e:00:01:01
carp: MASTER carpdev vlan2 vhid 1 advbase 1 advskew 0
groups: carp
inet6 fe80::200:5eff:fe00:101%carp0 prefixlen 64 scopeid 0xc
inet 202.149.93.12 netmask 0xfffffff0 broadcast 202.149.93.15
carp1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:00:5e:00:01:02
carp: BACKUP carpdev vlan2 vhid 2 advbase 1 advskew 100
groups: carp
inet6 fe80::200:5eff:fe00:102%carp1 prefixlen 64 scopeid 0xd
inet 202.149.93.12 netmask 0xfffffff0 broadcast 202.149.93.15
carp2: flags=b843<UP,BROADCAST,RUNNING,SIMPLEX,LINK0,LINK1,MULTICAST> mtu
1500
lladdr 00:00:5e:00:01:03
carp: MASTER carpdev vlan22 vhid 3 advbase 1 advskew 0
groups: carp
inet6 fe80::200:5eff:fe00:103%carp2 prefixlen 64 scopeid 0xe
inet 202.149.93.97 netmask 0xfffffff0 broadcast 202.149.93.111
carp3: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:00:5e:00:01:04
carp: BACKUP carpdev vlan22 vhid 4 advbase 1 advskew 100
groups: carp
inet6 fe80::200:5eff:fe00:104%carp3 prefixlen 64 scopeid 0xf
inet 202.149.93.97 netmask 0xfffffff0 broadcast 202.149.93.111
Machine B#
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 33168
groups: lo
inet 127.0.0.1 netmask 0xff000000
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x6
em0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:13:20:d6:de:f5
description: CARPdev0
media: Ethernet autoselect (100baseTX full-duplex)
status: active
inet6 fe80::213:20ff:fed6:def5%em0 prefixlen 64 scopeid 0x1
rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:0e:2e:89:e2:7d
description: SYNC_DEV
groups: egress
media: Ethernet autoselect (100baseTX full-duplex)
status: active
inet6 fe80::20e:2eff:fe89:e27d%rl0 prefixlen 64 scopeid 0x2
inet 10.10.10.253 netmask 0xffffff00 broadcast 10.10.10.255
em1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:07:e9:0f:44:e3
description: CARPdev1
media: Ethernet autoselect (1000baseT
full-duplex,master,rxpause,txpause
)
status: active
inet6 fe80::207:e9ff:fe0f:44e3%em1 prefixlen 64 scopeid 0x3
em2: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:13:20:d6:de:f6
media: Ethernet autoselect (100baseTX full-duplex)
status: active
inet6 fe80::213:20ff:fed6:def6%em2 prefixlen 64 scopeid 0x4
enc0: flags=0<> mtu 1536
vlan2: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:13:20:d6:de:f6
vlan: 2 priority: 0 parent interface: em2
groups: vlan
inet6 fe80::213:20ff:fed6:def6%vlan2 prefixlen 64 scopeid 0x7
vlan22: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:13:20:d6:de:f5
vlan: 22 priority: 0 parent interface: em0
groups: vlan
inet6 fe80::213:20ff:fed6:def5%vlan22 prefixlen 64 scopeid 0x8
pfsync0: flags=41<UP,RUNNING> mtu 1460
pfsync: syncdev: rl0 syncpeer: 10.10.10.254 maxupd: 128
groups: carp pfsync
pflog0: flags=141<UP,RUNNING,PROMISC> mtu 33168
groups: pflog
carp0: flags=b843<UP,BROADCAST,RUNNING,SIMPLEX,LINK0,LINK1,MULTICAST> mtu
1500
lladdr 00:00:5e:00:01:01
carp: BACKUP carpdev vlan2 vhid 1 advbase 1 advskew 100
groups: carp
inet6 fe80::200:5eff:fe00:101%carp0 prefixlen 64 scopeid 0xa
inet 202.149.93.12 netmask 0xfffffff0 broadcast 202.149.93.15
carp1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:00:5e:00:01:02
carp: MASTER carpdev vlan2 vhid 2 advbase 1 advskew 0
groups: carp
inet6 fe80::200:5eff:fe00:102%carp1 prefixlen 64 scopeid 0xb
inet 202.149.93.12 netmask 0xfffffff0 broadcast 202.149.93.15
carp2: flags=b843<UP,BROADCAST,RUNNING,SIMPLEX,LINK0,LINK1,MULTICAST> mtu
1500
lladdr 00:00:5e:00:01:03
carp: BACKUP carpdev vlan22 vhid 3 advbase 1 advskew 100
groups: carp
inet6 fe80::200:5eff:fe00:103%carp2 prefixlen 64 scopeid 0xc
inet 202.149.93.97 netmask 0xfffffff0 broadcast 202.149.93.111
carp3: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:00:5e:00:01:04
carp: MASTER carpdev vlan22 vhid 4 advbase 1 advskew 0
groups: carp
inet6 fe80::200:5eff:fe00:104%carp3 prefixlen 64 scopeid 0xd
inet 202.149.93.97 netmask 0xfffffff0 broadcast 202.149.93.111
Well, that's all, I hope one of you experts could give me a hint/clue to
SOLVED this,
Thanks,
--
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/
