Re: bridge and carp

[Harald Dunkel]

Marco Fretz wrote:

Bridges are layer 2, carp is layer 3 (it shares IP addresses). So carp
can not handle this by its nature I think. Just place the both bridges

in your LAN and you have your fail-over solution.

Packet Filter still does stateful inspection, even in bridging mode,
AFAIK. So both firewall hosts should be connected via pfsync on a
dedicated interface using a cross-over cable. No need to assign an
IP address, i.e. the firewall bridge is still transparent.


Regards

Harri