pfSense

If you have a CARP pair and unplug/kill LAN, the VIPs do not all fail over to the slave unit. Only the VIPs on the failed interface switch.

Example, a VMware CARP team starts out with:

• Primary:
  • WAN: Master
  • LAN: Master
• Secondary:
  • WAN: Backup
  • LAN: Backup

CARP sysctls (same on both):
net.inet.ip.same_prefix_carp_only: 0
net.inet.carp.allow: 1
net.inet.carp.preempt: 1
net.inet.carp.log: 1
net.inet.carp.arpbalance: 0
net.inet.carp.suppress_preempt: 0
net.link.ether.inet.carp_mac: 0

Then disconnect the LAN interface and you get:

• Primary:
  • WAN: Master
  • LAN: Init
• Secondary:
  • WAN: Backup
  • LAN: Master

Master sysctl values:
net.inet.ip.same_prefix_carp_only: 0
net.inet.carp.allow: 1
net.inet.carp.preempt: 1
net.inet.carp.log: 1
net.inet.carp.arpbalance: 0
net.inet.carp.suppress_preempt: 1
net.link.ether.inet.carp_mac: 0

Slave:
net.inet.ip.same_prefix_carp_only: 0
net.inet.carp.allow: 1
net.inet.carp.preempt: 1
net.inet.carp.log: 1
net.inet.carp.arpbalance: 0
net.inet.carp.suppress_preempt: 0
net.link.ether.inet.carp_mac: 0