carpsettings
0.1.0
Services: CARP Settings
['installedpackages']['carpsettings']['config']
pkg_edit.php?xml=carp_settings.xml&id=0
Virtual IPs
firewall_virtual_ip.php
CARP Settings
pkg_edit.php?xml=carp_settings.xml&id=0
PFSync Enabled
pfsyncenabled
PFSync IP
pfsyncip
PFSync Interface
pfsyncinterface
Synchronize Enabled
pfsyncenabled
PFSync transfers state insertion, update, and deletion messages between firewalls. Each firewall sends these messages out via multicast on a specified interface, using the PFSYNC protocol (IP Protocol 240). It also listens on that interface for similar messages from other firewalls, and imports them into the local state table.
<p>
NOTE: Clicking save will force a configuration sync!
checkbox
Synchronize Interface
pfsyncinterface
interfaces_selection
If Synchronize State is enabled, it will utilize this interface for communication.
<br><b>NOTE:</b> We recommend setting this to a interface other than LAN! A dedicated interface works the best.
<br><b>NOTE:</b> You must define a IP on each machine participating in this failover group.
<br><b>NOTE:</b> You must have an IP assigned to the interface on any participating sync nodes.
pfSync sync peer IP
pfsyncpeerip
input
Setting this option will force pfSync to synchronize its stable tables to this IP address. The default is directed multicast.
Synchronize rules
synchronizerules
When this option is enabled, this system will automatically sync the firewalls rules over to the other carp when changes are made..
checkbox
Synchronize Firewall Schedules
synchronizeschedules
When this option is enabled, this system will automatically sync the firewall schedules over to the other carp host when changes are made.
checkbox
Synchronize aliases
synchronizealiases
When this option is enabled, this system will automatically sync the aliases over to the other carp when changes are made.
checkbox
Synchronize nat
synchronizenat
When this option is enabled, this system will automatically sync the nat rules over to the other carp host when changes are made.
checkbox
Synchronize ipsec
synchronizeipsec
When this option is enabled, this system will automatically sync the ipsec rules over to the other carp host when changes are made.
checkbox
Synchronize Wake on Lan
synchronizewol
When this option is enabled, this system will automatically sync the WOL settings over to the other carp host when changes are made.
checkbox
Synchronize Static Routes
synchronizestaticroutes
When this option is enabled, this system will automatically sync the Static Route settings over to the other carp host when changes are made.
checkbox
Synchronize Load Balancer
synchronizelb
When this option is enabled, this system will automatically sync the Load Balancer settings over to the other carp host when changes are made.
checkbox
Synchronize Virtual IPs
synchronizevirtualip
When this option is enabled, this system will automatically sync the Virtual IP (minus proxyarp) settings over to the other carp host when changes are made.
checkbox
Synchronize traffic shaper
synchronizetrafficshaper
When this option is enabled, this system will automatically sync the traffic shaper rules over to the other carp host when changes are made.
checkbox
Synchronize DNS Forwarder
synchronizednsforwarder
When this option is enabled, this system will automatically sync the DNS Forwarder hosts/domains over to the other carp host when changes are made.
checkbox
Synchronize to IP
synchronizetoip
Enter the IP address of the firewall you would like to synchronize your rules to.
input
Note: CARP sync is currently only supported over http connections - make sure the remote system's WebGUI protocol is set to this! Also note that you will not use the Synchronize to IP and password option on backup cluster members!
Remote System Password
password
Enter the webGUI password of the system that you would like to synchronize with.
password
NOTE: You will not use the Synchronize to IP and password option on backup cluster members!
if($_POST["synchronizetoip"]) {
if(!is_ipaddr($_POST["synchronizetoip"]))
$input_errors[] = "You must specify a valid IP address.";
$ifdescrs = array('lan','wan');
for ($j = 1; isset($config['interfaces']['opt' . $j]); $j++)
$ifdescrs['opt' . $j] = "opt" . $j;
foreach($ifdescrs as $descr)
if($config['interfaces']['$descr']['ipaddr'] == $_POST["synchronizetoip"])
$input_errors[] = "CARP sync IP must be the backup firewall IP! You cannot specify this firewalls IP in this location.";
if($config['virtualip']['vip']) {
foreach($config['virtualip']['vip'] as $vip) {
if($vip['subnet'] == $_POST["synchronizetoip"])
$input_errors[] = "CARP sync IP must be the backup firewall IP! You cannot specify this firewalls IP in this location.";
}
}
$wanip = find_interface_ip(get_real_wan_interface());
if($wanip == $_POST["synchronizetoip"])
$input_errors[] = "CARP sync IP must be the backup firewall IP! You cannot specify this firewalls IP in this location.";
}
/* setup carp interfaces */
interfaces_carp_configure();
interfaces_carp_bring_up_final();
/* force a filter configure for syncing */
filter_configure();