|
OpenBSD General Other questions regarding OpenBSD which do not fit in any of the categories below. |
|
Thread Tools | Display Modes |
|
|||
CARP interface with DHClient
Hello,
I would like to setup an HA firewall cluster with OpenBSD. My ISP give IP addresses through DHCP. In this way, I would use DHClient for the CARP interface on my two firewalls. Does this solution work ? Or could you propose to me an other way ? Thank's for your comments. Xinform3n from Switzerland. |
|
|||
I, too, have wrestled with how to create such a configuration.
The solution I resigned to use was to put a NAT-enabled router in front with the CARP'ed cluster with its external (egress) interface set to accept a DHCP address & the internal (ingress) interface set to whatever private RFC 1918 address chosen. |
|
|||
Quote:
Okay, this solution will probably work for me too but it doesn't satisfy me. If CARP with DHClient couldn't work, I will search a workaround directely on OpenBSD (maybe ifstated, etc...). (another idea ?) In last resort, I will discontinue my Firewall Clustering projet :'( Thanks |
|
||||
I've not played with CARP together with DHCP, so I can't vouch for this method:
http://bsdstuff.googlepages.com/dhcarp Even if it is not directly usable, it may spark some ideas for you. |
|
|||
Hi jggimi,
Thanks for the great link. This could be a nice workaround. I will try this in the coming weeks (depends of my workload) and I will give You a feedback. |
|
|||
Hi,
I'm a little player... :'( I've got added a Cisco 2600 router in front on my CARP'ed cluster. So, I follow the OCICAT way's. Thanks ! |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
carp configuration | ohhcarp | OpenBSD General | 3 | 16th April 2009 10:50 PM |
dhclient at startup | bsdnewbie999 | OpenBSD General | 3 | 31st March 2009 03:55 AM |
dhclient.conf: multiple fixed-address statements | xiphias | FreeBSD General | 14 | 19th June 2008 06:42 AM |
dhclient iwi0 "Could not read iwi-bss' error | FreeMan | OpenBSD General | 2 | 15th May 2008 08:01 PM |