CARP configuration

Whereas pfSense's load balancing capabilities may leave something to be desired, pfSense's high availability capabilities are quite good, and pfSense offers an enterprise class CARP solution that provides for stateful failover. We will first consider a basic CARP group for firewall failover, but we will also consider other scenarios involving CARP, such as multi-WAN deployments.

CARP with firewall failover

This is probably the most common deployment scenario in which CARP is involved. The most common scenario involves a two firewall failover group with a dedicated pfsync interface on each and both pfsync interfaces connected with a crossover cable. Setting up a CARP failover group involves several steps:

  1. Configuration of virtual ...

Get Mastering pfSense now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.