The following recipe is the most involved recipe in this book; nonetheless, if you follow these steps painstakingly, setting up a CARP failover group should prove to be fairly easy.
The following diagram illustrates the new network topology. The fxp0 represents the WAN interface, fxp2 the LAN interface, and fxp1 the pfsync network:
As a preliminary step, the WAN interfaces of both firewalls should be connected to the router mentioned in the previous section. The upstream gateway of the new router should be your ISP:
- We will begin by configuring the virtual IP addresses we need for a CARP group:
- Navigate to Firewall | Virtual ...
