Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have 2 OpenBSD computers set up as firewalls between my network and the Internet. On the local network, fw1 has IP, and fw2 has IP, and they share using CARP. On the WAN, they have IPs and, and share (the real IP is a public IP). I have it set up like this in order to save public IPs; I don't have enough to give each firewall its own IP and use CARP on a third.

However, CARP doesn't seem to be working right. When I demote fw1, the internal CARP device switches to backup mode. However, the external interface stays in master mode. Oddly, fw2 also goes to master mode when I demote fw1, so there are 2 masters.

Any idea why that interface doesn't go to backup mode?

share|improve this question
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.