High Availability gateway trigger fix for site to site VPN

rbicelli / pfsense-zabbix-template

Zabbix Template for pfSense

Apache License 2.0

238 stars 107 forks source link

High Availability gateway trigger fix for site to site VPN #178

Open npr-gh opened 2 months ago

npr-gh commented 2 months ago

When high availability is used, the gateway on the CARP slave on an openVPN connection is unreachable.

The trigger for high packet loss will fire, but this is normal.

I added the ability for the script to track which connection belongs to which gateway, and an extra condition to this trigger. The trigger will not fire if:

The pfSense is in CARP slave mode,
The interface's name starts with 'ovpns' (via regex).

rbicelli commented 1 month ago

I'm sorry but I'm not experiencing such behavior. Do you set the proper outbound NAT rules for VPN on secondary? gateway should be accessible from secondary no matter what.