Vezpi/Blog
1
0
Fork 0
Code Issues 2 Pull Requests Actions Wiki Activity

Auto-update blog content from Obsidian: 2025-10-22 19:25:53
All checks were successful
Blog Deployment / Check-Rebuild (push) Successful in 6s
Details
Blog Deployment / Build (push) Has been skipped
Details
Blog Deployment / Deploy-Staging (push) Successful in 10s
Details
Blog Deployment / Test-Staging (push) Successful in 2s
Details
Blog Deployment / Merge (push) Successful in 7s
Details
Blog Deployment / Deploy-Production (push) Successful in 10s
Details
Blog Deployment / Test-Production (push) Successful in 2s
Details
Blog Deployment / Clean (push) Has been skipped
Details
Blog Deployment / Notify (push) Successful in 2s
Details

Browse Source
This commit is contained in:
Gitea Actions
2025-10-22 19:25:53 +00:00
parent f9d1260a28
commit 3247e5871c
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
content/post/13-opnsense-full-configuration.md
View File

@@ -157,7 +157,10 @@ From `Firewall` > `Rules` > `pfSync`, I create a new rule on each firewall:
### Configure HA ### Configure HA
The high availability in OPNsense is done at two main layers. The first is the firewall state layer, the synchronization is permanent. The second layer is the configuration (XMLRPC Sync). This part is not automatically sync The high availability in OPNsense is done at two main layers. The first layer is the firewall state, the synchronization is permanent. The second layer is the configuration (XMLRPC Sync). This part is not automatically synchronized and must be done only from the master to backup.
The
#### Master
Next, I head to `System` > `High Availability` > `Settings`: Next, I head to `System` > `High Availability` > `Settings`:
- **Master** (`cerbere-head1`): - **Master** (`cerbere-head1`):
- **General Settings** - **General Settings**
@@ -169,7 +172,7 @@ Next, I head to `System` > `High Availability` > `Settings`:
- **Remote System Password**: `<password>` - **Remote System Password**: `<password>`
- **Services to synchronize (XMLRPC Sync)** - **Services to synchronize (XMLRPC Sync)**
- **Services**: Select All - **Services**: Select All
- **Backup** (`cerbere-head2`): #### Backup (`cerbere-head2`):
- **Synchronize all states via**: *pfSync* - **Synchronize all states via**: *pfSync*
- **Synchronize Peer IP**: `192.168.44.1`, the master node IP - **Synchronize Peer IP**: `192.168.44.1`, the master node IP
⚠️ Do not fill the XMLRPC Sync fields on the backup node, only to be filled on the master. ⚠️ Do not fill the XMLRPC Sync fields on the backup node, only to be filled on the master.