This setting is only valid for pfSense 1.2.X configuration using routing instead of NAT like explained in this post. A version for pfSense 2.0 can be foundhere.
Fail-over IPs are IPs that you can assign to any host server you have with OVH. When the host fails, assign the IP to another host running the same service. This allow to guarantee continuity of the service !
The setting is very easy ! Remember my network schema I use for testing :
I will add a fail-over IP 192.168.168.2 to my WEB server running in 10.0.0.2 on the left. I just have to add one static route definition like this :
Then I update firewall rules to handle this new address, but I have two ways :
I create a webserver host alias and assign it both addresses : 10.0.0.2 and 192.168.168.2.
Then I use the name webserver instead of IP 10.0.0.2 in all my firewall rules :
Don't forget to add the new IP to your host
That's it
You will ask why I don't need to add a Virtual IP proxy ARP definition ! You are right we need one ! But I thing adding a route to one single host also create the proxy ARP inside the system itself. Linux is doing thing like that too. If you are scared you can add Virtual IP if you want.
Add new comment