This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Virtual-Cluster-IP cant be reached but should be

Hi,

today i wanted to modify our backup solution for our Postgres-Cluster (Hot-Standby-Master-Cluster) which uses a virtual ip that is managed by pacemaker and assigned to either of those two servers interfaces.

On the other side i have the firewall which allows connections to PG (tcp/5432) and this virtual ip but everytime i try to connect, the firewall drops the packages. when i change the virtual ip to the normal ip of the master it works.

Another point is, that the connections come from a site-2-site IPSec VPN from the Office but its allowed on all gateways and only the firewall directly before this virtual ip drops the connection but allows it when using the normal interface IP

Can someone help me find the issue here?
We are using the UTM 9.1


This thread was automatically locked due to age.
Parents
  • Which interface is connected to the PGSQL cluster, and what Address is on the interface?  What Broadcast address is associated to 10.1.30.5 on the PGSQL device?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Which interface is connected to the PGSQL cluster, and what Address is on the interface?  What Broadcast address is associated to 10.1.30.5 on the PGSQL device?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data