Thanks again, I appreciate the info and help, especially the bit about the alias addresses not meant for routing, I did not know that.
You are correct though, its basically a 2 node carp cluster with identical setups. I'm just having difficulties load balancing the 2 Internet connections from the firewall node itself. I can do it successfully with traffic from the LAN via a route-to rule in pf...but again...that's not exactly making use of ECMP, and I would be fine with that...but I just can't seem to figure out how to write a similar set of rules to do the same kind of load balancing for traffic originating from the firewall itself (ie, to download ports or packages or even general diagnostic traffic to the Internet).
But thanks again for the help...I really appreciate it.
|