diff --git a/group_vars/ns.yml b/group_vars/ns.yml
index 7eab56d..67dd26c 100644
--- a/group_vars/ns.yml
+++ b/group_vars/ns.yml
@@ -7,6 +7,8 @@ firewall_in:
   - {proto: tcp, port: 443}
   - {proto: tcp, port: 853}
   - {proto: tcp, port: 4949, from: [172.20.20.0/22, 81.175.130.44/32]}
+firewall_raw:
+  - pass quick proto carp
 
 ifstated_config: ifstated-ns.conf
 network_vip_interfaces: