On the LAN side, each accessible LAN interface requires both:
* A shared CARP IP, that switches back and forth (I use *.1)
* A unique IP for that interface (I use *.2 for primary and *.3 for secondary)
Since pfSense supplies DHCP and local DNS, that's pretty easy.
On the WAN side,
a) it's...