Hi, I have exactly the same problem explained below (except with FreeBSD 8.2RC3). I lost a lot of packets on the carp interface.
I tested with a point-to-point attachment and there is no problem... Now that I know that the problem must comes from the switch, how can I solve it ? Is there a workaround on the FreeBSD side ? May my switch be misconfigured or bugged (I have tested with HP Procurve switches 1800 and 2910al) ? I'd greatly appreciate your help to solve this issue. Thanks a lot, Mickaël > Hi, > > Just to close this thread - I've confirmed that it was indeed a switch > problem. > > The "funny" thing, is howcome only CARP triggered it. > > > On Thu, October 18, 2007 9:33, Klavs Klavsen said: > > Hi guys, > > > > I have had a FreeBSD 6.2 (-p1 - yes I know :) firewall running for a > > while, with pf fw rules. It has worked fine, and was a replacement > > for a > > > fbsd 4.x ipfw firewall. > > > > > Now I just replaced the 6.2 pf firewall, with a 6.2 (-p7) and carp > > interfaces enabled. It's using the same cables and the same type of > > network cards (bge and em). The new one, is a HP dl385 (amd) where > the old > > one, was a HP dl380 (Intel). > > > > On the new one, fping (and ping -f) pinging through the firewall, > gives me > > a packet loss. fping in nagios, reports up to 55% packet loss :( - a > ping > > > -f gives me 1-3%, but bad enough :( > > > > pinging from the firewall itself, to one of the hosts, that packets > are > > lost to (when pinging from other networks) does not give any packet > loss. > > > > The old 6.2, had polling enabled - and I've tried to disable polling > on > > the new, but to no effect. > > > > Any ideas what else to try? > > > > -- > > Regards, > > Klavs Klavsen, GSEC - kl at vsen.dk - http://www.vsen.dk > > > PGP: 7E063C62/2873 188C 968E 600D D8F8 B8DA 3D3A 0B79 7E06 3C62 > > > > "Those who do not understand Unix are condemned to reinvent it, > poorly." > > --Henry Spencer > > > > _______________________________________________ > > freebsd-net at freebsd.org mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-net > > To unsubscribe, send any mail to "freebsd-net-unsubscribe at > freebsd.org" > > -- Regards, Klavs Klavsen, GSEC - kl at vsen.dk - http://www.vsen.dk PGP: 7E063C62/2873 188C 968E 600D D8F8 B8DA 3D3A 0B79 7E06 3C62 "Those who do not understand Unix are condemned to reinvent it, poorly." --Henry Spencer
signature.asc
Description: This is a digitally signed message part