On 30/12/2009 01:35, kevin wrote: >> -----Original Message----- >> From: Tom Judge >> Sent: Wednesday, December 16, 2009 1:20 PM >> To: Kevin >> Cc: freebsd-pf@freebsd.org >> Subject: Re: PF Transparent Bridge Firewall + CARP >> >> [router] >> | >> [------switch 1------] >> | | >> [FW1]--{pfsync}--[FW2] >> | | >> [------switch 2------] >> | >> [clients] >> > > I have a really stupid question. If I have a switch with 2 VLANS (one DMZ / > 'outside', one internal / 'lan') and two firewalls with transparent bridging > + PF , filtering all inbound/outbound traffic -- would I even need CARP? Is > CARP overkill? > > I'm thinking in a disaster recovery scenario -- if one firewall blows up. > There's no logical master/slave relationship, but wouldn't there be minimal > (if any) downtime? > > You don't need carp here if your firewalls are bridges. Your main issue is that you only have one switch, the simplest redundant solution is 2 bridges running spanning tree.
Tom _______________________________________________ freebsd-pf@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "freebsd-pf-unsubscr...@freebsd.org"