On Aug 1, 2006, at 6:52 PM, Tim Pushor wrote:
I have two boxes, with 3 interfaces total each. One interface goes
to the other box for pfsync. That leaves 2 interfaces each. One
interface will go to Ethernet switch 1, and one will go to Ethernet
switch 2. Each interface will be split into 2 vlans, an internal
and an external. Now I can team these vlan's together for redundancy.
Perhaps I am thinking about this wrong .. Are you suggesting that I
create a team of physical nics (using trunk(4)), then run vlans
over that?
Yes, I realize that trunk is used to refer to more than one thing.
I have always thought of it though as teaming, but calling it trunk
(4) as thats how it is documented in OpenBSD.
On the one hand, I think you're over-engineering. Theoretically, you
could indeed create a trunk0 composed of the two interfaces, then use
vlan(4) interfaces for the internal and external networks. Then
layer carp(4) interfaces on top of that. That would add one extra
layer of resiliency, but I suspect it would complicate your ruleset.
Not to mention your state of mind.
On the other hand, I'm surprised I never thought of it myself. ;-)
--
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net
