Marcelo Toledo wrote:

great to read it! We're going to test your patch. Thanks a lot.
Wonderful, beware however there's another issue te be resolved: MAC aging. Switches require their mac-table te be refreshed regularly, otherwise the MAC entries are aged out (on cisco in 300 sec). OpenVPN doesn't seem to do aging like that, so a MAC entry learnt won't be forgotten.

This is problematic if another client (because of a failover) will be routing the traffic. In this case traffic will be sent to the wrong client until an ARP request + reply corrects the MAC entry on the server.

So another thing that should be implemented probably is aging.

Reply via email to