bge drivers does not work for 3COM 3C996-SX / 3C996B-T
I've some problems with bge driver with 3COM 3C996-SX fiber card and 3C996B-T copper card under -stable: The fiber card is detected correctly but the link does not go up (i've tested the same card between two Win2K and it works well). The copper card is detected but the link goes up/down and sometimes lock the machine (reboot is needed to restart) when i start a 'ping -i0 -q'. Does someone experienced the same problems ? for the missing splx: i think i've found a new one in bge_init: static void bge_init(xsc) void *xsc; { struct bge_softc *sc = xsc; struct ifnet *ifp; u_int16_t *m; int s; s = splimp(); ifp = &sc->arpcom.ac_if; if (ifp->if_flags & IFF_RUNNING) --> missing splx ? return; Fabien smime.p7s Description: S/MIME Cryptographic Signature
IPsec and dynamically assigned IPs
All: I am unclear regarding spdadd arguments and my VPN setup. I'm attempting to replace Nortel's Contivity Extranet Client on Windows with a racoon/ipsec solution. I'm unsure if this is a "tunnel" or "transport" connection. I contact a fixed server at 205.173.93.x. This is a contivity switch. My client is an IP address assigned by RoadRunner. During IKE (user w/ SecureID hard token, aggressive mode) another IP address is assigned (3.179.89.x) by the contivity. How do I express this in spdadd so that I can fire off racoon? [client] 66.67.157.x (RoadRunner IP, dynamic, known at spdadd time) | [tunnel? endpoint] 3.179.89.x (dynamic, assigned during/after IKE) | { Internet } | [tunnel? endpoint] ?.?.?.? (fixed, traceroute shows 3.179.68.x 1st hop) | [server] 205.173.93.x (fixed, known at spdadd time) Thanks! - Matt To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message
HEADS UP: ALTQ integration developer preview
We have started a "ALTQ integration in FreeBSD" project which is headed towards integrating Mr. Kejiro's ALTQ framework into FreeBSD 5.0-current (and perhaps 4-stable later). The FreeBSD Core Team has been advised and we have received on principle approval. We are looking for help with committing these bits to the CVS tree. Please have a look at the proposed ALTQ package for 5.0-current, which is found here: http://www.rofug.ro/projects/freebsd-altq/altq-freebsd-5.0-current-May14.tar.gz Installation details are found in the README file; for further details consult the documentation referenced below. Please send us any comments you have, your feedback is valuable. ALTQ integration implies some changes in the network drivers code and in the design of the the network queues management. Here is a summary of the ALTQ design document: The BSD systems need better output queueing abstraction to support packet scheduling (e.g., CBQ) or active queue management (e.g., RED). To introduce a new model, we need to convert the existing code to be conformant to the new model. But the problem is that there are too many drivers to convert all at once. This is a proposal that allows incremental transition to the new model. (If we are going to modify the existing drivers, we need to get it right.) The model is designed for ALTQ but it is general enough for other implementations so that we can make the driver conversion once and for all. The new model removes direct references to the fields within ifp->if_snd, and defines the following macros to manipulate ifp->if_snd: IFQ_ENQUEUE(ifq, m, err) IFQ_DEQUEUE(ifq, m) IFQ_POLL(ifq, m) IFQ_PURGE(ifq) IFQ_IS_EMPTY(ifq) The new model also enforces some rules regarding how to use these macros. Another requirement for a driver is to work under rate-limiting. - IFQ_DEQUEUE() could return NULL even when IFQ_IS_EMPTY() is FALSE under rate-limiting. a driver should always check if (m == NULL). - a driver is supposed to call if_start from the tx complete interrupt under late-limiting (in order to trigger the next dequeue). For most drivers, it is a simple task of replacing old-style lines by the corresponding new-style lines, and usually just a few lines need to be modified. But some drivers need more than that. The old-style drivers still work with the original FIFO queue but they cannot take advantage of new queueing disciplines. For locking an output queue to support SMP, ALTQ uses the same model as in FreeBSD-5.0. One restriction is that, if a driver uses poll-and-dequeue, the driver needs to explicitly lock the queue between the poll operation and the dequeue operation. You can find more details here: http://www.csl.sony.co.jp/person/kjc/kjc/software/altq-new-design.txt http://www.csl.sony.co.jp/person/kjc/kjc/software.html#ALTQ Current development is headed by Kenjiro Cho and myself. If you want to join our efforts please subscribe to our mailing list by sending "subscribe" in the body of a message to [EMAIL PROTECTED] Adrian Penisoara Ady (@freebsd.ady.ro, @rofug.ro) ___ | Programming in BASIC causes brain damage. | | (Edsger Wybe Dijkstra)| To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message
[no subject]
I've got to teach a new graduate course in networking this fall. I'm looking at using vol 1 and maybe vol 2 of "TCP/IP Illustrated" by Richard Stevens. The basic premise of the book seems to be to do experiments on a working network in order to learn about the protocols. One thing that I thought about doing is to have them do that sort of thing here as well as to read about what he did to do the book. It seemed useful to me to have some of the machines set up with a version of FreeBSD that let you fool around with what the IP and TCP layers were doing. E.g. introduce delays in the transmission of ack's so that packets get retransmitted or so that you can watch the RTT estimate catch up. Maybe pick out particular TCP segments and lose them. When I started looking at how one might do this, it seemed like it might be hard. So I got to wondering if somebody had already done it so that I don't have to. I have no idea how to do a Google search for something like that. Do any of you guys know about any software like that. I spose it would have to be a hacked version of a kernel. Thanks -- - Jimmy Wilkinson| Perfesser of Computer Science [EMAIL PROTECTED] | The College of Charleston (843) 953-8160 | Charleston SC29424 If there is one word to describe me, that word would have to be "profectionist". Any form of incompitence is an athema to me. Metathesis??? Don't ax me. To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message
A question about racoon with multi-homed IPSec box
We are setting up two tunneled-IPSec VPN boxes. One of the boxes has 2 IPs, and another one (plus firewall functions) has 3. Could someone tell us how to assign a local address for racoon to bind? Because the 3-IP box's outgoing interface is assigned by a private IP which connects to a router. But we want racoon to bind the public IP. Thanks in advance! -- Chih-Chang Hsieh To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message
RE:
James, You could use dummynet(4) to introduce delays, limit throughput, etc. You could also play with the various sysctl(8) variables. net.inet.ip.rtexpire net.inet.ip.rtminexpire net.inet.ip.rtmaxcache net.inet.tcp.delacktime net.inet.tcp.delayed_ack Just to name a few. Trying doing: sysctl -A | grep "net.inet" You can even mess around with some of the ipc related variables: sysctl -A | grep "kern.ipc" You should be able to manipulate the stack enough with that but there is always the source. :-) -- Adam Migus ([EMAIL PROTECTED]) ([EMAIL PROTECTED]) FreeBSD (http://www.freebsd.org) | The Power to Serve -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of James B. Wilkinson Sent: Thursday, May 16, 2002 8:25 PM To: [EMAIL PROTECTED] Subject: I've got to teach a new graduate course in networking this fall. I'm looking at using vol 1 and maybe vol 2 of "TCP/IP Illustrated" by Richard Stevens. The basic premise of the book seems to be to do experiments on a working network in order to learn about the protocols. One thing that I thought about doing is to have them do that sort of thing here as well as to read about what he did to do the book. It seemed useful to me to have some of the machines set up with a version of FreeBSD that let you fool around with what the IP and TCP layers were doing. E.g. introduce delays in the transmission of ack's so that packets get retransmitted or so that you can watch the RTT estimate catch up. Maybe pick out particular TCP segments and lose them. When I started looking at how one might do this, it seemed like it might be hard. So I got to wondering if somebody had already done it so that I don't have to. I have no idea how to do a Google search for something like that. Do any of you guys know about any software like that. I spose it would have to be a hacked version of a kernel. Thanks -- - Jimmy Wilkinson| Perfesser of Computer Science [EMAIL PROTECTED] | The College of Charleston (843) 953-8160 | Charleston SC29424 If there is one word to describe me, that word would have to be "profectionist". Any form of incompitence is an athema to me. Metathesis??? Don't ax me. To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message
RE: IPsec and dynamically assigned IPs
> I'm attempting to replace Nortel's Contivity Extranet > Client on Windows with a racoon/ipsec solution. > > I'm unsure if this is a "tunnel" or "transport" connection. I can't help you with the racoon part, but as for tunnel vs. transport mode: If it isn't end-to-end, it's tunnel mode. Transport mode is allowed between a host pair only. Lars -- Lars Eggert <[EMAIL PROTECTED]> USC Information Sciences Institute smime.p7s Description: application/pkcs7-signature
Re: A question about racoon with multi-homed IPSec box
Chih-Chang Hsieh writes: > Could someone tell us how to assign a local address for > racoon to bind? Because the 3-IP box's outgoing interface > is assigned by a private IP which connects to a router. > But we want racoon to bind the public IP. man racoon.conf... listen { isakmp x.x.x.x; <-- your ip address goes here } -Archie __ Archie Cobbs * Packet Design * http://www.packetdesign.com To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message
Re: A question about racoon with multi-homed IPSec box
Archie Cobbs wrote: > Chih-Chang Hsieh writes: > >>Could someone tell us how to assign a local address for >>racoon to bind? Because the 3-IP box's outgoing interface >>is assigned by a private IP which connects to a router. >>But we want racoon to bind the public IP. > > man racoon.conf... > > listen > { > isakmp x.x.x.x; <-- your ip address goes here > } Sorry, I forgot to say that we had tried this. But it not works. :( We are using racoon-20020507a. Anyway, thank you very much. -- Chih-Chang Hsieh To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message