bge drivers does not work for 3COM 3C996-SX / 3C996B-T

2002-05-16 Thread Fabien THOMAS

I've some problems with bge driver with 3COM 3C996-SX fiber card and
3C996B-T copper card under -stable:

The fiber card is detected correctly but the link does not go up (i've
tested the same card between two Win2K and it works well).

The copper card is detected but the link goes up/down and sometimes lock the
machine (reboot is needed to restart) when i start a 'ping -i0 -q'.

Does someone experienced the same problems ?

for the missing splx: i think i've found a new one in bge_init:

static void
bge_init(xsc)
void *xsc;
{
struct bge_softc *sc = xsc;
struct ifnet *ifp;
u_int16_t *m;
int s;

s = splimp();

ifp = &sc->arpcom.ac_if;

if (ifp->if_flags & IFF_RUNNING)
--> missing splx ?
return;


Fabien



smime.p7s
Description: S/MIME Cryptographic Signature


IPsec and dynamically assigned IPs

2002-05-16 Thread Matthew Zahorik

All:

  I am unclear regarding spdadd arguments and my VPN setup.

  I'm attempting to replace Nortel's Contivity Extranet Client on Windows
with a racoon/ipsec solution.

  I'm unsure if this is a "tunnel" or "transport" connection.

  I contact a fixed server at 205.173.93.x.  This is a contivity switch.
My client is an IP address assigned by RoadRunner.

  During IKE (user w/ SecureID hard token, aggressive mode) another IP
address is assigned (3.179.89.x) by the contivity.

  How do I express this in spdadd so that I can fire off racoon?


  [client] 66.67.157.x (RoadRunner IP, dynamic, known at spdadd time)
   |
  [tunnel? endpoint] 3.179.89.x (dynamic, assigned during/after IKE)
   |
 { Internet }
   |
  [tunnel? endpoint] ?.?.?.? (fixed, traceroute shows 3.179.68.x 1st hop)
   |
  [server] 205.173.93.x (fixed, known at spdadd time)


  Thanks!

- Matt


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message



HEADS UP: ALTQ integration developer preview

2002-05-16 Thread Adrian Penisoara


   We have started a "ALTQ integration in FreeBSD" project which is
headed towards integrating Mr. Kejiro's ALTQ framework into FreeBSD
5.0-current (and perhaps 4-stable later). The FreeBSD Core Team has been
advised and we have received on principle approval. We are looking
for help with committing these bits to the CVS tree.

   Please have a look at the proposed ALTQ package for 5.0-current,
which is found here:

http://www.rofug.ro/projects/freebsd-altq/altq-freebsd-5.0-current-May14.tar.gz

   Installation details are found in the README file; for further
details consult the documentation referenced below. Please send us any
comments you have, your feedback is valuable.

   ALTQ integration implies some changes in the network drivers code and
in the design of the the network queues management. Here is a summary of
the ALTQ design document:

  The BSD systems need better output queueing abstraction to support
   packet scheduling (e.g., CBQ) or active queue management (e.g., RED).
   To introduce a new model, we need to convert the existing code to be
   conformant to the new model.  But the problem is that there are too
   many drivers to convert all at once.

  This is a proposal that allows incremental transition to the
   new model.  (If we are going to modify the existing drivers, we need
   to get it right.)
   The model is designed for ALTQ but it is general enough for other
   implementations so that we can make the driver conversion once and
   for all.

   The new model removes direct references to the fields
   within ifp->if_snd, and defines the following macros to manipulate
   ifp->if_snd:
   IFQ_ENQUEUE(ifq, m, err)
   IFQ_DEQUEUE(ifq, m)
   IFQ_POLL(ifq, m)
   IFQ_PURGE(ifq)
   IFQ_IS_EMPTY(ifq)
   The new model also enforces some rules regarding how to use these
   macros.

   Another requirement for a driver is to work under rate-limiting.
- IFQ_DEQUEUE() could return NULL even when IFQ_IS_EMPTY() is FALSE
  under rate-limiting.  a driver should always check if (m == NULL).
- a driver is supposed to call if_start from the tx complete
  interrupt under late-limiting (in order to trigger the next 
  dequeue).

   For most drivers, it is a simple task of replacing old-style lines by
   the corresponding new-style lines, and usually just a few lines need
   to be modified.  But some drivers need more than that.
   The old-style drivers still work with the original FIFO queue but
   they cannot take advantage of new queueing disciplines.

   For locking an output queue to support SMP, ALTQ uses the same model
   as in FreeBSD-5.0.  One restriction is that, if a driver uses
   poll-and-dequeue, the driver needs to explicitly lock the queue
   between the poll operation and the dequeue operation.


 You can find more details here:

  http://www.csl.sony.co.jp/person/kjc/kjc/software/altq-new-design.txt
  http://www.csl.sony.co.jp/person/kjc/kjc/software.html#ALTQ

   Current development is headed by Kenjiro Cho and myself. If you want
to join our efforts please subscribe to our mailing list by sending
"subscribe" in the body of a message to [EMAIL PROTECTED]

 Adrian Penisoara
 Ady (@freebsd.ady.ro, @rofug.ro)
___
| Programming in BASIC causes brain damage.   |
|   (Edsger Wybe Dijkstra)|


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message



[no subject]

2002-05-16 Thread James B. Wilkinson

I've got to teach a new graduate course in networking this fall. I'm 
looking at using vol 1 and maybe vol 2 of "TCP/IP Illustrated" by 
Richard Stevens. The basic premise of the book seems to be to do 
experiments on a working network in order to learn about the 
protocols. One thing that I thought about doing is to have them do 
that sort of thing here as well as to read about what he did to do 
the book. It seemed useful to me to have some of the machines set up 
with a version of FreeBSD that let you fool around with what the IP 
and TCP layers were doing. E.g. introduce delays in the transmission 
of ack's so that packets get retransmitted or so that you can watch 
the RTT estimate catch up. Maybe pick out particular TCP segments and 
lose them. When I started looking at how one might do this, it seemed 
like it might be hard. So I got to wondering if somebody had already 
done it so that I don't have to. I have no idea how to do a Google 
search for something like that.

Do any of you guys know about any software like that. I spose it 
would have to be a hacked version of a kernel.

Thanks
-- 

-
Jimmy Wilkinson| Perfesser of Computer Science
[EMAIL PROTECTED]  | The College of Charleston
(843) 953-8160 | Charleston  SC29424

If there is one word to describe me,
that word would have to be "profectionist".
Any form of incompitence is an athema to me.
Metathesis??? Don't ax me.

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message



A question about racoon with multi-homed IPSec box

2002-05-16 Thread Chih-Chang Hsieh


We are setting up two tunneled-IPSec VPN boxes.

One of the boxes has 2 IPs, and another one (plus

firewall functions) has 3.

Could someone tell us how to assign a local address for

racoon to bind? Because the 3-IP box's outgoing interface

is assigned by a private IP which connects to a router.

But we want racoon to bind the public IP.

Thanks in advance!

-- 
Chih-Chang Hsieh



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message



RE:

2002-05-16 Thread Adam Migus

James,
You could use dummynet(4) to introduce delays, limit throughput, etc.  You
could also play with the various sysctl(8) variables.

net.inet.ip.rtexpire
net.inet.ip.rtminexpire
net.inet.ip.rtmaxcache
net.inet.tcp.delacktime
net.inet.tcp.delayed_ack

Just to name a few.  Trying doing:

sysctl -A | grep "net.inet"

You can even mess around with some of the ipc related variables:

sysctl -A | grep "kern.ipc"

You should be able to manipulate the stack enough with that but there is
always the source.  :-)
--
Adam Migus ([EMAIL PROTECTED]) ([EMAIL PROTECTED])
FreeBSD (http://www.freebsd.org) | The Power to Serve


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of James B. Wilkinson
Sent: Thursday, May 16, 2002 8:25 PM
To: [EMAIL PROTECTED]
Subject:


I've got to teach a new graduate course in networking this fall. I'm
looking at using vol 1 and maybe vol 2 of "TCP/IP Illustrated" by
Richard Stevens. The basic premise of the book seems to be to do
experiments on a working network in order to learn about the
protocols. One thing that I thought about doing is to have them do
that sort of thing here as well as to read about what he did to do
the book. It seemed useful to me to have some of the machines set up
with a version of FreeBSD that let you fool around with what the IP
and TCP layers were doing. E.g. introduce delays in the transmission
of ack's so that packets get retransmitted or so that you can watch
the RTT estimate catch up. Maybe pick out particular TCP segments and
lose them. When I started looking at how one might do this, it seemed
like it might be hard. So I got to wondering if somebody had already
done it so that I don't have to. I have no idea how to do a Google
search for something like that.

Do any of you guys know about any software like that. I spose it
would have to be a hacked version of a kernel.

Thanks
--

-
Jimmy Wilkinson| Perfesser of Computer Science
[EMAIL PROTECTED]  | The College of Charleston
(843) 953-8160 | Charleston  SC29424

If there is one word to describe me,
that word would have to be "profectionist".
Any form of incompitence is an athema to me.
Metathesis??? Don't ax me.

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message



RE: IPsec and dynamically assigned IPs

2002-05-16 Thread Lars Eggert

>   I'm attempting to replace Nortel's Contivity Extranet 
> Client on Windows with a racoon/ipsec solution.
> 
>   I'm unsure if this is a "tunnel" or "transport" connection.

I can't help you with the racoon part, but as for tunnel vs. transport
mode: If it isn't end-to-end, it's tunnel mode. Transport mode is
allowed between a host pair only.

Lars
-- 
Lars Eggert <[EMAIL PROTECTED]>   USC Information Sciences Institute



smime.p7s
Description: application/pkcs7-signature


Re: A question about racoon with multi-homed IPSec box

2002-05-16 Thread Archie Cobbs

Chih-Chang Hsieh writes:
> Could someone tell us how to assign a local address for
> racoon to bind? Because the 3-IP box's outgoing interface
> is assigned by a private IP which connects to a router.
> But we want racoon to bind the public IP.

man racoon.conf...

listen
{
isakmp x.x.x.x; <-- your ip address goes here
}


-Archie

__
Archie Cobbs * Packet Design * http://www.packetdesign.com

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message



Re: A question about racoon with multi-homed IPSec box

2002-05-16 Thread Chih-Chang Hsieh

Archie Cobbs wrote:
> Chih-Chang Hsieh writes:
> 
>>Could someone tell us how to assign a local address for
>>racoon to bind? Because the 3-IP box's outgoing interface
>>is assigned by a private IP which connects to a router.
>>But we want racoon to bind the public IP.
> 
> man racoon.conf...
> 
> listen
> {
>   isakmp x.x.x.x; <-- your ip address goes here
> }

Sorry, I forgot to say that we had tried this.

But it not works. :( We are using racoon-20020507a.

Anyway, thank you very much.

-- 
Chih-Chang Hsieh



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message