Re: network design

2002-05-03 Thread Bill Fumerola
[ this is probably more appropriate for -net, -hackers bcc:'d ] On Fri, May 03, 2002 at 08:35:01AM +0100, andrew mejia wrote: > [andrew]$ exactly what i would suggest. a single > NIC can handle multiple assigments pretty easily, > unless you're expecting mega-traffic. but even then > you coul

Re: network design

2002-05-03 Thread andrew mejia
--- Terry Lambert <[EMAIL PROTECTED]> wrote: > Terry Lambert wrote: > > Unfortunately, the FreeBSD ethernet interface > isn't terribly > > smart. Ideally, it would provide a virtual > interface per VIP, > > all the way down to the card; it doesn't. > > Probably wasn't very clear here. > > The

Re: network design

2002-05-02 Thread Terry Lambert
Terry Lambert wrote: > Unfortunately, the FreeBSD ethernet interface isn't terribly > smart. Ideally, it would provide a virtual interface per VIP, > all the way down to the card; it doesn't. Probably wasn't very clear here. The Tigon II, for example, supports 4 VIPs, the Intel Gigabit ethernet

Re: network design

2002-05-02 Thread Terry Lambert
Bogdan TARU wrote: > I have an unusual question, and hope I'll find the answer on this list. I > would like to build a redundant structure of firewalls (2 of them), and I > really don't have any idea on how to do that. What I would like is a > scheme like: [ ... picture ... ] > But the real qu

Re: network design

2002-05-02 Thread Aragon Gouveia
Hiya, WRT redundant upstream links, I think it'll be much easier to use a BGP solution. You could even setup load balancing at the same time with the help of BGP. If both your uplinks are to the same ISP you can probably get away with using Cisco's interface backup configuations so long as both u