Re: MPD + Win2K + broadcast

2002-10-31 Thread Archie Cobbs
Thomas Gielfeldt writes: [reformatted to 80 columns] > I'm still tampering with VPN and I want to say thanks for the advice > I've gotton from here and elsewhere. Now I'm trying to connect a > Win2k client to my internal network through mpd + netgraph. This > works fine. However, there's somethin

Re: Connecting two LANs via VPN and Filtering

2002-10-31 Thread Archie Cobbs
Thomas Gielfeldt writes: > So you probably have to filter via netgraph? This can be done with ng_bpf(4). -Archie __ Archie Cobbs * Packet Design * http://www.packetdesign.com To Unsubscribe: send mail to [EM

Re: Problem in High Speed and Long Delay with FreeBSD

2002-10-31 Thread Luigi Rizzo
you might want to have a look at the sysctl variable kern.ipc.sockbuf_waste_factor too. Remember that memory is charged to socket buffers depending on how many clusters are allocated, even if they are not fully used. E.g. in your example you are probably doing 1KB writes each of which consumes a 2

MPD + Win2K + broadcast

2002-10-31 Thread Thomas Gielfeldt
Hi I'm still tampering with VPN and I want to say thanks for the advice I've gotton from here and elsewhere. Now I'm trying to connect a Win2k client to my internal network through mpd + netgraph. This works fine. However, there's something I don't understand. The ip assigned to the client is on

Problem in High Speed and Long Delay with FreeBSD

2002-10-31 Thread Fran Lawas-Grodek
Hello, Hopefully someone might have some advice on our problem. We are setting up a testbed consisting of FreeBSD 4.1 on the sender and receiver machines. (This older version of FreeBSD is necessary due to subsequent TCP development patches that are to be tested.) The problem that we are seeing

IPSEC ping from other side

2002-10-31 Thread Ion Amigdalou
Dear freebsd experts, I have set up a VPN with racoon/ipsec on Freebsd 4.7 using tunneling with ESP transport. By using the setkey -D command, on my side the peer seems connected while on the other direction no connection has been established. Pinging the other side is not possible from my point. I

Re: ng_fec hash mechanism versus cisco etherchannel

2002-10-31 Thread Petri Helenius
The forwarding table points to the channel, not a specific interface on the channel. This also allows adding and dropping links on the fly. Pete Don Bowman wrote: From: Petri Helenius [mailto:pete@;he.iki.fi] It does not matter if you send using the other link as long as you send all packets

RE: ng_fec hash mechanism versus cisco etherchannel

2002-10-31 Thread Don Bowman
> From: Petri Helenius [mailto:pete@;he.iki.fi] > It does not matter if you send using the other link as long > as you send > all packets > for the same stream over the same link to avoid reordering. > So yes, it does > interoperate. can you end up with a link flap? e.g. the catalyst does SA le

Re: ng_fec hash mechanism versus cisco etherchannel

2002-10-31 Thread Petri Helenius
It does not matter if you send using the other link as long as you send all packets for the same stream over the same link to avoid reordering. So yes, it does interoperate. Pete Don Bowman wrote: Examining the source code to ng_fec, in ng_fec_output(), it uses the IP address to form the hash

ng_fec hash mechanism versus cisco etherchannel

2002-10-31 Thread Don Bowman
Examining the source code to ng_fec, in ng_fec_output(), it uses the IP address to form the hash to pick the port. This is the same behaviour that 802.3ad specifies, and yields good behaviour since: a: it works in routed environments as well as local area b: packets are not reordered within L4 se

Connecting two LANs via VPN and Filtering

2002-10-31 Thread Thomas Gielfeldt
Thomas Gielfeldt <[EMAIL PROTECTED]> wrote on 26-10-02 20:22:15: Hi I have now finally bridged my two networks over the internet using vtun + netgraph. +--+ | Cisco Router | ---