Re: bridge + ip_alias --> SLOW!!!

2004-09-03 Thread Gleb Smirnoff
On Mon, Aug 30, 2004 at 09:23:23PM -0500, Andrea Venturoli wrote: A> Just to give an idea, I tested with iperf and this are the results: A> A> internal net -> xxx.xxx.xxx.1 6.93 Mb/s A> internal net -> xxx.xxx.xxx.126.94 Mb/s A> internet -> xxx.xxx.xxx.1 237 Kb/s A> internet -

Re: 3 NICs - 1 upstream, 2 downstream to same subnet??

2004-09-03 Thread Charles Swiger
On Sep 3, 2004, at 6:54 AM, RRrp Toren wrote: What you're trying to do work actually give you much benefit to security: someone who wants to break in doesn't have to pay attention to the DHCP lease you give them, they can just assign themselves a good 10.0.0.x address. I am not a believer in

RE: 3 NICs - 1 upstream, 2 downstream to same subnet??

2004-09-03 Thread Darren Pilgrim
> From: RRrp Toren > > The IP addresses here were picked for demonstration > purposes. The actuals > set can come from anywhere within the RFC 1918 network > numbers. So picking a > good IP the 1st time, in the blind, is like shooting a > bullseye on the first > shot in a pitchblack rang

Presentation on new things in Network Stack for 5.3

2004-09-03 Thread Andre Oppermann
I've made a presentation today at SUNCON'04 in Zurich, Switzerland on the new things and changes in FreeBSD 5.3 Network Stack. You can find it here: http://people.freebsd.org/~andre/ It is fairly high-level and intended for server and system administrators as well as developers. If you write me e

Re: 3 NICs - 1 upstream, 2 downstream to same subnet??

2004-09-03 Thread Bill Vermillion
On Fri, Sep 03, 2004 at 07:05 , RRrp Toren moved his mouse, rebooted for the change to take effect, and then said: > Nickolay A. Kritsky wrote: > > >Hello rip, > > > >Are you sure that you want only one subnet? In your case two different > >subnets on two interfaces IMHO look much better. If you

Presentation on new things in Network Stack for 5.3

2004-09-03 Thread Andre Oppermann
I've made a presentation today at SUNCON'04 in Zurich, Switzerland on the new things and changes in FreeBSD 5.3 Network Stack. You can find it here: http://people.freebsd.org/~andre/ It is fairly high-level and intended for server and system administrators as well as developers. If you write me e

Re: IPCOMP on IPSEC

2004-09-03 Thread Karim Fodil-Lemelin
Actually I did, If you look in this mailing list archive you'll find a patch for it. I also proposed a patch for IPSEC (with IPCOMP) to work with a gif tunnel. http://groups.google.ca/groups?q=IPSEC+tunnel+kfl%40xiphos.ca&hl=en&lr=&ie=UTF-8&selm=1083615801.00042919.1083603002%4010.7.7.3&rnum=1 K

Re: 3 NICs - 1 upstream, 2 downstream to same subnet??

2004-09-03 Thread RRrp Toren
Nickolay A. Kritsky wrote: Hello rip, Are you sure that you want only one subnet? In your case two different subnets on two interfaces IMHO look much better. If you are sure about one-subnet setup than you should try to set up a bridge(4) between them two NICs. Bridge in FreeBSD is supporting ipfw

Re: 3 NICs - 1 upstream, 2 downstream to same subnet??

2004-09-03 Thread RRrp Toren
Michel Kempes wrote: The second problem you are having is that you can't have two NIC on the same subnet. Well it is possible to do but it is kind of useless to put 2 nic interfaces on the same subnet, unless you can have 1 gbit incomming and 2 100 nic downstreaming it over the subnet but this

Re: 3 NICs - 1 upstream, 2 downstream to same subnet??

2004-09-03 Thread RRrp Toren
Charles Swiger wrote: On Sep 2, 2004, at 2:17 PM, rip wrote: I am trying to make a configuration to isolate the WiFi APs on a single segment. DHCP hands out 'good' addresses (10.0.0.x) to MACs it recognizes and 'bad' (10.99.0.x) when the MAC does not match and is taken from the common pool. I th