if_link_state_change() patch for review

2005-04-18 Thread Gleb Smirnoff
Dear networkers, we are working on fixing LORs in if_link_state_change() path, and adding possibility to call if_link_state_change() pseudorecursively, when link of interface depends on link of the other. I'm posting this patch for wider review. An important point about it is that, if several l

"panic: trap: fast data access mmu miss" in m_copym

2005-04-18 Thread Kris Kennaway
This on an u10 running FreeBSD 5.3-STABLE (NETBOOT) #1: Sun Dec 12 18:38:35 JST 2004 It may already be fixed, but since this is clearly a very infrequent problem (the other 7 machines with the same kernel have been running for months) it will be hard to tell empirically. Unfortunately I don't se

RE: SOVLED: Problems with CARP, VLANs and em driver

2005-04-18 Thread eivind
The vlan(4) device is not yet officially supported for carp(4). It works for NICs which talks to mii, but cards such as em(4) could get problems. Thanks to Max Laier, Gleb Smirnoff and Yar Tikhiy which supplied me the following patch. It solved my problem with CARP, VLANs and the em(4) driver.. t

Re: cisco vpn experience?

2005-04-18 Thread Michael Vince
Yeah I hooked up 5.3 BSD box with to a big mobile phone companies $60,000 Cisco VPN piece of equipment, I got Cisco cert my self but I prefer FreeBSD :) Used Racoon/ipsec tools and FastIPSec compiled into the kernel. IPs are spoofed ,but just to give you the idea. Mar 31 16:02:54 mord racoon: IN

Re: cisco vpn experience?

2005-04-18 Thread Michael C. Cambria
Nickolay Kritsky wrote: I had a an experience of connecting 4.9 to cisco 3600 with ESP/3des/Md5 site-to-site IPsec vpn with ISAKMP based on preshared key. Software used was racoon and isakmp. I can second this, though I was using pre 4.9 (4.8?).The key is to use "site-to-site" vs. the road wa

Current problem reports assigned to you

2005-04-18 Thread FreeBSD bugmaster
Current FreeBSD problem reports Critical problems Serious problems Non-critical problems S Submitted Tracker Resp. Description --- o [2003/07/11] kern/54383 net [nfs] [patch] NFS root configurations w

bridging 3 interfaces

2005-04-18 Thread Donatas
i would like to ask if it is possible to bridge in such way: ngeth0 --> em <---ngeth1 (sysctl net.link.ether.bridge.config=ngeth0,em0,ngeth1) such bridge actualy works, but allows only one session at time that is: ngeth0<->em0, ngeth1 dropped ngeth1<->em0, ngeth0 dropped i've als

RE: cisco vpn experience?

2005-04-18 Thread Nickolay Kritsky
I had a an experience of connecting 4.9 to cisco 3600 with ESP/3des/Md5 site-to-site IPsec vpn with ISAKMP based on preshared key. Software used was racoon and isakmp. Nick -Original Message- From: Julian Elischer [mailto:[EMAIL PROTECTED] Sent: Saturday, April 16, 2005 3:19 AM To: [EMA