[Bug 248474] if_ipsec: NAT broken on IPsec/VTI

2020-09-30 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=248474 --- Comment #28 from Eugene Grosbein --- (In reply to Eugene Grosbein from comment #27) Forgot to note, I use FreeBSD 11.4. -- You are receiving this mail because: You are the assignee for the bug. ___

[Bug 248474] if_ipsec: NAT broken on IPsec/VTI

2020-09-30 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=248474 --- Comment #27 from Eugene Grosbein --- (In reply to Ziomalski from comment #26) This is not true: "It is currently not possible to simultanously have Routed IPsec with NAT and Policy IPsec". I have both ipsec-tools/racoon running as IKEv

[Bug 248474] if_ipsec: NAT broken on IPsec/VTI

2020-09-30 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=248474 Ziomalski changed: What|Removed |Added Status|Closed |Open Severity|Affects Only M

[Bug 236105] carp MASTER/MASTER status when adding or removing carp IP addresses

2020-09-30 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=236105 --- Comment #8 from Eugene Grosbein --- (In reply to Ozkan KIRIK from comment #7) I don't think there is a way for bulk replacing other than writing your own binary performing same syscalls as ifconfig binary does. Maybe new libifconfig wo

[Bug 236105] carp MASTER/MASTER status when adding or removing carp IP addresses

2020-09-30 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=236105 --- Comment #7 from Ozkan KIRIK --- There are too many assigned IP addresses. It takes much time to remove/add ip addresses. # ifconfig | grep vhid\ | wc -l 1075 -- Is there a way for removing/adding bulk ip addresses? Such as prep

[Bug 236105] carp MASTER/MASTER status when adding or removing carp IP addresses

2020-09-30 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=236105 --- Comment #6 from Eugene Grosbein --- (In reply to Kajetan Staszkiewicz from comment #5) Right, but why do you need to apply configuration to both master and backup in parallel? Do it sequentially, first remove vhid from the backup, then

[Bug 236105] carp MASTER/MASTER status when adding or removing carp IP addresses

2020-09-30 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=236105 --- Comment #5 from Kajetan Staszkiewicz --- Playing with demotion configuration won't help, as there is no demotion happening. It's a MASTER/MASTER operation due to configuration difference. -- You are receiving this mail because: You ar

[Bug 236105] carp MASTER/MASTER status when adding or removing carp IP addresses

2020-09-30 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=236105 --- Comment #4 from Ozkan KIRIK --- FreeBSD stable/12 also same. -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-net@freebsd.org mailing list https://lists.

[Bug 236105] carp MASTER/MASTER status when adding or removing carp IP addresses

2020-09-30 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=236105 --- Comment #3 from Ozkan KIRIK --- While master and backup configuration is updating, HMACs are changing also. So that, incrementing net.inet.carp.demotion don't help. Both of master and backup, dismiss the recevied multicast messages beca

[Bug 236105] carp MASTER/MASTER status when adding or removing carp IP addresses

2020-09-30 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=236105 Eugene Grosbein changed: What|Removed |Added CC||eu...@freebsd.org --- Comment #2