Re: IPv6 routes leaking between FIBs?

2014-12-29 Thread Jason Healy
On Dec 29, 2014, at 2:34 PM, Bjoern A. Zeeb wrote: > pf and VNETs are a cause for panic at the moment; don’t go that route (yet). Good to know. With that in mind, I think my best workaround for now is to disable IPv6 on the management interface, leaving the transit interface as the only one

Re: IPv6 routes leaking between FIBs?

2014-12-29 Thread Jason Healy
On Dec 29, 2014, at 1:28 AM, Julian Elischer wrote: > to some extent this is what it was written for.. teh fib code was written for > Ironport/Cisco for separating the management port from the data ports onn > their appliances, however the VNET code that came later is an even cleaner > way of

IPv6 routes leaking between FIBs?

2014-12-27 Thread Jason Healy
Hello, Trying out FreeBSD for the first time to build a firewall box that’s multi-core and runs PF. I’m very interested in the FIB code, as it lines up well with the way my core networking equipment works and should allow me to route traffic on an interface that’s logically separate from the m