SV: VPLS implementation

2010-10-13 Thread Jon Otterholm
> -Ursprungligt meddelande- > Från: sth...@nethelp.no [mailto:sth...@nethelp.no] > Skickat: den 13 oktober 2010 11:32 > Till: Jon Otterholm > Kopia: freebsd-net@freebsd.org > Ämne: Re: VPLS implementation > > > > Are there any plans or ongoing work to

VPLS implementation

2010-10-11 Thread Jon Otterholm
Are there any plans or ongoing work to implement VPLS in the network stack? http://en.wikipedia.org/wiki/Virtual_Private_LAN_Service //JO ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscrib

Re: Choosing CPU for router

2010-03-25 Thread Jon Otterholm
Den 2010-03-23 19.36, skrev "Jon Otterholm" : > > > > Den 2010-03-23 14.12, skrev "Ivan Voras" : > >> On 03/18/10 01:32, Andrew Snow wrote: >>> >>> Jon Otterholm wrote: >>>> This machine is going to act as access-ro

Re: Choosing CPU for router

2010-03-23 Thread Jon Otterholm
Den 2010-03-23 14.12, skrev "Ivan Voras" : > On 03/18/10 01:32, Andrew Snow wrote: >> >> Jon Otterholm wrote: >>> This machine is going to act as access-router serving ~500 >>> FTTH-customers. >>> About 500Mbit/s and 200kpps. The big i

Re: Choosing CPU for router

2010-03-17 Thread Jon Otterholm
Den 2010-03-17 10.12, skrev "Gilles WAGNER" : > 2010/3/17 Andrew Snow > > Matthias Gamsjager wrote: >> >>> Way over the top for simple fw and dhcpd. but how much traffic will >>> be involved? >>> Investing in a good nics will return more then a pricey cpu and >>> motherboard (eec mem is goo

Choosing CPU for router

2010-03-16 Thread Jon Otterholm
Hi. In the process to build a new router and want to choose the best possible CPU for the job. Narrowed it down to the following: Intel Q9650 3,0Ghz Intel i7-965/975 3,2Ghz/3,33Ghz What would be the benefit from a Xeon? Motherboard: Supermicro X8SBI-4LN. RAM: 4GB The router will be running IP

Re: Racoon site-to site

2009-12-14 Thread Jon Otterholm
On 2009-12-11 20.23, "Mike Tancsa" wrote: > At 11:33 AM 12/11/2009, David DeSimone wrote: >> Jon Otterholm wrote: >>> >>> If I restart racoon or wait approximately 30 min the connection is >>> re-established. >> >> Since this is

Re: Racoon site-to site

2009-12-11 Thread Jon Otterholm
On 2009-12-11 20.23, "Mike Tancsa" wrote: > At 11:33 AM 12/11/2009, David DeSimone wrote: >> Jon Otterholm wrote: >>> >>> If I restart racoon or wait approximately 30 min the connection is >>> re-established. >> >> Since this is

Re: Racoon site-to site

2009-12-11 Thread Jon Otterholm
11 dec 2009 kl. 17.34 skrev "David DeSimone" : Jon Otterholm wrote: If I restart racoon or wait approximately 30 min the connection is re-established. Since this is approximately ½of the phase 2 lifetime, you are proba bly running into lifetime negotiation issues, or

Racoon site-to site

2009-12-11 Thread Jon Otterholm
I have a site-to-site vpn between these two: 1. FreeBSD 7.2-RELEASE-p4, racoon, ipsec-tools-0.7.3 2. Symantec VPN 100, (also known as "Nexland Pro 800") I have intermittent connection problems between these two and I can't seem to identify what the problem is. I realize the complexity and challe

GRED on queue or pipe

2009-11-26 Thread Jon Otterholm
Doing some test of gred in dummynet. My ruleset consists of a number of queues connected to the same pipe. Queues have different weight and I want to make use of gred instead of taildrop. Should i define gred on the queues or on the pipe? To me it seems reasonable to set it on the pipe and let

Re: Forwarding w/o promisc on 6.4

2009-04-19 Thread Jon Otterholm
On 2009-04-19 11.14, "Robert Watson" wrote: > On Sun, 19 Apr 2009, Jon Otterholm wrote: > >> I have a router running 6.4R that does not forward packets if I disable >> PROMISC on the interface. Hardware is a Dell PE with two Intel 82541EI >> chipsets (if_e

Forwarding w/o promisc on 6.4

2009-04-19 Thread Jon Otterholm
Hi. I have a router running 6.4R that does not forward packets if I disable PROMISC on the interface. Hardware is a Dell PE with two Intel 82541EI chipsets (if_em). I have a number (~100) of vlan-interfaces on em0. Everything works as aexpected if I turn on PROMISC on em0 but forwarding stops if I

Re: CARP and L2 src-MAC

2008-11-06 Thread Jon Otterholm
On 2008-11-06 11.47, "Peter Jeremy" <[EMAIL PROTECTED]> wrote: > On 2008-Nov-06 10:06:21 +0100, Jon Otterholm > <[EMAIL PROTECTED]> wrote: >> Is it possible to tweak CARP to use the virtual MAC in L2 header instead of >> the physical interface MAC

CARP and L2 src-MAC

2008-11-06 Thread Jon Otterholm
Hi. We have a situation where we want to use CARP in a TPSDA-network and got some problems. The master CARP router ARP response contains the correct virtual MAC but uses the physical interface MAC in L2 header. This is OK for the client but the switches in between the router and the client will

carpdev

2008-06-03 Thread Jon Otterholm
Hi. Are there any plans to implement option carpdev to carp in FreeBSD? //Jon ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

RE: Incompatibility between dummynet and PF rdr

2008-04-24 Thread Jon Otterholm
Hi. Has anyone got a solution to the rdr-problem when using PF together with Dummynet/IPFW? I found this thread from 2006 which describes the problem in detail: http://unix.derkeiler.com/Mailing-Lists/FreeBSD/net/2006-07/msg00048.html //Jon ___ fre

QinQ

2007-10-25 Thread Jon Otterholm
Hi. I was wondering about the possibility of adding support for QinQ ("Double tagged frames" / "Nested vlans"). Attached is a patch against -STABLE to add this support. I have not tested this but was told it should work. Would it be possible to get this into CURRENT? //Jon --- if_vlan.c.orig

if_bridge on a vlan-trunk

2007-10-11 Thread Jon Otterholm
Hi. Does anyone know if it is possible to put a transparent bridge on a vlan-trunk? A working solution is to create a bridge for each vlan, but I would prefer to have one bridge instead of several hundreds of them. Is this doable? In my lab environment I use a dual em(4) nic. What would the dr

if_em and if_vlan

2007-09-26 Thread Jon Otterholm
Hi. I get "Device busy" when trying to change VLAN-id on a sub-if to em0: [EMAIL PROTECTED] /home/user]# ifconfig vlan100 vlan 100 vlandev em0 ifconfig: SIOCSETVLAN: Device busy [EMAIL PROTECTED] /home/user]# dmesg | grep em0 em0: port 0x4000-0x401f mem 0xee20-0xee21 irq 16 at device

if_bridge and filtering on member interface

2007-08-29 Thread Jon Otterholm
Hi. It seems that filtering on member interfaces are a bit buggy at the moment. For testing I tried to use the following 3 rules to block traffic using PF: The following works and blocks traffic: block log quick on bridge0 from xx.xx.xx.xx to any The following does not work: block log quick on

Re: proxy-arp

2007-08-13 Thread Jon Otterholm
Chuck Swiger wrote: On Aug 13, 2007, at 7:34 AM, Jon Otterholm wrote: I have a problem with proxy-arp entries. If I add an arp-entry: arp -s $hostip $routermac permanent pub only the router sends an arp and replies to it's own arp like: 15:40:02.074419 arp who-has $hostip tell $hostip

proxy-arp

2007-08-13 Thread Jon Otterholm
Hi. I have a problem with proxy-arp entries. If I add an arp-entry: arp -s $hostip $routermac permanent pub only the router sends an arp and replies to it's own arp like: 15:40:02.074419 arp who-has $hostip tell $hostip 15:40:02.074663 arp reply $hostip is-at $routermac (oui Unknown) This is

if_bridge and ff:ff:ff:ff:ff:ff

2007-06-04 Thread Jon Otterholm
I'm havinf trouble sending packets to the ethernet broadcast address on an if_bridge. It seems as if the onley packets sent from my router to ethernet broadcast is arp. I have the following conf: bridge0: flags=8843 mtu 1500 inet x.x.x.x netmask 0xff80 broadcast x.x.x.x ether

Re: ICMP-floods

2007-03-22 Thread Jon Otterholm
Peter Jeremy wrote: On 2007-Mar-21 22:08:06 +0100, Jon Otterholm <[EMAIL PROTECTED]> wrote: I did not mention earlier that all if's are vlan-based sub-intefaces. It seems that if I move admin-if's on my routers to a different physical if than the one with the default route

Re: ICMP-floods

2007-03-21 Thread Jon Otterholm
Chuck Swiger wrote: On Mar 20, 2007, at 4:05 PM, Jon Otterholm wrote: When setting net.inet.ip.redirect=0 on my routers, the icmp-redirects disappear, but instead I get a large amount of ICMP-time-exceed from my routers. The information you've provided strongly suggests either pro

ICMP-floods

2007-03-20 Thread Jon Otterholm
Hi. I have some strange netproblems where my FreeBSD-routers sends icmp-redirects/time-exceeds to my surveillance machine. Basically I have a admin-net where all routers and switches are connected. On this net I have a nagios-machine for surveillance (running FreeBSD). Sometimes when my Nagios s

Re: Lenovo X60 em

2007-01-16 Thread Jon Otterholm
Jack Vogel wrote: On 1/16/07, Jon Otterholm <[EMAIL PROTECTED]> wrote: Jack Vogel wrote: > On 1/16/07, Jon Otterholm <[EMAIL PROTECTED]> wrote: >> Hi. >> >> I have trouble with high latency on my new X60 with em-interface. Anyone >> else with th

Re: Lenovo X60 em

2007-01-16 Thread Jon Otterholm
Jack Vogel wrote: On 1/16/07, Jon Otterholm <[EMAIL PROTECTED]> wrote: Hi. I have trouble with high latency on my new X60 with em-interface. Anyone else with the same problem? I´m running 6.2-RELEASE. Would you please give a bit more detail. Jack Here comes some info: uname -a F

Lenovo X60 em

2007-01-16 Thread Jon Otterholm
Hi. I have trouble with high latency on my new X60 with em-interface. Anyone else with the same problem? I´m running 6.2-RELEASE. //Jon ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, sen

Re: If_bridge behaving as HUB

2006-10-17 Thread Jon Otterholm
Andrew Thompson wrote: On Mon, Oct 16, 2006 at 12:15:13PM +0200, Jon Otterholm wrote: Hi. I have a bridge setup with a number of vlan IF's as members. After a while traffic destined for one member IF are sent to all member IF's. From man if_bridge: A bridge works

If_bridge behaving as HUB

2006-10-16 Thread Jon Otterholm
Hi. I have a bridge setup with a number of vlan IF's as members. After a while traffic destined for one member IF are sent to all member IF's. From man if_bridge: A bridge works like a hub, forwarding traffic from one interface to another. Multicast and broadcast packets are always f

Re: Bridge

2006-09-15 Thread Jon Otterholm
Andrew Thompson wrote: On Thu, Sep 14, 2006 at 04:23:07PM +0200, Jon Otterholm wrote: Andrew Thompson wrote: On Thu, Sep 14, 2006 at 10:30:21AM +0200, Jon Otterholm wrote: Andrew Thompson wrote: On Wed, Sep 13, 2006 at 08:19:41PM +0200, Jon Otterholm wrote

Bridge

2006-09-13 Thread Jon Otterholm
Hi. According to man if_bridge one could filter L2-traffic with ipfw: From man if_bridge: ARP and REVARP packets are forwarded without being filtered and others that are not IP nor IPv6 packets are not forwarded when pfil_onlyip is enabled. IPFW can filter Ethernet types using mac-t

Limit arp on bridge

2006-09-12 Thread Jon Otterholm
Hello. I am trying to limit arp-broadcast between member-IF on a bridge (if_bridge) with no luck. I have the following sysctls set: net.link.bridge.pfil_member: 1 net.link.bridge.pfil_bridge: 1 net.link.bridge.pfil_onlyip: 1 I am using PF for filtering - do I have to use IPFW to limit arp-b

CNR Replacement

2006-06-06 Thread Jon Otterholm
Hi. I am searching for a BSD-based CNR replacement. CNR (Cisco Network Registrar) is basicly a DHCP server that puts IF-routes on a router when a client has leased an IP-address. When the lease expires the IF-route is removed from the router. This functionality together with IP-less VLAN-IF'

Sub-interfaces

2006-04-12 Thread Jon Otterholm
Hi. I am designing a new network and one way to go is to configure a router based on FreeBSD with one IF/customer. This would mean around 1000 VLAN-IF's/router - would this work? Do you see any problems with this? /Jon ___ freebsd-net@freebsd.org ma

net.link.ether.inet.proxyall

2006-03-27 Thread Jon Otterholm
Hi. Has anyone information about the sysctl "net.link.ether.inet.proxyall" ? Is this a global ARP-Proxy? Does it apply on a bridge or if_bridge? /Jon ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To un

Re: How do you keep users from stealing other user's ip??

2006-03-24 Thread Jon Otterholm
Sten Daniel Sørsdal wrote: Mark Jayson Alvarez wrote: Good day, We are trying to reorganize our local area network and I need some tips on how you are managing your own lan... We have a vanilla pc router with interface facing our private lan and interface facing the Internet. One pr

DHCPD + Relay

2006-01-09 Thread Jon Otterholm
Hi! I want to set up a DHCP-server for a number of subnets. My current router (Cisco) has a dhcp-relay function (ip helper) to put on each if in the router to make it answer and forward requests to the dhcp-server. I am having trouble to get isc-dhcp-server to start up without a subnet-decla

Router + ADM64

2006-01-03 Thread Jon Otterholm
Hi! What is there to gain in performance choosing AMD64 on a Dell PE1850 (Xeon EMT64) when used as router? /Jon ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL

Re: arp-proxy

2005-11-21 Thread Jon Otterholm
I think they do that when using standard 802.1Q, but for some reason theey don't when running QinQ... /Jon On Mon, 2005-11-21 at 13:00 +, Brian Candler wrote: > On Mon, Nov 21, 2005 at 01:45:44PM +0100, Jon Otterholm wrote: > > The reason why I have to proxy-arp mac between VLA

Re: arp-proxy

2005-11-21 Thread Jon Otterholm
000, Brian Candler wrote: > > > On Thu, Nov 17, 2005 at 04:52:03PM +0100, Jon Otterholm wrote: > > > > Scenario#1: > > > > -I have a range of ip's, for example 215.10.10.0 - 215.10.10.255. > > > > -I want to distrubute theese ip's to my custome

Re: arp-proxy

2005-11-17 Thread Jon Otterholm
her if" acting as gateway, distrute IP's via DHCP (ISC?) I could reduce the number of IP's and administration when adding new customers. Anyone with a souloution or revelation? /Jon On Thu, 2005-11-17 at 15:23 +, Brian Candler wrote: > On Thu, Nov 17, 2005 at 04:06:03PM +0100

Re: arp-proxy

2005-11-17 Thread Jon Otterholm
The linux-soloution you are describeing is exactly what I want to do. Not a big fan of Linux though. I will have to wait for this to be ported to BSD. Anyone with info if this is being done? /Jon On Thu, 2005-11-17 at 14:57 +0100, Jeremie Le Hen wrote: > Hi, Jon, Brian, > > > That depends... >

SV: Testing with a Cisco router

2005-11-12 Thread Jon Otterholm
Hi! I have a router up and running but it is vital to our production all the time so the tests cannot have any bad affects on my production... IOS Version: Version 12.3(8)T3 (With firewall feature set) Hardware: 7301 I have a bunch of FreeBSD's connected to various subnets on the Cisco router.

Re: arp-proxy

2005-11-10 Thread Jon Otterholm
understand why Alcatel has put this limitaion in their DSLAM's. Their answer is that it prevents spoofing. I would accept this as a feature but not as a limitation... /J On Thu, 2005-11-10 at 13:39 +, Brian Candler wrote: > On Thu, Nov 10, 2005 at 02:25:07PM +0100, Jon Otterholm wrote: >

Re: arp-proxy

2005-11-10 Thread Jon Otterholm
src to its own mac. I hope this makes it clear. /J On Thu, 2005-11-10 at 12:49 +, Brian Candler wrote: > On Wed, Nov 09, 2005 at 02:06:28PM +0100, Jon Otterholm wrote: > > I want to create a bridge-interface (if_bridge) with a bunch (500+) of > > sub-interfaces (vlan) as memb

arp-proxy

2005-11-09 Thread Jon Otterholm
Hi! I wonder if anyone have a soloution to my problem... I want to create a bridge-interface (if_bridge) with a bunch (500+) of sub-interfaces (vlan) as members. All members of the bridge should be able to "talk" to each other but MAC-addresses must be isolated to their "own" vlan. My thought is

if_bridge and vlan

2005-10-29 Thread Jon Otterholm
Hi. Does anyone know if if_bridge supports vlan-interfaces? /Jon ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"