Re: bridge and Spanning Tree, WAS Re: Help with bridging firewall failover w/ CARP, OpenBSD 3.7

On 21/11/05, Camiel Dobbelaar <[EMAIL PROTECTED]> wrote: > Definitely the MAC (not ARP) caches of the bridges and the switches. STP > devices can help speed up transitions by timing out entries sooner when > a topology change is detected. > > I'm not sure if the OpenBSD bridge does that, the unman

bridge and Spanning Tree, WAS Re: Help with bridging firewall failover w/ CARP, OpenBSD 3.7

All, I set up failover of two redundant bridging firewalls using the Spanning Tree Protocol options in bridge, and it worked great. However, when testing failover, it takes between 45 seconds to more than 3 minutes for traffic to start flowing again. The interfaces themselves change state in the

Re: Help with bridging firewall failover w/ CARP, OpenBSD 3.7

On 11/19/05, Camiel Dobbelaar <[EMAIL PROTECTED]> wrote: > > On Sat, 19 Nov 2005, Ramsey Tantawi wrote: > > > For a redundant bridge setup you need spanning tree. See "stp" in the > > > brconfig(8) manpage. > > > > I'm using unmanag

Re: Help with bridging firewall failover w/ CARP, OpenBSD 3.7

On 11/19/05, Camiel Dobbelaar <[EMAIL PROTECTED]> wrote: > > Carp is meant to fail over addresses, not interfaces. > > For a redundant bridge setup you need spanning tree. See "stp" in the > brconfig(8) manpage. I'm using unmanaged switches that don't support STP, so for now I'm out of luck. Tha

Help with bridging firewall failover w/ CARP, OpenBSD 3.7

I can't get failover of a bridging firewall to work using CARP and OpenBSD 3.7. All the documentation + googling I've done leads me to believe it *should* work. I think. But with everything setup all I get is a flood of ARP requests that paralyze the network and the firewalls. The setup: Two c