Re: Using bridge and carp interfaces with pf rules

On 06/16/2012 12:24 PM, carlopmart wrote: Hi all, I have setup a bridge between two interfaces in a pair of OpenBSD fws. This bridge needs to use an IP address and a carp interface to act as a gateway for two physical nets using same network range, but it doesn't works. My config: /etc/hostnam

Using bridge and carp interfaces with pf rules

Hi all, I have setup a bridge between two interfaces in a pair of OpenBSD fws. This bridge needs to use an IP address and a carp interface to act as a gateway for two physical nets using same network range, but it doesn't works. My config: /etc/hostname.em6 up /etc/hostname.em7 inet 172.2

Re: bridge and carp

alexander lind wrote: > On Aug 20, 2008, at 12:06 AM, Marco Fretz wrote: > >>> Is it possible to have two OpenBSD bridging firewalls work together >>> with CARP now? >> >> What do you mean by "work together"? Only fail-over? load-share? > > Fail-over is my primary concern. > >>> >>> Update the i

Re: bridge and carp

On Aug 20, 2008, at 12:06 AM, Marco Fretz wrote: Is it possible to have two OpenBSD bridging firewalls work together with CARP now? What do you mean by "work together"? Only fail-over? load-share? Fail-over is my primary concern. Update the ifp of bridge cache entries if the entry is not

Re: bridge and carp

On Wed, Aug 20, 2008 at 04:30:36PM +0200, Harald Dunkel wrote: > Check the pfsync man page about how pfsync and carp are related > in a failover scenario. Then check the code to see who wrote this stuff Cheers, Paul 'WEiRD' de Weerd > Henning Brauer wrote: [lots of code in the networking a

Re: bridge and carp

Check the pfsync man page about how pfsync and carp are related in a failover scenario. Henning Brauer wrote: * Harald Dunkel <[EMAIL PROTECTED]> [2008-08-20 09:43]: Marco Fretz wrote: Bridges are layer 2, carp is layer 3 (it shares IP addresses). So carp can not handle this by its nature I th

Re: bridge and carp

* Harald Dunkel <[EMAIL PROTECTED]> [2008-08-20 09:43]: > Marco Fretz wrote: >> >> Bridges are layer 2, carp is layer 3 (it shares IP addresses). So carp >> can not handle this by its nature I think. Just place the both bridges >> in your LAN and you have your fail-over solution. > > Packet Filter

Re: bridge and carp

Marco Fretz wrote: Bridges are layer 2, carp is layer 3 (it shares IP addresses). So carp can not handle this by its nature I think. Just place the both bridges in your LAN and you have your fail-over solution. Packet Filter still does stateful inspection, even in bridging mode, AFAIK. So bot

Re: bridge and carp

hi alec, alexander lind wrote: > Is it possible to have two OpenBSD bridging firewalls work together > with CARP now? What do you mean by "work together"? Only fail-over? load-share? > > In the past I know it has been impossible to use CARP between two > bridging firewalls, but reading the

Re: bridge and carp

On Aug 19, 2008, at 6:11 PM, alexander lind wrote: Is it possible to have two OpenBSD bridging firewalls work together with CARP now? In the past I know it has been impossible to use CARP between two bridging firewalls, but reading the 4.1 -> 4.2 changelog, I learned about this change: Update

bridge and carp

Is it possible to have two OpenBSD bridging firewalls work together with CARP now? In the past I know it has been impossible to use CARP between two bridging firewalls, but reading the 4.1 -> 4.2 changelog, I learned about this change: Update the ifp of bridge cache entries if the entry is