Re: pf/carp load balancing on 4 firewalls

2006-03-02 Thread Stuart Henderson
> First, regarding Carp and STP what happens usually in a manageable L2 > switch when the same MAC is announced on two different ports ? Switches often remember which ports a MAC was seen on, not which MACs were seen on each port. Not what you might first expect, but I think the common failover pr

Re: pf/carp load balancing on 4 firewalls

2006-03-02 Thread Sylvain Coutant
Thanks Jason for the details. I'm quite good from L3 and up, but I still never had to understand so much about L2 ;-)) > The problem you will/may encounter will differ based on the vendor of > SWITCH1 and SWITCH2. Some vendors will handle it OK if the MAC is a > multicast MAC, some will log a wa

Re: pf/carp load balancing on 4 firewalls

2006-03-02 Thread Jason Ackley
On Thu, 2 Mar 2006, Sylvain Coutant wrote: > First, regarding Carp and STP what happens usually in a manageable L2 > switch when the same MAC is announced on two different ports ? I don't > remember that STP includes loadsharing, so isn't it possible the switch > will only choose one port to forwa

pf/carp load balancing on 4 firewalls

2006-03-02 Thread Sylvain Coutant
Hi gurus, I'm working on a project where carp loadbalancing firewalls could exactly fit our needs. Before that, I wonder how it will work outside of the OpenBSD boxes. First, regarding Carp and STP what happens usually in a manageable L2 switch when the same MAC is announced on two different po