Odd carp behavior

2012-11-26 Thread Carlos Flor
I have 2 firewalls setup running OpenBSD 5.1 amd64. I have 4 nics on each box. The nics are paired off into interface failover trunks. I then have 4 vlans configured on each box. 3 Vlans go over trunk0, one goes over trunk 1. I have carp setup on each box as well. I have a carp interface set

Carp issues

2013-02-28 Thread Carlos Flor
I have two firewalls running OpenBSD 5.1 with a 5.2 kernel amd64. I am running the 5.2 kernel because of another, unrelated bug. I have 4 ethernet interfaces (em0-4). em0 and em1 are in a failover trunk mode on trunk0 while em2 and em3 are members of trunk1 in failover mode. On trunk0, I have 3

Odd PMTU issue on ipsec tunnel

2012-05-11 Thread Carlos Flor
I have an openbsd 5.1-release box configured with an ipsec vpn to another identical openbsd machine. I am trying to test PMTU discovery by sending packets, both TCP and UDP, with the DF bit set. I get an ICMP Unreachable - Fragmentation needed packet as expected, however the "Next-Hop MTU:" field

Re: Odd PMTU issue on ipsec tunnel

2012-05-15 Thread Carlos Flor
50 and that's really bad :-( > > Thanks > > Matthias Vey > > > Am 11.05.2012 um 23:06 schrieb Carlos Flor : > > > I have an openbsd 5.1-release box configured with an ipsec vpn to another > > identical openbsd machine. I am trying to test PMTU discovery by sending