Re: [Openvpn-devel] Patch: TAP usage made non ARP dependent

2005-10-10 Thread Rolf Fokkens
Marcelo Toledo wrote: Sat Oct 8 14:28:25 2005 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ] Sat Oct 8 14:28:25 2005 Listening for incoming TCP connection on [undef]:1194 Sat Oct 8 14:28:25 2005 TCPv4_SERVER link local (bound): [undef]:1194 Sat Oct 8 14:28:25 2005 TC

Re: [Openvpn-devel] Patch: TAP usage made non ARP dependent

2005-10-10 Thread Marcelo Toledo
Em Dom, 2005-10-09 às 13:22 +0200, Rolf Fokkens escreveu: > Attached the patch with #ifdefs. I added a #define MACTAB in > config.h.in, though that may not be the proper way to do it. > > I tested it with and without the #define MACTAB, both ways it compiles > and runs OK with a TAP interface. I d

Re: [Openvpn-devel] Patch: TAP usage made non ARP dependent

2005-10-09 Thread Rolf Fokkens
Rolf Fokkens wrote: James Yonan wrote: Also, it would be great if you could #ifdef this code so that we can turn it on or off. Sure, I'll do that. I'll do it based on mac_table.[ch], to save time. OK? If you want we can integrate mac_table functionality into lists.[ch], but it may require

Re: [Openvpn-devel] Patch: TAP usage made non ARP dependent

2005-10-09 Thread Rolf Fokkens
James Yonan wrote: Why don't you use the existing multi_context::vhash hash to keep track of the server-side MAC table? I know that this hash is usually used to associate MAC or IP addresses with a given client instance, but it seems ideally suited for this. Maybe you could add a flag to struc

Re: [Openvpn-devel] Patch: TAP usage made non ARP dependent

2005-10-08 Thread James Yonan
On Sat, 8 Oct 2005, Rolf Fokkens wrote: > Rolf Fokkens wrote: > > > The problem is caused by the fact that the MAC table only keeps track > > of MAC's behind clients, no MAC's behind the TAP interface are > > registered. This can easily be fixed by registering them as well. I'll > > get back o

Re: [Openvpn-devel] Patch: TAP usage made non ARP dependent

2005-10-08 Thread Rolf Fokkens
Rolf Fokkens wrote: The problem is caused by the fact that the MAC table only keeps track of MAC's behind clients, no MAC's behind the TAP interface are registered. This can easily be fixed by registering them as well. I'll get back on that as well. Well, another patch. It contains a new MAC

Re: [Openvpn-devel] Patch: TAP usage made non ARP dependent

2005-10-07 Thread Rolf Fokkens
Marcelo Toledo wrote: In the main server we installed the patch. We have ~400 clients connected to it, 3 of them we also installed the patch, here is the result. All these 3 clients couldn't see each other but they could see the remaining 397 clients. The 397 couldn't see the 3 clients. I thin

Re: [Openvpn-devel] Patch: TAP usage made non ARP dependent

2005-10-07 Thread Leonard Isham
On 10/7/05, Marcelo Toledo wrote: > Em Sex, 2005-10-07 às 18:19 +0200, Rolf Fokkens escreveu: > > > > Could be a silly question, but to be sure: you had the client-to-client > > option enabled on the server side? > > Yes we do. > > > The patch should work both on the client and the server, but for

Re: [Openvpn-devel] Patch: TAP usage made non ARP dependent

2005-10-07 Thread Rolf Fokkens
Marcelo Toledo wrote: Em Sex, 2005-10-07 às 18:19 +0200, Rolf Fokkens escreveu: Could be a silly question, but to be sure: you had the client-to-client option enabled on the server side? Yes we do. The patch should work both on the client and the server, but for clients it hardly

Re: [Openvpn-devel] Patch: TAP usage made non ARP dependent

2005-10-07 Thread Marcelo Toledo
Em Sex, 2005-10-07 às 18:19 +0200, Rolf Fokkens escreveu: > > Could be a silly question, but to be sure: you had the client-to-client > option enabled on the server side? Yes we do. > The patch should work both on the client and the server, but for clients > it hardly does anything at all. alr

Re: [Openvpn-devel] Patch: TAP usage made non ARP dependent

2005-10-07 Thread Rolf Fokkens
Marcelo Toledo wrote: We have tested it in two ways: 1. Applied only in the server, worked perfectly with 3 clients. Right now we're going to try few hundreds. 2. Applied the patch only in the client, worked well but they couldn't see each other. Should I apply in both or only in the server i

Re: [Openvpn-devel] Patch: TAP usage made non ARP dependent

2005-10-06 Thread Marcelo Toledo
Em Ter, 2005-10-04 às 20:57 +0200, Rolf Fokkens escreveu: > Marcelo Toledo wrote: > > Em Ter, 2005-10-04 às 14:06 +0200, Rolf Fokkens escreveu: > > > > > So another thing that should be implemented probably is aging. > > > > > > > Alright, I am aware. Are you planning working on this? > >

Re: [Openvpn-devel] Patch: TAP usage made non ARP dependent

2005-10-04 Thread Marcelo Toledo
Em Ter, 2005-10-04 às 20:57 +0200, Rolf Fokkens escreveu: > Marcelo Toledo wrote: > > Em Ter, 2005-10-04 às 14:06 +0200, Rolf Fokkens escreveu: > > > > > So another thing that should be implemented probably is aging. > > > > > > > Alright, I am aware. Are you planning working on this? > >

Re: [Openvpn-devel] Patch: TAP usage made non ARP dependent

2005-10-04 Thread Rolf Fokkens
Marcelo Toledo wrote: Em Ter, 2005-10-04 às 14:06 +0200, Rolf Fokkens escreveu: So another thing that should be implemented probably is aging. Alright, I am aware. Are you planning working on this? Attached you'll find find a new patch which includes aging. Could you try? diff -ru

Re: [Openvpn-devel] Patch: TAP usage made non ARP dependent

2005-10-04 Thread Marcelo Toledo
Em Ter, 2005-10-04 às 14:06 +0200, Rolf Fokkens escreveu: > > So another thing that should be implemented probably is aging. Alright, I am aware. Are you planning working on this? -- Marcelo Toledo

Re: [Openvpn-devel] Patch: TAP usage made non ARP dependent

2005-10-04 Thread Rolf Fokkens
Marcelo Toledo wrote: great to read it! We're going to test your patch. Thanks a lot. Wonderful, beware however there's another issue te be resolved: MAC aging. Switches require their mac-table te be refreshed regularly, otherwise the MAC entries are aged out (on cisco in 300 sec). OpenVPN

Re: [Openvpn-devel] Patch: TAP usage made non ARP dependent

2005-10-03 Thread Marcelo Toledo
Em Seg, 2005-10-03 às 21:43 +0200, Rolf Fokkens escreveu: > Hi, > > Using OpenVPN to build a WAN, I noticed a disturbing thing: After > failing over to secondary OpenVPN server it takes a long time until a > ping to a client side IP works again. I think I know what's happening: > ... great to re