On 12/03/13 00:44, Stuart Henderson wrote:
In gmane.os.openbsd.misc, you wrote:
On 09/03/13 14:50, Stuart Henderson wrote:
Yes, the routes to carp interfaces in BACKUP are advertised but with a
low priority (better to have the route stay in the table, even if it goes
to a backup firewall, rather than have it drop in and out).
Sorry to jump in, but Stuart are we sure about this?
In a current setup only the active firewall (carp master) is advertising
the network.
Hmm. Well that is the idea, but it seems it was accidentally eaten
by a tidy-up diff (ospfe.c r1.83). This restores it:
Index: ospfe.c
===================================================================
RCS file: /cvs/src/usr.sbin/ospfd/ospfe.c,v
retrieving revision 1.85
diff -u -p -r1.85 ospfe.c
--- ospfe.c 17 Jan 2013 10:07:56 -0000 1.85
+++ ospfe.c 11 Mar 2013 22:31:31 -0000
@@ -870,9 +870,12 @@ orig_rtr_lsa(struct area *area)
* do not add a stub net LSA for interfaces that are:
* - down
* - have a linkstate which is down
+ * unless they're carp, in which case down == backup
*/
if (!(iface->flags & IFF_UP) ||
- !LINK_STATE_IS_UP(iface->linkstate))
+ (!LINK_STATE_IS_UP(iface->linkstate) &&
+ !(iface->media_type == IFT_CARP &&
+ iface->linkstate == LINK_STATE_DOWN)))
continue;
log_debug("orig_rtr_lsa: stub net, "
"interface %s", iface->name);
Yes, the patch above fixes the problem of backup carp advertising the
network.
G
