-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello again, sorry to bother you all again.

I have a question, we have two DSL connections, and I plan on using two
boxes, which are carped. But, I'd like to do this in a fashion such that
I can failover to a different connection when the primary one becomes
unusable. 

Would anyone have experience of doing this, and how exactly does one
determine that the connection has failed? Does it base the failure on
link status or on IP untouchables?

To illustrate what I am thinking here is a picture:

      .------------------.     .------------------.
      | internet cloud 1 |     | internet cloud 1 |
      `------------------'     `------------------'
 83.146.4.1/24 |                         | 65.10.5.1/24
               `-------------------------'
                         |
                 .----------------.
                 | switch         |
                 `----------------'
                         |
              .---------------------.
              |                     |
    .--------------------------------------.
    | carp0 83.146.4.3    carp1 65.10.5.3  |
    `--------------------------------------'
              |                     |
    .-----------------------.  .----------------------.
    | fw01                  |  | fw02                 |
    | fxp0 83.146.4.1       |--| fxp0 83.146.4.2      |
    | fxp0 alias 65.10.5.2  |  | fxp0 alias 65.10.5.3 |
    `-----------------------'  `----------------------'
             |                      |
                        ...


What I have thought is that I may be able to alias the second connection
on the external interfaces, and make a carp for that.



- -- 
/--  _| | Regards. Please note, my PGP key ID has changed.
|-- / | | If you are planning on sending me something encrypted
\__ \_| | please update your keyring. Debian/OpenBSD. 53C9FC6C.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBy0ajjtZArFPJ/GwRAoQWAJ48CzruBi/b6ThV7p9gsbJdtweeSACfSBWT
V2GIznEIHogkkcZm6ZgzpzY=
=r3MZ
-----END PGP SIGNATURE-----

Reply via email to