Jason Dixon escribió:
I'm attempting to setup a failover bridge(4) configuration with RSTP for
rapid failover. At this point I'm still tweaking the bridges and
switches. We're using a Foundry LS648 for this test, so we don't have
Cisco's "unplinkFast" extension at our disposal.
We have two VLANs configured on the switch, each with 802.1w enabled and
functioning normally. Plugged into each VLAN is a single client and one
interface from each firewall.
10.20.0.2 <-> vlan200 <-> bridge0 <-> vlan300 <-> 10.20.0.3
Regardless of whether I use rstp (default) or stp (+ ifpriority/ifcost)
on the bridges, it always takes ~5 minutes to failover. I noticed that
with stp enabled on the physical interfaces, the switch would
immediately show the correct bridge as the forwarding root. With the
default rstp, the switch shows all ports as designated forwarding.
I've also tried disabling learning on the internal interfaces and adding
static entries for 10.20.0.3, but this has no effect on the recovery
time.
Any suggestions on getting a rapid failover working?
I've got a pair of OpenBSD 4.2 boxes using RSTP perfectly with two DlinK
common switches.
They've been working fine during last year and the redundancy is
completely checked and reliable using RSTP.
Maybe the "problem" is the VLAN; I've not worked with VLAN in this
scenario and indeed I've suffering some VLAN/pf/bridge related-troubles .
The picture is
sw01 <---> fw1 <----> sw02
sw01 <---> fw2 <----> sw02
and config is
$ cat /etc/hostname.em0
up
[r...@ares] [~] [18:19:21]
$ cat /etc/hostname.em1
up
[r...@ares] [~] [18:19:23]
$ cat /etc/hostname.em2
inet 192.168.1.253 255.255.0.0 NONE
[r...@ares] [~] [18:19:25]
$ cat /etc/hostname.em3
inet 10.10.10.1 255.255.255.0 NONE
[r...@ares] [~] [18:19:27]
$ cat /etc/bridgename.bridge0
add em1
add em0
-learn em1
-learn em0
stp em1
stp em0
up
[r...@ares] [~] [18:19:37]
$ cat /etc/hostname.pfsync0
up syncdev em3
In both Dlink switches I've enabled RSTP support and simple make the
lower cost for fw01 path and more cost for fw02. Even I have a simple
"last-resort" wire with the higer RSTP cost.
--
Thanks,
Jordi Espasa Clofent
