Re: [Vyatta-users] backup route question

2008-02-05 Thread Stig Thormodsrud
Hi Dave, I think it was Ken Felix that mentioned using different metrics to get similar functionalty to xorp's qualified-next-hop feature. I'll verify that when I get in the office tomorrow. stig > Hi Stig, > > What i was looking for was "next-hop & qualified-next-hop". > next-hop being the 10

Re: [Vyatta-users] backup route question

2008-02-05 Thread Dave Strydom
Hi Stig, What i was looking for was "next-hop & qualified-next-hop". next-hop being the 10.10.1.2 and qualified-next-hop being 10.10.2.2 This actually works really well. - Dave ___ Vyatta-users mailing list Vyatta-users@mailman.vyatta.com http://mailm

Re: [Vyatta-users] ps3

2008-02-05 Thread Nathan McBride
I actually couldn't figure how to get the firewall made in vyatta... I ended up just making an rc script to build iptables on startup. :D Nate I'll give this a try and let you know. If I can get it working I'll write up a howto. On Tue, 2008-02-05 at 08:05 -0800, Justin Fletcher wrote: > Sure -

Re: [Vyatta-users] IPSec Termination

2008-02-05 Thread Dunmoodie, Carlos
I agree, but with our solution, IP addressing is coming from WSP dynamically. so the use of aggressive mode is needed. -Carlos -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of ken Felix Sent: Tuesday, February 05, 2008 11:39 AM To: vyatta-users@mailman.vya

Re: [Vyatta-users] backup route question

2008-02-05 Thread Stig Thormodsrud
> Hi, > > Is there a way in vyatta to do backup routes like: > > route 10.10.33.0/24 to 10.10.1.2 via eth1 > > BUT if eth1 is not up (because say that switch died). > > route 10.10.33.0/24 to 10.10.2.2 via eth2 That should work. Also, with the Glendale release we support ECMP, so you can also

Re: [Vyatta-users] WAN Load Balancing

2008-02-05 Thread Dave Roberts
> Thanks for your quick reply. I am agreed that we can test the > multiple WAN load balancing feature before it is released to > help with your testing. But one thing I forgot to mention > about the broadband connection, is that it has a maximum data > transfer of 20GB per month. > That is why

[Vyatta-users] backup route question

2008-02-05 Thread ken Felix
Adjust the metric for the static routes i.e set protocols static route10.10.33.0/24 metric 10 next-hop eth2-address ___ Vyatta-users mailing list Vyatta-users@mailman.vyatta.com http://mailman.vyatta.com/mailman/listinfo/vyatta-users

[Vyatta-users] IPSec Termination

2008-02-05 Thread ken Felix
I have to check, but I think in my previous experience with strongswan and linux, the auto=ignore is what I've used in the past to make the ipsec client sit as receiver. Aggressive mode iirc is not what it seems like, but a way that the P1 is established and how many steps are taken in doin

[Vyatta-users] vLAN & Switch

2008-02-05 Thread ken Felix
You will need at least 2 vlans created ( vlan 20 & 30 ). Not sure on how a d-link work but a cisco would be something like this; config t ! ! vlan 20 name net20 ! vlan 30 name net30 ! ! interface fas 0/1 switchport trunk allowed vlan 1,20,30 switchport mode trunk ! write mem I'm ass

Re: [Vyatta-users] IPSec Termination

2008-02-05 Thread Dunmoodie, Carlos
Let me add in, that I'm using aggressive mode. The initiating stations are dynamic. Will this change your answer? -Carlos -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of ken Felix Sent: Monday, February 04, 2008 7:32 PM To: vyatta-users@mailman.vyatta.com

[Vyatta-users] backup route question

2008-02-05 Thread Dave Strydom
Hi, Is there a way in vyatta to do backup routes like: route 10.10.33.0/24 to 10.10.1.2 via eth1 BUT if eth1 is not up (because say that switch died). route 10.10.33.0/24 to 10.10.2.2 via eth2 - Dave ___ Vyatta-users mailing list Vyatta-users@mailma

Re: [Vyatta-users] vLAN & Switch

2008-02-05 Thread Go Wow
Can someone help with with this, I have a switch withvLAN enabled from D-link DES-1226. I have my eth0 as 192.168.10.45 eth1 >> 192.168.1.1 eth1.20>> 192.168.20.1 eth1.30>> 192.168.30.1 Now i want to access these 2 vLANs, what settings do i need to make