Re: mpd5 and multiple route to send to clients

2013-03-18 Thread Yoann Gini
Le 19 mars 2013 à 05:49, Eugene M. Zheganin a écrit : > You cannot do this with a pptp or l2tp, they just don't have that ability. > Standard approach is either using remote pptp/l2tp peer as default gateway, > or creating a sticky route on the client side. Even if it’s not built-in the L2TP

Re: FreeBSD 9.1-RELEASE + bge0 == watchdog timeout

2013-03-18 Thread YongHyeon PYUN
On Mon, Mar 18, 2013 at 10:45:24AM +0600, Eugene M. Zheganin wrote: > Hi. > > On 14.03.2013 13:29, YongHyeon PYUN wrote: > > >I thought you were using stable/8 but it seems you have slightly > >older stable/8. The bge(4) code difference between CURRENT and > >stable9/stable8 is very minor. > Nah,

Re: mpd5 and multiple route to send to clients

2013-03-18 Thread Eugene M. Zheganin
Hi. On 18.03.2013 3:26, Yoann Gini wrote: Hello, I’m Yoann. It’s my first message here so a little brief about me. I’m a OS X Server System Administrator and Trainer, actually working on a FreeBSD based setup for a simple service provider infrastructure. I currently setup a L2TP over IPSec V

Re: Limits on jumbo mbuf cluster allocation

2013-03-18 Thread Garrett Wollman
< said: > I've attached a patch that has assorted changes. So I've done some preliminary testing on a slightly modified form of this patch, and it appears to have no major issues. However, I'm still waiting for my user with 500 VMs to have enough free to be able to run some real stress tests fo

Re: Carp strange behavior

2013-03-18 Thread Rafael Ganascim
2013/3/18 Damien Fleuriot > > On 18 Mar 2013, at 22:22, Rafael Ganascim wrote: > > > Hi list, > > > > I have multiple FreeBSD firewalls with carp working well. I have no > problem > > and the vast majority of firewalls works perfectly. > > > > But now, I'm with problems with a simple firewall cl

Re: Carp strange behavior

2013-03-18 Thread Damien Fleuriot
On 18 Mar 2013, at 22:22, Rafael Ganascim wrote: > Hi list, > > I have multiple FreeBSD firewalls with carp working well. I have no problem > and the vast majority of firewalls works perfectly. > > But now, I'm with problems with a simple firewall cluster with carp that > the state randomly go

Re: mpd5 and multiple route to send to clients

2013-03-18 Thread Joe Holden
Yoann Gini wrote: Le 18 mars 2013 à 21:48, Joe Holden a écrit : You use something that can push configuration the client, like openvpn or run dhcp over something Well, I really don’t understand. From my experience, with a Cisco VPN Concentrator or a OS X VPN Server or a Windows VPN Server

Re: mpd5 and multiple route to send to clients

2013-03-18 Thread Yoann Gini
Le 18 mars 2013 à 22:22, Yoann Gini a écrit : > > Le 18 mars 2013 à 21:48, Joe Holden a écrit : > >> You use something that can push configuration the client, like openvpn or >> run dhcp over something > > Well, I really don’t understand. > > From my experience, with a Cisco VPN Concentrat

Carp strange behavior

2013-03-18 Thread Rafael Ganascim
Hi list, I have multiple FreeBSD firewalls with carp working well. I have no problem and the vast majority of firewalls works perfectly. But now, I'm with problems with a simple firewall cluster with carp that the state randomly goes to MASTER and randomly returns to BACKUP. Looking to the L1/L2

Re: mpd5 and multiple route to send to clients

2013-03-18 Thread Yoann Gini
Le 18 mars 2013 à 21:48, Joe Holden a écrit : > You use something that can push configuration the client, like openvpn or run > dhcp over something Well, I really don’t understand. From my experience, with a Cisco VPN Concentrator or a OS X VPN Server or a Windows VPN Server, you can set a L

Re: mpd5 and multiple route to send to clients

2013-03-18 Thread Joe Holden
Yoann Gini wrote: Hi, Le 18 mars 2013 à 18:23, Joe Holden a écrit : The radius entry tells the NAS (mpd in this case) to add a route towards the client, the route/ip will still need to be configured on the client side, do you see a correct entry on the NAS? (route -n get 10.42.0.0/23) OK,

Re: mpd5 and multiple route to send to clients

2013-03-18 Thread Yoann Gini
Hi, Le 18 mars 2013 à 18:23, Joe Holden a écrit : > The radius entry tells the NAS (mpd in this case) to add a route towards the > client, the route/ip will still need to be configured on the client side, do > you see a correct entry on the NAS? (route -n get 10.42.0.0/23) OK, that’s still no

Surge 2013 CFP Open

2013-03-18 Thread Katherine Jeschke
The Surge 2013 CFP is open. For details or to submit a paper, please visit http://surge.omniti.com/2013 -- Katherine Jeschke Director of Marketing and Creative Services OmniTI Computer Consulting, Inc. 11830 West Market Place, Suite F Fulton, MD 20759 O: 240-646-0770, 222 F: 301-497-2001 C: 443/6

Re: mpd5 and multiple route to send to clients

2013-03-18 Thread Joe Holden
Yoann Gini wrote: Hi, Thank you for your answer. Le 18 mars 2013 à 01:54, Joe Holden a écrit : If you're using radius, see 'framed-route'... if not, see external auth Well, that’s a unexpected answer, I will never think to set that information in the Radius server instead of the VPN serve

Account is at risk

2013-03-18 Thread Citibank Services
ATTENTION __ Your credit card account information is obtained illegally from a merchant's records, credit card numbers are exposed, putting those accounts at risk for fraudulent activity. [1]Validate bank details.

Re: MPLS

2013-03-18 Thread Andre Oppermann
On 18.03.2013 13:20, Alexander V. Chernikov wrote: On 17.03.2013, at 23:54, Andre Oppermann wrote: On 17.03.2013 19:57, Alexander V. Chernikov wrote: On 17.03.2013 13:20, Sami Halabi wrote: ITOH OpenBSD has a complete implementation of MPLS out of the box, maybe Their control plane code is

Re: MPLS

2013-03-18 Thread Alexander V. Chernikov
On 17.03.2013, at 23:54, Andre Oppermann wrote: > On 17.03.2013 19:57, Alexander V. Chernikov wrote: >> On 17.03.2013 13:20, Sami Halabi wrote: ITOH OpenBSD has a complete implementation of MPLS out of the box, maybe >> Their control plane code is mostly useless due to design approach (routi

Re: mpd5 and multiple route to send to clients

2013-03-18 Thread Yoann Gini
Hi, Thank you for your answer. Le 18 mars 2013 à 01:54, Joe Holden a écrit : > If you're using radius, see 'framed-route'... if not, see external auth Well, that’s a unexpected answer, I will never think to set that information in the Radius server instead of the VPN server… That’s the only

Re: carp regression in 9.1 ?

2013-03-18 Thread Eugene M. Zheganin
Hi. On 18.03.2013 14:23, Damien Fleuriot wrote: I'm afraid I can't afford 10.x, this is for production, although I acknowledge the problems you're faced with. Regarding 8.x, this is a guest VM running on proxmox 2.3 which doesn't support stock 8.x (need the virtio kernel option, I'll get a th

Current problem reports assigned to freebsd-net@FreeBSD.org

2013-03-18 Thread FreeBSD bugmaster
Note: to view an individual PR, use: http://www.freebsd.org/cgi/query-pr.cgi?pr=(number). The following is a listing of current problems submitted by FreeBSD users. These represent problem reports covering all versions including experimental development code and obsolete releases. S Tracker

Re: carp regression in 9.1 ?

2013-03-18 Thread Damien Fleuriot
On 17 Mar 2013, at 11:03, "Eugene M. Zheganin" wrote: > Hi. > > On 14.03.2013 20:47, Fleuriot Damien wrote: >> I'm experiencing this odd behavior with 9.1 r24791 for amd64. > You should definitely sit on 8.x until 10.x will become stable, or upgrade to > 10.x from 9.x (at least this is what I

Re: carp regression in 9.1 ?

2013-03-18 Thread Fleuriot Damien
On Mar 18, 2013, at 9:23 AM, Damien Fleuriot wrote: > > On 17 Mar 2013, at 11:03, "Eugene M. Zheganin" wrote: > >> Hi. >> >> On 14.03.2013 20:47, Fleuriot Damien wrote: >>> I'm experiencing this odd behavior with 9.1 r24791 for amd64. >> You should definitely sit on 8.x until 10.x will becom