Single IP failover without carpdev

2007-07-18 Thread Alexandre Biancalana
Hi list, I'm using 6-STABLE and need to do failover between 2 firewall machines, but my Internet connection have just one valid ip address. Carp documentation describes that carp interface is associated with physical interfaces via ip address configuration. How can I associate carp interface wi

Re: Single IP failover without carpdev

2007-07-19 Thread Marko Lerota
"Alexandre Biancalana" <[EMAIL PROTECTED]> writes: > Hi list, > > I'm using 6-STABLE and need to do failover between 2 firewall machines, > but my Internet connection have just one valid ip address. And?, this is the most usual config in almost any network :) You can easily implement CARP on thi

Re: Single IP failover without carpdev

2007-07-19 Thread Alexandre Biancalana
On 7/19/07, Marko Lerota <[EMAIL PROTECTED]> wrote: And?, this is the most usual config in almost any network :) You can easily implement CARP on this. Right ! I think it too... let's the me show one example to clarify my doubt. External IP: 192.168.1.2 netmask 255.255.255.252 Default Rout

Re: Single IP failover without carpdev

2007-07-20 Thread Dalibor Gudzic
On 7/20/07, Alexandre Biancalana <[EMAIL PROTECTED]> wrote: On 7/19/07, Marko Lerota <[EMAIL PROTECTED]> wrote: >How can I associate carp interface with physical interface without ifconfig >carpdev option and without have more ips available in the same network of >carp interface ? I'm not s

Re: Single IP failover without carpdev

2007-07-20 Thread David DeSimone
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dalibor Gudzic <[EMAIL PROTECTED]> wrote: > > http://www.openbsd.org/faq/pf/carp.html > > I think You think that one must have two IP addresses to get redundant > failover firewalls with Carp? That is OpenBSD's documentation you are referring to, but

Re: Single IP failover without carpdev

2007-07-20 Thread Dalibor Gudzic
Ah, sorry, got lost in tons of messages, didn't see where I was replying to. My apology. On 7/20/07, David DeSimone <[EMAIL PROTECTED]> wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dalibor Gudzic <[EMAIL PROTECTED]> wrote: > > http://www.openbsd.org/faq/pf/carp.html > > I think You thi

Re: Single IP failover without carpdev

2007-07-20 Thread Alexandre Biancalana
On 7/20/07, David DeSimone <[EMAIL PROTECTED]> wrote: -BEGIN PGP SIGNED MESSAGE- That is OpenBSD's documentation you are referring to, but this is FreeBSD we are talking about. The implementation is not the same. In order for CARP to be effective, it must send out hello packets on a pa

Re: Single IP failover without carpdev

2007-07-20 Thread Max Laier
I am working on a patch to bring over carpdev functionality sponsored by pil.sk This will, however, take a bit longer than I initially though it would. -- /"\ Best regards, | [EMAIL PROTECTED] \ / Max Laier | ICQ #67774661 X http://pf4freebsd.

Re: Single IP failover without carpdev

2007-07-20 Thread Tom Judge
Alexandre Biancalana wrote: On 7/20/07, David DeSimone <[EMAIL PROTECTED]> wrote: -BEGIN PGP SIGNED MESSAGE- That is OpenBSD's documentation you are referring to, but this is FreeBSD we are talking about. The implementation is not the same. In order for CARP to be effective, it must s

Re: Single IP failover without carpdev

2007-07-20 Thread Alexandre Biancalana
On 7/20/07, Max Laier <[EMAIL PROTECTED]> wrote: I am working on a patch to bring over carpdev functionality sponsored by pil.sk This will, however, take a bit longer than I initially though it would. Great !! ___ freebsd-pf@freebsd.org mailing lis

Re: Single IP failover without carpdev

2007-07-26 Thread Alexandre Biancalana
On 7/20/07, Max Laier <[EMAIL PROTECTED]> wrote: I am working on a patch to bring over carpdev functionality sponsored by pil.sk This will, however, take a bit longer than I initially though it would. Any news about it ? ___ freebsd-pf@freebsd.org