Re: OpenBGP on firewall

2006-02-16 Thread Reto Burkhalter
Hi I tried something similar: 2x machines (FreeBSD) with OpenBGPD, CARP (for fail-over of the internal default gateway), PF and pfsync. I encountered problems especially with assymetric routed traffic. E.g. traffic coming in via router 1, going to the client/server and going out via router 2.

Re: CARP on firewalls connected to ISP and OpenBGPd

2006-01-14 Thread Reto Burkhalter
Hi We wanted to do something similar - but try consider connecting one FW/router to ISP1 and the second to ISP2. Because if you use CARP to failover BGP sessions, you would loose the connection shortly. Your upstream ISPs detect this and withdraw your /24 from their routing table.. and

Re: OpenBGP+CARP : OpenBGP does not see CARP going into master state

2005-12-27 Thread Reto Burkhalter
Hi Sylvain OpenBGPd looks fine for eBGP and iBGP links as long as it does not depend on carp. I think this depend on is a nice feature - but I would not use for 100% fail save connections. You must take into account, that the session will go down if you trigger a failover. This might be

BGPD on FreeBSD

2005-12-20 Thread Reto Burkhalter
Hi list May be a little bit OT - but are there any users with experiences in using OpenBGPD on FreeBSD? I have some strange problems here. Setup is OpenBGPD 3.7 on FreeBSD 6-RELEASE. Just a basic config with one transit and one iBGP session with some standard filters (check prefixlen and rfc1918