Re: CARP and pfsync weird behaviour

2008-04-14 Thread openbsd firewall
If I configure all carp interfaces via command line (removed the hostname.if carps) after machine is rebooted this "problem" doesn't happen ! :O This is crazy and I'm out of ideas for now. I was playing with carpdemote and state transition from master to backup and vice-versa works fine. It's somet

Re: CARP and pfsync weird behaviour

2008-04-14 Thread Henning Brauer
* openbsd firewall <[EMAIL PROTECTED]> [2008-04-14 16:12]: > All switches are CISCO 2900 and 3500. Is there any recommend configuration > for these switches ? yes. involves a nice pack of explosives and a lighter. that said, i have used these shitty things in a dark time long long ago, and they

Re: CARP and pfsync weird behaviour

2008-04-14 Thread Stuart Henderson
On 2008-04-14, openbsd firewall <[EMAIL PROTECTED]> wrote: > Some news about this... If I change vhid on the backup node this problem > doesn't occurs since the ARP for the master node is still in cache and > backup node now has a different mac address for the carp interfaces. Of > course changing

Re: CARP and pfsync weird behaviour

2008-04-14 Thread openbsd firewall
Hello, Some news about this... If I change vhid on the backup node this problem doesn't occurs since the ARP for the master node is still in cache and backup node now has a different mac address for the carp interfaces. Of course changing vhid and IP doesn't give any trouble at all. It seems the b

Re: CARP and pfsync weird behaviour

2008-04-11 Thread openbsd firewall
Dmesg for backup node: Apr 11 10:21:34 bbq /bsd: OpenBSD 4.2 (GENERIC) #375: Tue Aug 28 10:38:44 MDT 2007 Apr 11 10:21:34 bbq /bsd: [EMAIL PROTECTED]: /usr/src/sys/arch/i386/compile/GENERIC Apr 11 10:21:34 bbq /bsd: cpu0: Dual-Core AMD Opteron(tm) Processor 1210 HE ("AuthenticAMD" 686-class, 1

Re: CARP and pfsync weird behaviour

2008-04-11 Thread Jason Dixon
On Apr 11, 2008, at 10:25 AM, openbsd firewall wrote: Same results with ACPI enabled on both nodes. On 11/04/2008, Jason Dixon <[EMAIL PROTECTED]> wrote: I was implying that you should enable ACPI and try again. Let's see your dmesg with acpi enabled. --- Jason Dixon DixonGroup Consulting h

Re: CARP and pfsync weird behaviour

2008-04-11 Thread openbsd firewall
Same results with ACPI enabled on both nodes. On 11/04/2008, Jason Dixon <[EMAIL PROTECTED]> wrote: > > I was implying that you should enable ACPI and try again. > > -J. > > On Apr 10, 2008, at 7:08 PM, "openbsd firewall" <[EMAIL PROTECTED]> > wrote:

Re: CARP and pfsync weird behaviour

2008-04-10 Thread Jason Dixon
I was implying that you should enable ACPI and try again. -J. On Apr 10, 2008, at 7:08 PM, "openbsd firewall" <[EMAIL PROTECTED] > wrote: Hello, It's booting with default behaviour so no ACPI enabled. Here's dmesg output for the backup node (master is exactly the same hardware). Apr 10 17:

Re: CARP and pfsync weird behaviour

2008-04-10 Thread openbsd firewall
Hello, It's booting with default behaviour so no ACPI enabled. Here's dmesg output for the backup node (master is exactly the same hardware). Apr 10 17:40:23 bbq /bsd: OpenBSD 4.2 (GENERIC) #375: Tue Aug 28 10:38:44 MDT 2007 Apr 10 17:40:23 bbq /bsd: [EMAIL PROTECTED]: /usr/src/sys/arch/i386/

Re: CARP and pfsync weird behaviour

2008-04-10 Thread Jason Dixon
Is ACPI enabled? -J. On Apr 10, 2008, at 6:07 PM, "openbsd firewall" <[EMAIL PROTECTED] > wrote: Hello, This got even more interesting. After reading your email I had the idea to start turning off the various carp interfaces to see what would be the effect. I have two onboard "Broadcom B

Re: CARP and pfsync weird behaviour

2008-04-10 Thread openbsd firewall
Hello, This got even more interesting. After reading your email I had the idea to start turning off the various carp interfaces to see what would be the effect. I have two onboard "Broadcom BCM5704C" and a "Intel PRO/1000MT QP (82546GB)" quad nic. One carp is configured for one onboard nic and two

Re: CARP and pfsync weird behaviour

2008-04-10 Thread Calomel
John, I ran a test using iperf on an external openbsd system (client) through a carp firewall to an internal openbsd system (server). All systems are running OpenBSD v4.2 with the latest patches. external ---> CARP ---> internal (iperf -i 1 -t 600 -c carp0)(ip

CARP and pfsync weird behaviour

2008-04-10 Thread openbsd firewall
Hello, I'm testing an OpenBSD 4.2 firewall with Iperf and I'm experiencing a very strange behaviour. What happens is that when I reboot the backup node the connection rate drops while the backup node is coming back. Iperf log: [ 3] 233.0-234.0 sec 6.62 MBytes 55.5 Mbits/sec [ 3] 234.0-235.0 se