Re: CARP and transit network to ISP

2012-10-02 Thread Jason Healy
On Oct 1, 2012, at 7:42 PM, Henning Brauer wrote: > that is some time ago? Yes, it was. We were probably still running 4.3 (or so) when we made the change to having the ISP hand everything off to a single address. Jason -- Jason Healy|jhe...@logn.net| http://www.logn.net/

Re: CARP and transit network to ISP

2012-10-01 Thread Henning Brauer
* Jason Healy [2012-08-22 03:37]: > We used to have a direct handoff (ISP router was on the same subnet as our IP > range) and we explicitly requested a transit network. We were using CARP > aliases for the /23 that we had, and it was affecting performance. that is some time ago? > From my unde

Re: CARP and transit network to ISP

2012-08-26 Thread Jason Healy
On Aug 22, 2012, at 3:52 AM, Tobias Crefeld wrote: > Not sure, if I understand you right: Did you move the /23 on another > ethernet interface when establishing the transit network (/30) ? No, we replaced it. We use NAT for all of our public IP addresses, so we didn't have to reassign anything;

Re: CARP and transit network to ISP

2012-08-22 Thread Tobias Crefeld
Am Tue, 21 Aug 2012 21:28:27 -0400 schrieb Jason Healy : > By changing to a /30 transit and doing away with the aliases, > performance on the OpenBSD box improved substantially. Not sure, if I understand you right: Did you move the /23 on another ethernet interface when establishing the transit n

Re: CARP and transit network to ISP

2012-08-21 Thread Jason Healy
On Aug 17, 2012, at 10:39 AM, Tobias Crefeld wrote: > Any idea how to deal with this issue? Or should we try to discuss with > the ISP to leave out this transit network? We used to have a direct handoff (ISP router was on the same subnet as our IP range) and we explicitly requested a transit netw

Re: CARP and transit network to ISP

2012-08-19 Thread Stuart Henderson
On 2012-08-17, Tobias Crefeld wrote: > Can anyone give me a hint how to setup a pair of "CARPed" firewall > machines to access an ISP via an direct ethernet link (fiber). He > assigned us a customer network ( /29) and a transit network ( /30) to > connect our (customer) network with his backbone w

Re: CARP and transit network to ISP

2012-08-17 Thread Russell Garrison
I have set up a pair of gateways for a similar scenario where the provider gave me /30 and an ethernet jack instead of providing a router on-premises. This is what I did: -Configured an interface on each machine to come up with no IP. -Configured a carpdev to use the no IP interface on each machin

CARP and transit network to ISP

2012-08-17 Thread Tobias Crefeld
Can anyone give me a hint how to setup a pair of "CARPed" firewall machines to access an ISP via an direct ethernet link (fiber). He assigned us a customer network ( /29) and a transit network ( /30) to connect our (customer) network with his backbone without extra router machine. All (active) addr