Failing over firewalls

2004-03-28 Thread tefol tefol
Hiya. IS it possible to fail over OpenBSD + PF firewalls? What are the impliocations if there are several VPNs terminated on the firewall as well. Cha tefol _ Check out MSN PC Safety & Security to help ensure your PC is protected

Can't get bridges to failover

2004-03-28 Thread Russell Fulton
Hi I have a couple of boxes running 3.4 acting as bridges in parallel. Now that I have the spanning tree stuff set up they now coexist happily however when I unplug the active bridge the load does not appear to fail over to the other one. Unfortunately I don't have a test setup so I am working o

Re: Can't get bridges to failover

2004-03-28 Thread Dan
Normal STP should converge within 50 seconds. 2*forward time + max_age time = 15*2 + 20 = 50 It's also depends on how your fw connected (what swtiches and how) On Mon, 29 Mar 2004 08:40:09 +1200, Russell Fulton <[EMAIL PROTECTED]> wrote: Hi I have a couple of boxes running 3.4 acting as bridges

Re: Failing over firewalls

2004-03-28 Thread Jon Mosco
Take a look at pfsync(4) and carp(4). Jon On Sun, 28 Mar 2004 18:23:07 + "tefol tefol" <[EMAIL PROTECTED]> wrote: > Hiya. > > IS it possible to fail over OpenBSD + PF firewalls? > > What are the impliocations if there are several VPNs terminated on the > firewall as well. > > Cha > >

Re: Failing over firewalls

2004-03-28 Thread Dan
ifstated is also very important when you want to protect yourself from link failure. On Sun, 28 Mar 2004 18:23:07 +, tefol tefol <[EMAIL PROTECTED]> wrote: Hiya. IS it possible to fail over OpenBSD + PF firewalls? What are the impliocations if there are several VPNs terminated on the fi