From owner-freebsd-net@FreeBSD.ORG Wed Jun 29 22:34:31 2005 Return-Path: X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8DD5316A41C for ; Wed, 29 Jun 2005 22:34:31 +0000 (GMT) (envelope-from babolo@cicuta.babolo.ru) Received: from ints.mail.pike.ru (ints.mail.pike.ru [195.9.45.194]) by mx1.FreeBSD.org (Postfix) with ESMTP id B683443D53 for ; Wed, 29 Jun 2005 22:34:30 +0000 (GMT) (envelope-from babolo@cicuta.babolo.ru) Received: (qmail 88371 invoked from network); 29 Jun 2005 22:34:28 -0000 Received: from cicuta.babolo.ru (194.135.49.133) by ints.mail.pike.ru with SMTP; 29 Jun 2005 22:34:28 -0000 Received: (nullmailer pid 23456 invoked by uid 136); Wed, 29 Jun 2005 22:36:39 -0000 X-ELM-OSV: (Our standard violations) hdr-charset=KOI8-R; no-hdr-encoding=1 In-Reply-To: <03ce01c57c81$1b980460$9f90a8c0@DONATAS> To: dnr Date: Thu, 30 Jun 2005 02:36:39 +0400 (MSD) From: .@babolo.ru X-Mailer: ELM [version 2.4ME+ PL99b (25)] MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII Message-Id: <1120084599.354789.23455.nullmailer@cicuta.babolo.ru> Cc: freebsd-net@freebsd.org Subject: Re: ipfw2 question X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Jun 2005 22:34:31 -0000 [ Charset ISO-8859-4 unsupported, converting... ] > hello, > i'm solving such a problem: > router with 3 eth i-faces: > > em0(vlan10) > (vlan1000)fxp0 > em1(vlan11) > > I need to split traffic into two pipes > pipe1 from vlan10 to vlan1000 > pipe2 from vlan11 to vlan1000 > > fxp side supplys traffic to many different subnets > em0 is trunk to the world networks > em1 is trunk to the national networks > so I cannot write these rules in IP level.... > > doing it in the following way doesn't works... > ipfw add pipe1 pass all from any to any via vlan10 in recv vlan1000 > ipfw add pipe1 pass all from any to any via vlan10 out xmit vlan1000 ipfw add pipe 1 ip from any to any out recv vlan10 xmit vlan1000 ipfw add pipe 2 ip from any to any out recv vlan11 xmit vlan1000 or may be better (not exact your ask) ipfw add pipe 1 ip from any to any in recv vlan10 ipfw add pipe 2 ip from any to any in recv vlan11