From owner-freebsd-pf@FreeBSD.ORG Tue Jul 19 12:34:12 2005 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 51CD416A41F for ; Tue, 19 Jul 2005 12:34:12 +0000 (GMT) (envelope-from kl@vsen.dk) Received: from www.EnableIT.dk (r2d2.enableit.dk [195.35.83.82]) by mx1.FreeBSD.org (Postfix) with ESMTP id B181143D46 for ; Tue, 19 Jul 2005 12:34:11 +0000 (GMT) (envelope-from kl@vsen.dk) Received: from localhost (localhost [127.0.0.1]) by www.EnableIT.dk (Postfix) with ESMTP id 8C054600EB for ; Tue, 19 Jul 2005 14:40:30 +0200 (CEST) Received: from [192.168.10.51] (gw02.telmore.dk [62.242.232.132]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by www.EnableIT.dk (Postfix) with ESMTP id 6C955558D for ; Tue, 19 Jul 2005 14:40:28 +0200 (CEST) Message-ID: <42DCF377.6020407@vsen.dk> Date: Tue, 19 Jul 2005 14:35:03 +0200 From: Klavs Klavsen User-Agent: Mozilla Thunderbird 1.0.2 (X11/20050329) X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-pf@freebsd.org References: <42D376E6.7090708@vsen.dk> In-Reply-To: <42D376E6.7090708@vsen.dk> X-Enigmail-Version: 0.90.2.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: amavisd-new at EnableIT.dk Subject: Re: preempt not working? X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Jul 2005 12:34:12 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Everyone has carp.preempt working? Do I need to use ifstated instead of carp.preempt - or perhaps it is required, for preempt to work somehow? If anyone can point me to a doc that deals with preempt - I'd be very happy. The manual doesn't :( on 07/12/05 09:53 Klavs Klavsen wrote: > Hi guys, > > Am I misunderstanding the meaning of preempt? > > I have a test setup in vmware - and it looks like this: > > fw09# ifconfig > lnc0: flags=108943 mtu 1500 > inet 192.168.11.209 netmask 0xffff0000 broadcast 192.168.255.255 > inet6 fe80::20c:29ff:fe80:e1a7%lnc0 prefixlen 64 scopeid 0x1 > ether 00:0c:29:80:e1:a7 > lnc1: flags=108943 mtu 1500 > inet 10.0.0.9 netmask 0xffffff00 broadcast 10.0.0.255 > inet6 fe80::20c:29ff:fe80:e1b1%lnc1 prefixlen 64 scopeid 0x2 > ether 00:0c:29:80:e1:b1 > lnc2: flags=108943 mtu 1500 > inet 172.16.1.9 netmask 0xffffff00 broadcast 172.16.1.255 > inet6 fe80::20c:29ff:fe80:e1bb%lnc2 prefixlen 64 scopeid 0x3 > ether 00:0c:29:80:e1:bb > plip0: flags=108810 mtu 1500 > lo0: flags=8049 mtu 16384 > inet 127.0.0.1 netmask 0xff000000 > inet6 ::1 prefixlen 128 > inet6 fe80::1%lo0 prefixlen 64 scopeid 0x5 > pflog0: flags=141 mtu 33208 > pfsync0: flags=41 mtu 1348 > pfsync: syncif: lnc2 maxupd: 128 > carp0: flags=41 mtu 1500 > inet 192.168.11.208 netmask 0xffffffff > carp: BACKUP vhid 1 advbase 1 advskew 0 > carp1: flags=41 mtu 1500 > inet 10.0.0.1 netmask 0xffffff00 > carp: BACKUP vhid 2 advbase 1 advskew 0 > carp2: flags=41 mtu 1500 > inet 172.16.1.8 netmask 0xffffff00 > carp: BACKUP vhid 3 advbase 1 advskew 0 > carp3: flags=41 mtu 1500 > inet 192.168.11.210 netmask 0xffffffff > carp: MASTER vhid 4 advbase 1 advskew 0 > fw09# sysctl -a | grep pree | grep -v 118 > net.inet.carp.preempt: 1 > > carp3 is master, because carp3 on the secondary isn't up. As I > understand the preempt flag, that should result in this host taking over > MASTER for all carp interfaces. The other host has an anskew of a 100 > (as it is default secondary) - but it still stays MASTER for carp0,1 and > 2 :( > - -- Regards, Klavs Klavsen, GSEC - kl@vsen.dk - http://www.vsen.dk PGP: 7E063C62/2873 188C 968E 600D D8F8 B8DA 3D3A 0B79 7E06 3C62 "Those who do not understand Unix are condemned to reinvent it, poorly." --Henry Spencer -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iD8DBQFC3PN2PToLeX4GPGIRAi52AKCYXR9a8IHHW4VMGYmcWpb6Dd3l+ACgtdLn GJLFQZnMm7TIJ2LB3ZWeeFw= =43b1 -----END PGP SIGNATURE-----