From owner-freebsd-pf@FreeBSD.ORG Tue Mar 1 18:24:32 2005 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id BA3B616A4CE for ; Tue, 1 Mar 2005 18:24:32 +0000 (GMT) Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.192]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5B31743D55 for ; Tue, 1 Mar 2005 18:24:32 +0000 (GMT) (envelope-from jsimola@gmail.com) Received: by wproxy.gmail.com with SMTP id 69so1106833wri for ; Tue, 01 Mar 2005 10:24:31 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:references; b=JIuNyK9ppXXvZwI/Z/pleAHD9+hEavwITivVJvmFbuQNhH0rKF9PGMcfXvjGY5ID/O1b6ytVDQjHIdvzvVYkbXvRmn0h4bI9N3DQ3FPOjX1hOPRjzSWeUhWsSrXpvFfLuP1HgqfFBQ9rqEMgMlpTxmAiNmraqpRmns/ofYjVxxM= Received: by 10.54.11.39 with SMTP id 39mr142688wrk; Tue, 01 Mar 2005 10:24:29 -0800 (PST) Received: by 10.54.39.34 with HTTP; Tue, 1 Mar 2005 10:24:29 -0800 (PST) Message-ID: <8eea0408050301102421493b59@mail.gmail.com> Date: Tue, 1 Mar 2005 10:24:29 -0800 From: Jon Simola To: Matthew Grooms In-Reply-To: <4224B078.9020301@seton.org> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit References: <200502282232.17646.max@love2party.net> <4223931C.9000607@seton.org> <200502282326.41760.max@love2party.net> <4224B078.9020301@seton.org> cc: freebsd-pf@freebsd.org Subject: Re: Fwd: pf + pfsync + carp testing ... X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: jon@abccomm.com List-Id: Technical discussion and general questions about packet filter (pf) List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Mar 2005 18:24:32 -0000 On Tue, 01 Mar 2005 12:12:08 -0600, Matthew Grooms wrote: > Thanks Max and Gleb. You have been a great help. The patch applied > cleanly and compiled fine. After configuring a few carp interfaces, they > seem to fail over well. I am curious though, is CARP designed to have > interfaces fail over individually or as a group? Just individually. There is a port for ifstated from OpenBSD that monitors multiple interfaces and will fail a CARP group if one of them fails. http://lists.freebsd.org/pipermail/freebsd-ports-bugs/2004-November/045852.html Although it may have made it into the ports tree by now. > Also, when I configure a carp interface on the command line I do > something like ... > > ifconfig carp0 create 192.168.253.1 \ > netmask 255.255.255.0 vhid 1 advskew 1 > > but when I place the equivalent line in rc.conf as ... > > ifconfig_carp0="create 192.168.253.1 \ > netmask 255.255.255.0 vhid 1 advskew 1" > > and reboot the box, it does not seem to take. Any suggestions? add to rc.conf: cloned_interfaces="carp0,carp1" That will create the interfaces, then you can use the normal ifconfig_carp0="inet 192.168.1.4 ..." -- Jon Simola Systems Administrator ABC Communications