From owner-freebsd-security@FreeBSD.ORG Tue Dec 30 11:46:49 2003 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 36A3816A4CE for ; Tue, 30 Dec 2003 11:46:49 -0800 (PST) Received: from dmz2.unixjunkie.com (adsl-65-70-175-250.dsl.rcsntx.swbell.net [65.70.175.250]) by mx1.FreeBSD.org (Postfix) with ESMTP id 93E0E43D55 for ; Tue, 30 Dec 2003 11:46:45 -0800 (PST) (envelope-from strgout@unixjunkie.com) Received: from mail.unixjunkie.com (mail [10.253.254.36]) by dmz2.unixjunkie.com (8.12.8p2/8.12.8) with ESMTP id hBUKFdYe079028 for ; Tue, 30 Dec 2003 14:15:39 -0600 (CST) (envelope-from strgout@mail.unixjunkie.com) Received: from mail.unixjunkie.com (mail [10.253.254.36]) by mail.unixjunkie.com (8.12.8p2/8.12.8) with ESMTP id hBUKFdKf079025 for ; Tue, 30 Dec 2003 14:15:39 -0600 (CST) (envelope-from strgout@mail.unixjunkie.com) Received: (from strgout@localhost) by mail.unixjunkie.com (8.12.8p2/8.12.8/Submit) id hBUKFdbE079024 for freebsd-security@freebsd.org; Tue, 30 Dec 2003 14:15:39 -0600 (CST) (envelope-from strgout) Date: Tue, 30 Dec 2003 14:15:39 -0600 From: John To: freebsd-security@freebsd.org Message-ID: <20031230201538.GA78996@mail.unixjunkie.com> References: <20031222184812.87890.qmail@web60808.mail.yahoo.com> <20031222201341.GA98235@FreeBSD.org.ua> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20031222201341.GA98235@FreeBSD.org.ua> User-Agent: Mutt/1.4i Subject: Re: interface bonding X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Dec 2003 19:46:49 -0000 On Mon, Dec 22, 2003 at 10:13:41PM +0200, Ruslan Ermilov wrote: > On Mon, Dec 22, 2003 at 10:48:12AM -0800, Richard Bejtlich wrote: > > Thanks to Dmitry's tip on ng_eiface, I'm happy to > > report using the following configuration to bond > > interfaces with ng_one2many and a virtual interface > > ngeth0. > > > > sf2 and sf3 are real interfaces connected to my 10/100 > > tap. > > -- > > kldload ng_ether > > kldload ng_one2many > > ifconfig sf2 promisc -arp up > > ifconfig sf3 promisc -arp up > > ngctl mkpeer . eiface hook ether > > ngctl mkpeer ngeth0: one2many lower one > > ngctl connect sf2: ngeth0:lower lower many0 > > ngctl connect sf3: ngeth0:lower lower many1 > > ifconfig ngeth0 -arp up > > -- > > > > It works: > > > You can also try to dispense with ng_ether(4) completely > by attaching the "ether" hook of the eiface node to the > one2many's "one" hook directly. > > > Cheers, > -- > Ruslan Ermilov > FreeBSD committer > ru@FreeBSD.org Sorry netgraph is a little over my head on config, can you show an example?