Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 24 Feb 2003 13:12:35 -0600
From:      Daniel Schrock <dschrock@speakeasy.net>
To:        Abel Alejandro <aalejandro@icepr.com>, freebsd-questions@freebsd.org
Subject:   Re: cant get out with two interfaces.
Message-ID:  <3E5A6EA3.6030502@speakeasy.net>
In-Reply-To: <b3dav3$27h1$1@FreeBSD.csie.NCTU.edu.tw>
References:  <b3dav3$27h1$1@FreeBSD.csie.NCTU.edu.tw>

next in thread | previous in thread | raw e-mail | index | archive | help
Abel Alejandro wrote:
> Hello, I have two interfaces. The rl0 is for monitoring purposes and fxp0 is
> for normal internet access.
> rl0 is attached to a catalyst port using SPAN, meaning all the traffic going
> to the internet gets mirrored to
> this port. fxp0 is on the same catalyst.
> 
> If I shutdown rl0 then I can access fxp0 from the outside, but if I ifconfig
> rl0 up then
> I am just allowed to access fxp0 within machines in the 196.12.X.0 network.
> 
> rl0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> mtu 1500
>         inet 10.0.0.1 netmask 0xa0000fc broadcast 255.255.255.3
>         inet6 fe80::2e0:7dff:fed0:fdf4%rl0 prefixlen 64 scopeid 0x1
>         ether 00:e0:7d:d0:fd:f4
>         media: Ethernet autoselect (100baseTX <full-duplex>)
>         status: active

if this is just for monitoring with SPAN, you shouldn't give it an 
address at all.  just bring it up.

i also suggest locking your interfaces and switch ports to their 
respective speed and duplex.
you will see improvements in performance.


.daniel.schrock,ccna



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3E5A6EA3.6030502>