From owner-freebsd-security@FreeBSD.ORG  Mon Dec 22 10:48:13 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id A6D2A16A4CE
	for <freebsd-security@freebsd.org>;
	Mon, 22 Dec 2003 10:48:13 -0800 (PST)
Received: from web60808.mail.yahoo.com (web60808.mail.yahoo.com
	[216.155.196.71])
	by mx1.FreeBSD.org (Postfix) with SMTP id 9D6E343D48
	for <freebsd-security@freebsd.org>;
	Mon, 22 Dec 2003 10:48:12 -0800 (PST)
	(envelope-from richard_bejtlich@yahoo.com)
Message-ID: <20031222184812.87890.qmail@web60808.mail.yahoo.com>
Received: from [68.84.6.72] by web60808.mail.yahoo.com via HTTP;
	Mon, 22 Dec 2003 10:48:12 PST
Date: Mon, 22 Dec 2003 10:48:12 -0800 (PST)
From: Richard Bejtlich <richard_bejtlich@yahoo.com>
To: freebsd-security@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Subject: Re: interface bonding
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Dec 2003 18:48:13 -0000

Thanks to Dmitry's tip on ng_eiface, I'm happy to
report using the following configuration to bond
interfaces with ng_one2many and a virtual interface
ngeth0.

sf2 and sf3 are real interfaces connected to my 10/100
tap.
--
kldload ng_ether
kldload ng_one2many
ifconfig sf2 promisc -arp up
ifconfig sf3 promisc -arp up
ngctl mkpeer . eiface hook ether
ngctl mkpeer ngeth0: one2many lower one
ngctl connect sf2: ngeth0:lower lower many0
ngctl connect sf3: ngeth0:lower lower many1
ifconfig ngeth0 -arp up
--

It works:

bourque# tcpdump -n -i ngeth0 icmp
tcpdump: WARNING: ngeth0: no IPv4 address assigned
tcpdump: listening on ngeth0
13:42:49.322474 86.84.6.72 > 216.239.39.99: icmp: echo
request
13:42:49.340745 216.239.39.99 > 86.84.6.72: icmp: echo
reply

Sincerely,

Richard Bejtlich
http://www.taosecurity.com

__________________________________
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/