Re: CFR: bridge locking

From: Daniel C. Sobral (dcs_at_tcoip.com.br)
Date: 08/22/03

  • Next message: Mike Tancsa: "Re: [IPsec] ipcomp in tunnel mode still broken?"
    Date: Fri, 22 Aug 2003 10:57:42 -0300
    To: Maxim Konovalov <maxim@macomnet.ru>
    
    

    Maxim Konovalov wrote:
    > [ CC: trimmed ]
    >
    > On Wed, 20 Aug 2003, 14:52-0300, Daniel C. Sobral wrote:
    >
    > [...]
    >
    >>If you get bridge to send/receive packets to/from vlan interfaces
    >>attached to them, I'll be forever grateful.
    >>
    >>I've been trying to configure a setup where a firewall is connected to
    >>redundant switches, but no solution I found could handle the vlan
    >>attachments. :-(
    >
    >
    > http://people.freebsd.org/~maxim/diff/bridge.diff
    >
    > Let me know if it helps.

    Actually, this *did* help with something else.

    ifconfig fxp1 up
    ifconfig fxp3 up
    ifconfig vlan0 create
    ifconfig vlan1 create
    ifconfig vlan0 vlan 999 vlandev fxp1
    ifconfig vlan1 vlan 999 vlandev fxp3
    ifconfig vlan0 200.220.254.190/26
    ifconfig vlan1 up
    sysctl net.link.ether.bridge=1
    sysctl net.link.ether.bridge_cfg="vlan0 vlan1"

    Link to fxp1 down, link to fxp3 up.

    Without this patch, pings to and from 200.220.254.190 won't work. With
    your patch, they do. Thanks.

    This was tested on a FreeBSD 4.7. The patch did not apply cleanly, and
    required removal of a couple of lines (because "verbose", removed in the
    patch, is used in one place), but both these things were easily done.

    -- 
    Daniel C. Sobral                   (8-DCS)
    Gerencia de Operacoes
    Divisao de Comunicacao de Dados
    Coordenacao de Seguranca
    VIVO Centro Oeste Norte
    Fones: 55-61-313-7654/Cel: 55-61-9618-0904
    E-mail: Daniel.Capo@tco.net.br
             Daniel.Sobral@tcoip.com.br
             dcs@tcoip.com.br
    Outros:
    	dcs@newsguy.com
    	dcs@freebsd.org
    	capo@notorious.bsdconspiracy.net
    Telling the truth to people who misunderstand you is generally
    promoting a falsehood, isn't it?
    		-- A. Hope
    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
    

  • Next message: Mike Tancsa: "Re: [IPsec] ipcomp in tunnel mode still broken?"

    Relevant Pages

    • RE: ATHCTRL for ATH
      ... because now a days I donīt have atheros card, but I know how has between my ... Of course I appreciate your work in patch and time you have to spend on it, ... > roztyly# sysctl dev.ath.0.slottime=9 ... the attached patch and re-compile ifconfig. ...
      (freebsd-current)
    • Re: carpdev?
      ... I'm trying this patch against 7-stable amd64 from today. ... ifconfig carp0 carpdev em3 ... ifconfig: carpdev: bad value ...
      (freebsd-net)
    • Re: ifconfig patch
      ... I have been digging into why the edsc module wasnt being loaded by ... ifconfig and now have a patch. ... Its comparing using the string length of the module name so any partial ... Conceptually the patch seems right. ...
      (freebsd-net)
    • Re: ifconfig patch
      ... I have been digging into why the edsc module wasnt being loaded by ... ifconfig and now have a patch. ... Its comparing using the string length of the module name so any partial ... Conceptually the patch seems right. ...
      (freebsd-net)
    • patch to support setting carp state with ifconfig
      ... A few months ago I wrote a small patch that allows ifconfig to explicitly set a carp device to MASTER or BACKUP state. ... This is handy for situations where you want an active carp interface to fail over to/take over from the other host, perhaps for testing purposes or if you have a failed master you've brought back up that you want to take over again for a currently active slave host. ...
      (freebsd-net)