Re: ipfw2 question

_at_babolo.ru
Date: 06/30/05

  • Next message: ANdrei: "working 11g adapter pci" 
    To: dnr <dnr@freemail.lt>
Date: Thu, 30 Jun 2005 02:36:39 +0400 (MSD)

    [ Charset ISO-8859-4 unsupported, converting... ]
    > hello,
    > i'm solving such a problem:
    > router with 3 eth i-faces:
    >
    > em0(vlan10)
    > (vlan1000)fxp0
    > em1(vlan11)
    >
    > I need to split traffic into two pipes
    > pipe1 from vlan10 to vlan1000
    > pipe2 from vlan11 to vlan1000
    >
    > fxp side supplys traffic to many different subnets
    > em0 is trunk to the world networks
    > em1 is trunk to the national networks
    > so I cannot write these rules in IP level....
    >
    > doing it in the following way doesn't works...
    > ipfw add pipe1 pass all from any to any via vlan10 in recv vlan1000
    > ipfw add pipe1 pass all from any to any via vlan10 out xmit vlan1000
    ipfw add pipe 1 ip from any to any out recv vlan10 xmit vlan1000
    ipfw add pipe 2 ip from any to any out recv vlan11 xmit vlan1000

    or may be better (not exact your ask)

    ipfw add pipe 1 ip from any to any in recv vlan10
    ipfw add pipe 2 ip from any to any in recv vlan11

    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"

  • Next message: ANdrei: "working 11g adapter pci"

    Relevant Pages