On 8/28/2012 11:39 PM, Ondrej Zajicek wrote:
On Tue, Aug 28, 2012 at 12:09:32PM +0200, Ruben Laban wrote:

So far the testing with (3) has shown it to be a rather nice solution
problem. It even seems to handle the additional use case where there's
floating (high-available) IP addresses involved (as aliases) properly.
Just one small question though: Is there some trick to "AdminDown" a
session between 2 given peers in a pmtp setup, other than invoking
packetfilters and have the sessions time out?

I don't think there is any.

Ok.

Removing the "neighbor"
from either end and doing a "configure" keeps the session alive it seems.

This is probably a bug.

What I deduced from my limited testing is that the "neighbors" setting determines which peers to actively "detect". Packets received from peer that are not explicitly mentioned in the config, but reachable network-wise, will be communicated with just fine and will keep doing so. It will even try to re-establish the session after the peer stops sending packets. This could very well be the intended behavior, it's just that it "screws" me when trying to do the "AdminDown" stuff ;-)

I don't expect to be needing to "AdminDown" sessions very often, so the use packetfilters is a viable solution for now.

Regards,
Ruben Laban

Reply via email to