for the record
I've got it running with:
machine A:
sis0 inet 83.64.16.134 netmask 83.64.16.248
carp0 inet 83.64.16.130 netmask 83.64.16.248
machine B:
sis0 inet 83.64.16.133 netmask 83.64.16.248
carp0 inet 83.64.16.130 netmask 83.64.16.248
its now working fine ;-)
But one thing is left - with the actual configuration i am losing two
ip's - the two which are needed on machine A and machine B for sis0.
Does there exists any trick to also use these two ip's ?
best regards
Wolfgang
Am Fr, den 16.04.2004 schrieb Wolfgang Pichler um 12:49:
> in my pf.conf i don't have more than these two lines - i also don't have
> a starting block all rule - so i think it passes all by default - or i
> am wrong ?
>
> i already found the main problem - the switch i've used for testing
> purpose seems to be broken - i've changed that switch and then the carp
> thing started to work very well.
>
> But now i am trying it on my second xDSL line (which i have for
> testing).
>
> On this xDSL line we have the fix ip's:
> Gateway: 83.64.16.129
> IP's: 83.64.16.130 - subnet: 255.255.255.248
>
> so - how do i have to configure my sis0 on both machines and my carp0 to
> get this working ?
>
> I've tried:
> sis0 on machine A with: 83.64.16.254 netmask 255.255.255.0
> sis0 on machine B with: 83.64.16.253 netmask 255.255.255.0
> carp0 on both with: 83.64.16.130 netmask 255.255.255.0
>
> and as default route i've added 83.64.16.129
>
> but nothing is working - can someone give me a hint ?
>
> best regards
> Wolfgang
>
> Am Do, den 15.04.2004 schrieb Asenchi um 18:45:
> > On Thu, 15 Apr 2004 15:08:52 +0200
> > Wolfgang Pichler <[EMAIL PROTECTED]> wrote:
> > [snip]
> >
> > >
> > >my pf.conf on both machines is:
> > >--------------pf.conf---------------------
> > >ext_if="sis0"
> > >int_if="sis1"
> > >cross_if="sis2"
> > >
> > >pass quick on { $cross_if } proto pfsync
> > >pass on { $ext_if $int_if } proto carp keep state
> > >------------------------------------------
> >
> > Is this all you have in your pf.conf?
> >
> > Seems to me, that you need more. You are only allowing the carp
> > protocol. Put a pass all in there (just to test).
> >
> > I don't know, I could be wrong (probably am) but this seems to be the
> > problem to me.
> >
> > Asenchi
