On 10/5/05, Alin-Adrian Anton <[EMAIL PROTECTED]> wrote: > Mircea Popescu wrote: > > Dar nu am spus ca nu sunt recunoscute, ci doar ca as vrea sa stiu ce > > "tool"-uri fac ceea ce face iproute din linux. Cam asta e problema. > > > > In esenta vreau sa separ traficul de metro de cel de extern prin > > stabilirea unor rute statice. > > > > Asta se face prin pf.conf, cu route-to. > > De exemplu: > > pass out on $ext_if route-to ($ext_if $ext_gateway) from <my_table> \ > to any keep state > > Unde $ext_if poate fi "fxp0" si $ext_gateway 193.226.X.1 (primit de la > ISP), doar un exemplu aleator :-) > > In loc de <my_table> poti folosi desigur o conditie de match la pachet > insemnat, sau orice altceva. Am testat si merge, aveam doi provideri. > > Cu stima,
Poti obtine o lista cu prefixele metropolitane, pe care le poti pune intr-un table PF. Apoi il gestionezi dupa cum preferi. Daca ai sesiune BGP cu providerul tau, iar el iti trimite prefixele astfel, le poti injecta on-the-fly intr-un table PF, folosind openbgpd. Ceea ce e foarte util este faptul ca atunci cind primesti un nou prefix, table-ul este updatat dinamic, fara a mai fi nevoie sa repornesti PF. Evident, daca accepti anuntul respectiv. > -- > Alin-Adrian Anton > GPG keyID 0x183087BA (B129 E8F4 7B34 15A9 0785 2F7C 5823 ABA0 1830 87BA) > gpg --keyserver pgp.mit.edu --recv-keys 0x183087BA > > "It is dangerous to be right when the government is wrong." - Voltaire > > ________________________________________________________ > To unsubscribe send a mail to [EMAIL PROTECTED] > > -- If it's there, and you can see it, it's real. If it's not there, and you can see it, it's virtual. If it's there, and you can't see it, it's transparent. If it's not there, and you can't see it, you erased it. ________________________________________________________ To unsubscribe send a mail to [EMAIL PROTECTED]
