Layer 2 Fail-over w/ CARP?

2007-04-28 Thread Clint Pachl
I was working on a network design and was wondering if CARP can provide fail-over for a group of layer 2 firewalls? I was thinking one could just associate an interface using carpdev without specifying the IP address or netmask. Would that work? firewall 1 # ifconfig bridge0 create #

Re: Layer 2 Fail-over w/ CARP?

2007-04-28 Thread Stuart Henderson
On 2007/04/28 04:17, Clint Pachl wrote: I was working on a network design and was wondering if CARP can provide fail-over for a group of layer 2 firewalls? I was thinking one could just associate an interface using carpdev without specifying the IP address or netmask. Would that work?

Re: Layer 2 Fail-over w/ CARP?

2007-04-28 Thread Darren Spruell
On 4/28/07, Clint Pachl [EMAIL PROTECTED] wrote: I was working on a network design and was wondering if CARP can provide fail-over for a group of layer 2 firewalls? At layer 2, shouldn't spanning tree handle redundant paths correctly? Besides, by all indications in carp(4) it is only a method