Re: pf/carp/pfsync on two OpenBSD 3.8 firewalls

2006-01-05 Thread Marcin Miksowski
On 12/31/05, ed [EMAIL PROTECTED] wrote: On Thu, 29 Dec 2005 14:41:38 +0100 Marcin Miksowski [EMAIL PROTECTED] wrote: Is there any solution to resolve my problems with carp? If there is necessary to show You more informations on my current configuration I will do everything what I only

Re: pf/carp/pfsync on two OpenBSD 3.8 firewalls

2006-01-05 Thread Bill Marquette
On 1/5/06, Marcin Miksowski [EMAIL PROTECTED] # cat /etc/hostname.carp0 inet 192.168.0.5 255.255.255.0 192.168.0.255 vhid 1 carpdev em1 advskew 1 pass 31337 # cat /etc/hostname.carp1 inet 111.111.111.13 255.255.255.0 111.111.111.255 vhid 2 carpdev em0 advskew 1 pass 31337 # cat

Re: pf/carp/pfsync on two OpenBSD 3.8 firewalls

2006-01-05 Thread Marcin Miksowski
On 1/5/06, Karl O. Pinc [EMAIL PROTECTED] wrote: I have not been following your problem. You have net.inet.carp.preempt=1 in /etc/sysctl.conf? If not then that's likely your problem. (Then reboot or man sysctl.) Yes, I have preempt enabled: fw1: # sysctl net.inet.carp.preempt

Re: pf/carp/pfsync on two OpenBSD 3.8 firewalls

2006-01-05 Thread Marcin Miksowski
hello, I noticed in your original email that fw2 had advskews of 10's and 100's. This suggests that CARP may not be setup the way you think it is (based on the asvskew 240 in the hostname files). The difference appear, when I have testing various configurations. Now I have advskew equal on

Re: pf/carp/pfsync on two OpenBSD 3.8 firewalls

2005-12-31 Thread ed
On Thu, 29 Dec 2005 14:41:38 +0100 Marcin Miksowski [EMAIL PROTECTED] wrote: Is there any solution to resolve my problems with carp? If there is necessary to show You more informations on my current configuration I will do everything what I only can. From experience CARP can behave odly if

pf/carp/pfsync on two OpenBSD 3.8 firewalls

2005-12-29 Thread Marcin Miksowski
Hello, I have configured two firewalls on IBM x306 servers (they have 512MB of ram, 3.0 GHz PIV, and 2 gigabit ethernet cards Intel PRO/1000). I have also added one more network card: D-Link Systems 530TX+ which is dedicated to pfsync and connected to both firewalls with crossover Ethernet cable.