[Vyatta-users] Dual firewall or screened subnet

2007-12-13 Thread Elías Manchón López
Hi guys, I'm thinking mount a DMZ with a dual firewall or also known as Screened subnet. I haven't thinked about details yet and How I must set up the routers to achieve it. I'm trying the vyatta open source on a computer test and I like it. The first question is: Could I build a Screened

[Vyatta-users] How to implement various Routing Discipline in Vyatta ?

2007-12-13 Thread saptarshi moitra
Hi Everyone Does anyone have the idea if the Routing disciplines of the Vyatta router can be changed in its configuration file? Suppose I want to implement various queuing and packet scheduling disciplines like FIFO, FQ, WFQ, RR in my router how do I go about doing it ? Thanks in advance for

Re: [Vyatta-users] IPsec and VRRP problem

2007-12-13 Thread Dave Roberts
Thank you - it finally works :) If you ever come to Bosnia (small country in the heart of europe), I'll buy you cevapi ;) http://en.wikipedia.org/wiki/%C4%86evap%C4%8Di%C4%87i Is that offer good for anybody on the list? I have to admit that I have never had cevapi in Bosnia before, but it

Re: [Vyatta-users] How to implement various Routing Discipline in Vyatta ?

2007-12-13 Thread Robert Bays
Hi Saptarshi, You can't change the queue type in the config right now. We are shooting for a Q1 release that will allow you to do that. Take a look at the following application note for now. It should give you some idea of how to do what you are looking for.

Re: [Vyatta-users] How to implement various Routing DisciplineinVyatta ?

2007-12-13 Thread Dave Roberts
If you want to post that stuff on the wiki (or at least a pointer on the wiki), that would be great. This page would be a good place to start: http://www.vyatta.com/twiki/bin/view/Community/WebHome -- Dave _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Shane McKinley

Re: [Vyatta-users] VRRP Confusion

2007-12-13 Thread Stig Thormodsrud
I wonder if this might be solved with the disable-vmac setting? stig -Original Message- From: [EMAIL PROTECTED] [mailto:vyatta-users- [EMAIL PROTECTED] On Behalf Of Daniel Stickney Sent: Wednesday, December 12, 2007 2:47 PM To: vyatta-users@mailman.vyatta.com Subject:

Re: [Vyatta-users] VRRP Confusion

2007-12-13 Thread Allan Leinwand
A thought here that may help cut through some of the confusion. I think that when you run tcpdump on the interface it places that interface into promiscuous mode. When in this mode, it can respond to pings to both the real IP address on the Ethernet and the virtual IP address (all packets are

Re: [Vyatta-users] How to implement various Routing DisciplineinVyatta ?

2007-12-13 Thread Shane McKinley
The links to my blog postings have been posted here: http://www.vyatta.com/twiki/bin/view/Community/BlogMentions This includes the htb sfq bandwidth limiting instructions/example. - Shane From: Dave Roberts [mailto:[EMAIL PROTECTED] Sent: Thursday,

[Vyatta-users] BGP next-hop-self

2007-12-13 Thread Shane McKinley
I am trying to translate the following cisco configuration to Vyatta and it is complicated at best :S neighbor XXX.XXX.XXX.XXX remote-as 1234 neighbor XXX.XXX.XXX.XXX next-hop-self What the crap is self? The neighbor is refering to the IP address (XXX.XXX.XXX.XXX) of our ISP. I have found the

Re: [Vyatta-users] BGP next-hop-self

2007-12-13 Thread Arthur Xiong
What the crap is self? The next-hop-self command allows you to force BGP to use a specific IP address as the next hop. http://www.cisco.com/warp/public/459/bgp-toc.html Normally, next-hop-self is used for iBGP neighbors which have no routes to the next-hop of the bgp routes. I am just

Re: [Vyatta-users] VRRP Confusion

2007-12-13 Thread Justin Fletcher
Ah, yes - you can't actually change the MAC on some hardware, so you end up in this confused state and only see packets destined for the interface in promiscuous mode (hence the suggestion to disable the virtual MAC . . .) Justin On Dec 13, 2007 12:29 PM, Allan Leinwand [EMAIL PROTECTED] wrote:

Re: [Vyatta-users] VRRP Confusion

2007-12-13 Thread Daniel Stickney
Thank you both Stig and Allan for your input. How might I disable the vmac setting? I found a file called /opt/vyatta/sbin/vrrpd.init, but no mention of the string vmac in all of /opt. An interesting point is that the failure to respond to pings except when tcpdump is running only occurs on

Re: [Vyatta-users] VRRP Confusion

2007-12-13 Thread Stig Thormodsrud
Hi Daniel, I don't think the disable-vmac option was in vc3, but you can look at the change here: http://suva/git/?p=xorp.git;a=commit;h=0b3e4418e0ae961d902cc40209035f1b5ea a7adf Basically you can edit vrrpd.init and add a -n parameter to vrrpd to enable non-rfc compliance mode (i.e. no vmac).

Re: [Vyatta-users] VRRP Confusion

2007-12-13 Thread Daniel Stickney
Ahhh, very interesting. That makes *perfect* sense for this issue. Since I happened to have a spare NIC, so I swapped out the previous card and put in a different one, and now VRRP works perfectly and everything can ping everything all the time, no matter whether vyatta01 or vyatta02 is

Re: [Vyatta-users] Advises on configuring BGP

2007-12-13 Thread Poh Yong Hwang
Hi, I have read the docs that was available but still have a few questions in mind. I have a UTP cable that was provided by the provider that I would like to peer with so I have plug it into my eth0. So what IP address should I set on my eth0? Where can I set the IP range XX.XX.XX.XX/21 that I

[Vyatta-users] Can't install in hard drive.

2007-12-13 Thread Maximo Barawid
I am new here and just downloaded the latest VC3 iso. Live CD runs fine but I can't install it on my hard drive. First, it boots up fine with all the messages in the screen then it stops with this message: Starting wan interface: FATAL: Error inserting wanpipe