[Vyatta-users] where is the vrrp disable-vmac option?

2008-02-08 Thread Dave Strydom
Hi,

I'm using the latest VC3 release and I can't seem to find a way to
disable-vmac ?

I've added the testing repository for apt, but there is no updates?


- Dave
___
Vyatta-users mailing list
Vyatta-users@mailman.vyatta.com
http://mailman.vyatta.com/mailman/listinfo/vyatta-users


[Vyatta-users] interface names move

2008-02-08 Thread Dave Strydom
I'm got two identical HP DL140 machines, both with additional Intel
Dual Port 1000/PT cards.

On the one machine (router 1)
Onboard NIC 1 = eth0
Onboard NIC 2 = eth1
Intel NIC 1 = eth2
Intel NIC 2 - eth3

On the 2nd machine (router 2)
Onboard NIC 1 = eth2
Onboard NIC 2 = eth3
Intel NIC 1 = eth0
Intel NIC 2 = eth1


How can two identical machines have the interface names switched around?

- Dave
___
Vyatta-users mailing list
Vyatta-users@mailman.vyatta.com
http://mailman.vyatta.com/mailman/listinfo/vyatta-users


Re: [Vyatta-users] interface names move

2008-02-08 Thread Justin Fletcher
It's just the order they were initially discovered by the system, and
it can vary.
It's also one of the reasons there's the hw-id parameter in the
interfaces section -
that way the interface your prefer is locked to an interface name.  If
you want to
change the order, change the hw-id entry, either through the
configuration commands,
or edit config.boot directly (I prefer the latter to cut and paste) and reboot.

Justin

On Feb 8, 2008 5:05 AM, Dave Strydom [EMAIL PROTECTED] wrote:
 I'm got two identical HP DL140 machines, both with additional Intel
 Dual Port 1000/PT cards.

 On the one machine (router 1)
 Onboard NIC 1 = eth0
 Onboard NIC 2 = eth1
 Intel NIC 1 = eth2
 Intel NIC 2 - eth3

 On the 2nd machine (router 2)
 Onboard NIC 1 = eth2
 Onboard NIC 2 = eth3
 Intel NIC 1 = eth0
 Intel NIC 2 = eth1


 How can two identical machines have the interface names switched around?

 - Dave
 ___
 Vyatta-users mailing list
 Vyatta-users@mailman.vyatta.com
 http://mailman.vyatta.com/mailman/listinfo/vyatta-users

___
Vyatta-users mailing list
Vyatta-users@mailman.vyatta.com
http://mailman.vyatta.com/mailman/listinfo/vyatta-users


Re: [Vyatta-users] IPSec Termination

2008-02-08 Thread Dunmoodie, Carlos
All,


Thanks for your input. I got the tunnel up and running. After taking
several suggestions I decided to switch to main mode and set the right
side to dynamic.  Also when using dynamic even as a termination point
auto is set to add.



version 2.0

config setup
interfaces=ipsec0=eth0
hidetos=yes

conn clear
auto=ignore

conn clear-or-private
auto=ignore

conn private-or-clear
auto=ignore

conn private
auto=ignore

conn block
auto=ignore

conn packetdefault
auto=ignore

conn peer-0.0.0.0-tunnel-1
left=1.1.1.1
right=%any
rekey=no
leftsubnet=192.168.12.0/24
rightsubnet=192.168.10.0/24
ike=3des-md5,3des-sha1
ikelifetime=28800s
aggrmode=no
esp=3des-md5,3des-sha1
keylife=1800s
rekeymargin=540s
type=tunnel
pfs=yes
compress=no
authby=secret
auto=add




Carlos Dunmoodie
Network Engineer
Engineering
Office: (301) 944-2896
Cell: (443) 864-9822
 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of ken Felix
Sent: Thursday, February 07, 2008 5:21 PM
To: vyatta-users@mailman.vyatta.com
Subject: [Vyatta-users] IPSec Termination

My take,  the remote peer is not recognized. Do you have an appropiate  
  PSK key in the  ipsec.secrets file ?

fwiw: I would create a default setting and apply all of your setting  
for things like  this in the default profile


conn %default
left=aaa.bbb.ccc.dd
leftnexthop=aaa.bbb.ccc.eee
dpddelay=5
dpdtimeout=5
dpdaction=hold
pfs=no
auth=esp
authby=secret
compress=yes
aggrmode=yes


etc.

___
Vyatta-users mailing list
Vyatta-users@mailman.vyatta.com
http://mailman.vyatta.com/mailman/listinfo/vyatta-users
___
Vyatta-users mailing list
Vyatta-users@mailman.vyatta.com
http://mailman.vyatta.com/mailman/listinfo/vyatta-users


[Vyatta-users] Vyatta at SCALE 6x and Glendale testing

2008-02-08 Thread Dave Roberts
I had a couple general announcements for the Vyatta community...

First, if you live in the Southern California area, Vyatta is going to have 
a booth at SCALE 6x at the LAX Airport Westin. SCALE 6x runs today and this 
weekend, Feb 8 - 10. You can find more info about SCALE here:
http://www.socallinuxexpo.org/
If you're in the area, please come by the Vyatta booth. Tom McCafferty and I 
will be there on both Saturday and Sunday.

Second, I'd like to urge people to continue testing Glendale. We're coming 
up toward our next milestone and we want to maximize feedback before that 
date so that we can incorporate as much as possible before deliver the next 
step. We have already changed functionality in response to community 
feedback.

So, your action items are:
1. If you live in Southern California, come see us at SCALE this weekend.

2. If you aren't testing Glendale yet, please do. We need all the feedback 
we can get. The system is proving itself to be quite stable, but the edges 
are rough. We need help finding the rough spots.

3. If you find what you think is a bug in Glendale, file it in Bugzilla 
(bugzilla.vyatta.com).

4. If you have feedback about Glendale, either positive or negative, please 
report it here on the vyatta-users mailing list. The positive feedback helps 
the team spirit and the negative feedback is useful to understand where 
things still aren't working right. Both are valuable.

Cheers,

-- Dave

___
Vyatta-users mailing list
Vyatta-users@mailman.vyatta.com
http://mailman.vyatta.com/mailman/listinfo/vyatta-users


[Vyatta-users] Glendale source

2008-02-08 Thread Aubrey Wells
Will the etch-dnld-and-build script check out the glendale source, or  
is there a different repo I should pull from?


--
Aubrey Wells
Senior Engineer
Shelton | Johns Technology Group
A Vyatta Ready Partner
www.sheltonjohns.com





___
Vyatta-users mailing list
Vyatta-users@mailman.vyatta.com
http://mailman.vyatta.com/mailman/listinfo/vyatta-users