similar to: [Bridge] STP FD when STP is disabled

Hello, I've been trying to implement a bridge in place for a clustered firewall at one of our office locations. Currently we NAT two class C's internally. We decided, for performance reasons, that it would make sense to put our servers into an official DMZ. So we started this bridging project. Our goal is to have two redundant firewalls in place. There is no need for active/active.

Thanks, Mike. When running tcpdump on the VM I'm not seeing traffic unless it's explicitly intended for that particular VM, so no traffic between the other VMs is getting forwarded from the virtual interface to the "network appliance" VM. There is connectivity between the VMs on the private network and the "network appliance" VM which is acting as a gateway.

Hello, I just made some change of the bridge source which under kernel 2.4.20 ,to make it work automatically without any ioctl commands such as brctl .In this module I do ,it has only one br named BRIDGE which auto constructed in the module initiation ,and defined as a global variable "brg".And I add one eth card(eth0) to the br as a port .The main program is just below this page. But

Hi all, I am trying to compile openswitch's kernel module in a CentOS 6.4 host, but fails in rpm-check: Requires: kernel(__alloc_percpu) = 0x55f2580b kernel(__alloc_skb) = 0x25421969 kernel(__dev_get_by_index) = 0x6a6d551b kernel(__init_waitqueue_head) = 0xffc7c184 kernel(__ip_select_ident) = 0x848695b3 kernel(__kmalloc) = 0x5a34a45c kernel(__list_add) = 0x0343a1a8 kernel(__nla_put) =

Hello all! I've recently started using the priorities plugin as part of my best practices. It's very effective, and prevents nasty things from happening (like atrpms upgrading python and disabling yum.) I'm wondering if there's a simple and elegant way to allow package-name-based exclusions. For example: For my mysql cluster, I'd prefer to have the latest mysql and

Using a Linux bridge I see that none of the interfaces is set to promiscuous mode but on the other hand I don't see any dev_unicast_xxx calls in the bridge code... for the case of one of the interfaces being a physical NIC (e.g eth1), what's the magic that makes the NIC RX filtering be willing to accept frames whos dest mac isn't the NIC "primary" unicast mac? Also is there

Hi, All: I am tring to use STP function on bridge device that refer the BRIDGE-STP-HOWTO. And I use PING program to test it from PC1 to PC2. But the forward function is become too long when bridge topology change. How can I tuning the STP to make client connect to another again faster? I have been use follow command. But it seen not this issue. Bcause, if I run " arp -d " on

We seem to send 3 extra bytes in a TCN, which will be whatever happens to be on the stack. Thanks to Aji_Srinivas@emc.com for seeing. Signed-off-by: Stephen Hemminger <shemminger@osdl.org> diff -Naur a/net/bridge/br_stp_bpdu.c b/net/bridge/br_stp_bpdu.c --- a/net/bridge/br_stp_bpdu.c 2006-09-03 23:40:08.000000000 +0530 +++ b/net/bridge/br_stp_bpdu.c 2006-09-03 23:40:33.000000000 +0530 @@

I have been playing around with the STP settings of brctl and saw something strange. I was setting the hello time, so I executed the following: # brctl sethello br0 30 Then I had a look at the value that was set: # cat /sys/class/net/br0/bridge/hello_time 2999 Much bigger than expected. I started looking at the source. In the libbridge/libbridge_devif.c file of brctl, we have the following

Hi all, I work on a SOC based on Micrel/Kendin KS8695 based on ARM9. ( http://micrel.com/page.do?page=product-info/sys_on_chip.jsp) This component has 2 network interfaces. One is connected to a 5 ports switch. eth0 eth1 => switch port1,2,3,4 I want to make a bridge with these 5 ports but my problem is that the network driver only install 2 interfaces. The KS8695 network switch can be

Hi, I want to connect two pc`s on a redundant way with each other. On those pc`s a 64 bit ubuntu 11.10 is running with kernel version 3.0.0-16-generic. Setup1: ---------- PC1: PC2: br0 br1 | | -- eth0.1000 ---------------------------------------------------eth0.1000 | | __eth1.1001

This is a revised version of Kishore's patch to set message age appropriately in STP configuration packets. Signed-off-by: Kishore A K <KishoreAK@myw.ltindia.com> Signed-off-by: Stephen Hemminger <shemminger@osdl.org> diff -Nru a/net/bridge/br_stp.c b/net/bridge/br_stp.c --- a/net/bridge/br_stp.c 2004-06-29 14:45:50 -07:00 +++ b/net/bridge/br_stp.c 2004-06-29 14:45:50 -07:00 @@

hi,all sometimes ping fails when enable stp , why? thanks -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.linuxfoundation.org/pipermail/virtualization/attachments/20140411/6c24ed40/attachment.html>

hi,all sometimes ping fails when enable stp , why? thanks -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.linuxfoundation.org/pipermail/virtualization/attachments/20140411/6c24ed40/attachment.html>

I've got a run of Shielded Twisted Pair (4 conductors) which used to be a Token Ring Network drop and I'm not using it anymore. Would it be decent to replace the ends with normal analog phone connectors and use it for a phone extension, or is STP unsuitable for that? Thanks Steve

I remember having to turn off STP or set portfast on some switch ports to some phones due to the boot sequence and timeouts of some phones a long time ago. Does anyone know which phones, if any still suffer from these problems? I am setting up a lab and want to introduce this problem for the class. Thanks, Steve T -------------- next part -------------- An HTML attachment was scrubbed... URL:

Hi all, Reading docs about using bridges in a KVM environment, I have a doubt about activating STP or not in a KVM host. What advantages and disadvantages have?? If I will want to install some kvm guests that use multicast address for certain services, is it recommended to enable STP? Thanks.

On 09/16/2015 03:02 PM, C.L. Martinez wrote: > What advantages and disadvantages have?? If I will want to install > some kvm guests that use multicast address for certain services, is it > recommended to enable STP? STP has nothing to do with multicast as it's an Ethernet protocol. It's developed to provide loop-free redundancy links to Ethernet-based networks. I can't

On 16.09.2015 12:18, C.L. Martinez wrote: > On 09/16/2015 10:15 AM, Dmitry E. Mikhailov wrote: >> On 09/16/2015 03:02 PM, C.L. Martinez wrote: >>> What advantages and disadvantages have?? If I will want to install >>> some kvm guests that use multicast address for certain services, is it >>> recommended to enable STP? >> STP has nothing to do with

hi,all sometimes ping fails when enable stp , why? thanks -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.linuxfoundation.org/pipermail/virtualization/attachments/20140411/6c24ed40/attachment.html>