similar to: [Bridge] Neighbour table overflow

Hi all, I have one bridge system (used for controlling bandwidth) connected to three different DSL ISP provider. I have the following setup below: - +-------------+ | br0 | | -> eth1 | -> DSL_1 | -> eth2 | +-------------+ | br1 | | -> eth3 | -> DSL_2 | -> eth4 | +-------------+ | br2 | | -> eth5

hi, I have to configure Xen server and DomU''s which should be able to talk to different vlans - depending on services put on DomU''s. I would like to enslave 2 NICs via bond interface. Both NICs are on trunk ports which are configured in the same way, the same native vlan. I don''t know, if I have to add vlans tagging to eth* interfaces then enslave tagged eth*

Thanks for replying so quickly Guus. I will try increasing the re-keying time to 86400, and am now running the servers in debug 5 mode logging to a file, so will get all output. Its interesting what you say about UDP being given lower priority, the two end points of this VPN are actually within the same data center, but are being routed within the DC's core routers (because its going

Hi, I am using tinc 1.0.23 in router mode and am having trouble with intermittent TCP connect timeouts that do not occur when routing the TCP over the internet directly. I am using a pure IPv6 setup (i.e direct IPv6 connections, and tunneled IPv6 subnets). My configs are as follows: Site 1: ----------------------- tinc.conf: Name = rsukmhb AddressFamily = ipv6 BindToAddress =

Hi, I'm afraid about having find a freebsd 5X security issue. We have recently upgraded one gateway from 4.10 to 5.3... Following network used: [ISP]--xl1--[FW01]-----xl0--em0--[SR01] | |--fxp0--em0--[SR02] On fw01, we have one jail. So fw01 is configured as a bridge on xl1,xl0,fxp0. Services works (before and after upgrade). On 4.10, we used

Hi all, I have a bridging firewall running fine with kernel 2.4.31 (Slackware 10.1) and iptables 1.2.11 Yesterday I install the new kernel 2.6.14.3 and iptables 1.3.4 but the bridging firewall doesn't work anymore. Do I need to patch the kernel 2.6 as what I did it for kernel 2.4? Or what I have missed? Regards, ro0ot

Currently my ethernet bridge has 2 intel 100mps NIC's that are both part of a bridge. ( I followed the sample setup on the bridge.sf.net page.) In addition to this I would like to access the internet from within the ethernet bridge and when using the sample instructions I have no gateway setup and no default route (0.0.0.0). I know this data has to be attached to the bridge device and not to

Hi, I have the my gateway with load balancing traffic going out over two providers. Web browsing is fine...working great. But, my clients (office staff) complains that MSN keeps disconnecting (in 5 mins). Why? Please help me... Regards, ro0ot

I have a DomU as a firewall (using the Dom0 kernel). I hid the three nics from Dom0 and assigned them to the firewall VM. The firewall VM sees the three nics no problem. Eth0 comes up and grabs an IP automatically from my DHCP server, however eth1 and eth2 are configured with static IPs but they do not come up with an IP: Here is my ''ifconfig'': [root@fw01 ~]# ifconfig eth0

Hi, How can I set equal bandwidth of 512kbit downlink and 256kbit uplink for every single IP address of 254 IP addresses I have in my LAN? Regards, ro0ot

I have 2 ADSL ad1 and ad2 , one PC for my firewall and some deamon on it with 3 ethernet : eth0 connect to my LAN ( 192.168.60.0/24 ) and 2 other connect to ad1 and ad2 |eth1 (10.0.1.2)--------------------ad1 ( ADSL 1 ) | My LAN(192.168.60.0/24) |---------eth0( 192.168.60.2)--> PC | |eth2 (10.0.2.2)---------------------ad2 (ADSL 2 ) All computer in LAN has default router =

Hi, I managed to fix 128kbit for an IP address of 192.168.200.3 as below: - tc qdisc add dev eth3 root handle 1: cbq avpkt 1000 bandwidth 100mbit tc class add dev eth3 parent 1: classid 1:1 cbq rate 128kbit allot 1500 prio 5 bounded isolated tc filter add dev eth3 parent 1: protocol ip prio 16 u32 match ip dst 192.168.200.3 flowid 1:1 tc qdisc add dev eth3 parent 1:1 sfq perturb 10 How can I

Hi wondering if anyone can help. I have two NICs on a debian sarge based system and current running as a bridge (br0) which consists of eth0 and eth1. Is it possible to add a virtual interface to the eth1 so I can also do NAT on the box as well? I have tried many times and keep coming up with errors. Kind Regards William Bohannan

Hi, Below is my Linux firewall network configuration: - eth0 - isp 1, IP: 1.1.1.10, Netmask: 255.255.255.252 eth1 - isp 2, IP: 2.2.2.10, Netmask: 255.255.255.252 eth2 - lan, IP: 172.16.0.254, Netmask: 255.255.255.0 eth3 - dmz, 192.168.0.254, Netmask: 255.255.255.0 isp 1 gateway: 1.1.1.9 isp 2 gateway: 2.2.2.9 Below is my iptables rules: - echo 1 > /proc/sys/net/ipv4/ip_forward iptables

Hello, I how an embedded processor that needs to act as a bridge between a wireless and wired network. I have managed to bring up the bridge fine. I can also bring up the bridge with a static ip address. However I can not figure out how to bring up the bridge with a dynamic ip address. Is it possible to for a bridge to get a dynamically assigned ip address? Oliver

re can somebody tell me what am I doing wrong (at this late night hour), because vlan are not getting bridged at all. ifconfig eth0 0.0.0.0 up ifconfig eth1 0.0.0.0 up brctl addbr br0 brctl addif br0 eth0 brctl addif br0 eth1 ifconfig br0 up vconfig add br0 X vconfig add br0 Y X = vlan-ID (example: 222) Y = vlan ID (example: 223) # brctl show bridge name bridge

Hi all, I have a VPN setup but it only works once in a while. It seems my firewall (shorewall 3.0.8) is blocking protocol 47. Here is what I have: eth0: internet eth2: dmz - my pptp server My entry In the rules file: pptp/ACCEPT fw dmz:192.168.253.2 My pptp macro ############################################################################### #ACTION SOURCE

Hi all, I am running Slackware 10.1 with Kernel 2.6.14.3 includes iptables 1.3.4 with layer 7 My network diagram below: - INTERNET --- LINUX_ROUTER_FW --- PCs Below is my simple iptables script: - echo 1 > /proc/sys/net/ipv4/ip_forward iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE iptables -t mangle -A POSTROUTING -m layer7 --l7proto applejuice -j MARK --set-mark 1 iptables -t

hello there, im running a 3interface inet, dmz, loc. i have some public ip addresses. one public address is the router of the provider, the second one is the linux box running shorewall. all other public interfaces are on the dmz nic with proxy-arp. now whenever i do a traceroute (the dmz boxes are windows, icmp traceroute) the very first hop gets timeout/stars, then the router of the provider

Hi, I have a data file which contains multiple data types (char and numeric) alongside with line spaces, tabs and spaces. I hope to extract out the numeric blocks of the data, probably as matrices or dataframes where each line in the data block is a corresponding row in the dataframe/ matrix. I have tried using many R read functions but they do not seem to yield the appropriate structure that