From owner-freebsd-pf@FreeBSD.ORG Tue Jul 12 15:06:25 2005 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DD0D916A420 for ; Tue, 12 Jul 2005 15:06:24 +0000 (GMT) (envelope-from kl@vsen.dk) Received: from www.EnableIT.dk (r2d2.enableit.dk [195.35.83.82]) by mx1.FreeBSD.org (Postfix) with ESMTP id E463C43D49 for ; Tue, 12 Jul 2005 15:06:23 +0000 (GMT) (envelope-from kl@vsen.dk) Received: from localhost (localhost [127.0.0.1]) by www.EnableIT.dk (Postfix) with ESMTP id 6A3965FCD4 for ; Tue, 12 Jul 2005 09:58:07 +0200 (CEST) Received: from [192.168.10.51] (gw02.telmore.dk [62.242.232.132]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by www.EnableIT.dk (Postfix) with ESMTP id 50CEB5FC4C for ; Tue, 12 Jul 2005 09:58:06 +0200 (CEST) Message-ID: <42D376E6.7090708@vsen.dk> Date: Tue, 12 Jul 2005 09:53:10 +0200 From: Klavs Klavsen User-Agent: Mozilla Thunderbird 1.0.2 (X11/20050329) X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-pf@freebsd.org X-Enigmail-Version: 0.90.2.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: amavisd-new at EnableIT.dk Subject: preempt not working? X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Jul 2005 15:06:25 -0000 Hi guys, Am I misunderstanding the meaning of preempt? I have a test setup in vmware - and it looks like this: fw09# ifconfig lnc0: flags=108943 mtu 1500 inet 192.168.11.209 netmask 0xffff0000 broadcast 192.168.255.255 inet6 fe80::20c:29ff:fe80:e1a7%lnc0 prefixlen 64 scopeid 0x1 ether 00:0c:29:80:e1:a7 lnc1: flags=108943 mtu 1500 inet 10.0.0.9 netmask 0xffffff00 broadcast 10.0.0.255 inet6 fe80::20c:29ff:fe80:e1b1%lnc1 prefixlen 64 scopeid 0x2 ether 00:0c:29:80:e1:b1 lnc2: flags=108943 mtu 1500 inet 172.16.1.9 netmask 0xffffff00 broadcast 172.16.1.255 inet6 fe80::20c:29ff:fe80:e1bb%lnc2 prefixlen 64 scopeid 0x3 ether 00:0c:29:80:e1:bb plip0: flags=108810 mtu 1500 lo0: flags=8049 mtu 16384 inet 127.0.0.1 netmask 0xff000000 inet6 ::1 prefixlen 128 inet6 fe80::1%lo0 prefixlen 64 scopeid 0x5 pflog0: flags=141 mtu 33208 pfsync0: flags=41 mtu 1348 pfsync: syncif: lnc2 maxupd: 128 carp0: flags=41 mtu 1500 inet 192.168.11.208 netmask 0xffffffff carp: BACKUP vhid 1 advbase 1 advskew 0 carp1: flags=41 mtu 1500 inet 10.0.0.1 netmask 0xffffff00 carp: BACKUP vhid 2 advbase 1 advskew 0 carp2: flags=41 mtu 1500 inet 172.16.1.8 netmask 0xffffff00 carp: BACKUP vhid 3 advbase 1 advskew 0 carp3: flags=41 mtu 1500 inet 192.168.11.210 netmask 0xffffffff carp: MASTER vhid 4 advbase 1 advskew 0 fw09# sysctl -a | grep pree | grep -v 118 net.inet.carp.preempt: 1 carp3 is master, because carp3 on the secondary isn't up. As I understand the preempt flag, that should result in this host taking over MASTER for all carp interfaces. The other host has an anskew of a 100 (as it is default secondary) - but it still stays MASTER for carp0,1 and 2 :( -- Regards, Klavs Klavsen, GSEC - kl@vsen.dk - http://www.vsen.dk PGP: 7E063C62/2873 188C 968E 600D D8F8 B8DA 3D3A 0B79 7E06 3C62 "Those who do not understand Unix are condemned to reinvent it, poorly." --Henry Spencer