Re: interface bonding

From: Richard Bejtlich (richard_bejtlich_at_yahoo.com)
Date: 12/22/03

  • Next message: Vlad Galu: "Re: interface bonding"
    Date: Mon, 22 Dec 2003 10:48:12 -0800 (PST)
    To: freebsd-security@freebsd.org
    
    

    Thanks to Dmitry's tip on ng_eiface, I'm happy to
    report using the following configuration to bond
    interfaces with ng_one2many and a virtual interface
    ngeth0.

    sf2 and sf3 are real interfaces connected to my 10/100
    tap.

    --
    kldload ng_ether
    kldload ng_one2many
    ifconfig sf2 promisc -arp up
    ifconfig sf3 promisc -arp up
    ngctl mkpeer . eiface hook ether
    ngctl mkpeer ngeth0: one2many lower one
    ngctl connect sf2: ngeth0:lower lower many0
    ngctl connect sf3: ngeth0:lower lower many1
    ifconfig ngeth0 -arp up
    --
    It works:
    bourque# tcpdump -n -i ngeth0 icmp
    tcpdump: WARNING: ngeth0: no IPv4 address assigned
    tcpdump: listening on ngeth0
    13:42:49.322474 86.84.6.72 > 216.239.39.99: icmp: echo
    request
    13:42:49.340745 216.239.39.99 > 86.84.6.72: icmp: echo
    reply
    Sincerely,
    Richard Bejtlich
    http://www.taosecurity.com
    __________________________________
    Do you Yahoo!?
    Free Pop-Up Blocker - Get it now
    http://companion.yahoo.com/
    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
    

  • Next message: Vlad Galu: "Re: interface bonding"

    Relevant Pages

    • Re: interface bonding
      ... interfaces sf2 and sf3 against a new ngeth0 interface. ...
      (FreeBSD-Security)
    • Re: interface bonding
      ... On 9 Jan 04 I posted a method for bonding interfaces ... using netgraph for purposes of sniffing tap outputs as ... ngctl mkpeer. ... ngctl mkpeer ngeth0: one2many lower one ...
      (FreeBSD-Security)