HA on NetBSD router/firewall using agr

[Miguel Mendez]

Hello,

I've been reading about agr and want to setup my router/firewall with
HA.

Currently it's a Sun Ultra60 running NetBSD 3.0 with two NICs: hme0
and hme1. hme0 is connected to a Linksys ADSL router and hme1 to a
Cisco 2924 and the LAN.
What I'd like to do is add a QFE card and configure two agr interfaces:

hme0 + qfe0 connected to the Linksys router.
hme1 + qfe1 connected to the Cisco (LAN)

Has anybody done this and does it work as advertised (tm) ?
Are there any issues with NAT and/or PF when using agr?

Thanks in advance.
Miguel Mendez <***@energyhq.be>
http://www.energyhq.be
PGP Key: 0xDC8514F1





--
Posted automagically by a mail2news gateway at muc.de e.V.
Please direct questions, flames, donations, etc. to news-***@muc.de

[Julian Coleman]

Post by Miguel Mendez
I've been reading about agr and want to setup my router/firewall with
HA.
Currently it's a Sun Ultra60 running NetBSD 3.0 with two NICs: hme0
and hme1. hme0 is connected to a Linksys ADSL router and hme1 to a
Cisco 2924 and the LAN.
hme0 + qfe0 connected to the Linksys router.
hme1 + qfe1 connected to the Cisco (LAN)
Has anybody done this and does it work as advertised (tm) ?

I think the problem you'll have is support for 802.3ad on the Cisco (and
maybe the Linksys). As far as I can see, the 2924 (presumably 2924XL)
doesn't support link aggregation. Also, I'm not sure that adding extra
interfaces gives you much higher availability - usually a seperate box is
used for that with something like HSRP, VRRP or CARP so that both boxes
pretend to be a single machine.

J