Return to ifstated.conf CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / elwix / config / etc / default

Annotation of elwix/config/etc/default/ifstated.conf, revision 1.1

1.1     ! misho       1: # $OpenBSD: ifstated.conf,v 1.6 2005/02/07 06:08:10 david Exp $
        !             2: # This is a sample config for a pair of firewalls with two interfaces
        !             3: #
        !             4: # carp0 and carp1 have ip addresses on 192.168.3.0/24 and 192.168.6.0/24
        !             5: # respectively.
        !             6: 
        !             7: # net.inet.carp.preempt must be enabled (set to 1) for this to work correctly.
        !             8: 
        !             9: # Uncomment one of the following lines to force primary/backup status.
        !            10: # init-state primary
        !            11: # init-state backup
        !            12: 
        !            13: carp_up = "carp0.link.up && carp1.link.up"
        !            14: carp_down = "!carp0.link.up && !carp1.link.up"
        !            15: carp_sync = "carp0.link.up && carp1.link.up || \
        !            16:     !carp0.link.up && !carp1.link.up"
        !            17: 
        !            18: # The "net" addresses are other addresses which can be used to determine
        !            19: # whether we have connectivity. Make sure the hosts are always up, or
        !            20: # test multiple ip's, 'or'-ing the tests.
        !            21: net = '( "ping -q -c 1 -w 1 192.168.6.8 > /dev/null" every 10 && \
        !            22:     "ping -q -c 1 -w 1 192.168.3.8 > /dev/null" every 10)'
        !            23: 
        !            24: # The peer addresses below are the real ip addresses of the OTHER firewall
        !            25: peer = '( "ping -q -c 1 -w 1 192.168.6.7 > /dev/null" every 10 && \
        !            26:     "ping -q -c 1 -w 1 192.168.3.7 > /dev/null" every 10)'
        !            27: 
        !            28: state auto {
        !            29:        if $carp_up
        !            30:                set-state primary
        !            31:        if $carp_down
        !            32:                set-state backup
        !            33: }
        !            34: 
        !            35: state primary {
        !            36:        init {
        !            37:                run "ifconfig carp0 advskew 10"
        !            38:                run "ifconfig carp1 advskew 10"
        !            39:        }
        !            40:        if ! $net
        !            41:                set-state demoted
        !            42: }
        !            43: 
        !            44: state demoted {
        !            45:        init {
        !            46:                run "ifconfig carp0 advskew 254"
        !            47:                run "ifconfig carp1 advskew 254"
        !            48:        }
        !            49:        if $net
        !            50:                set-state primary
        !            51: }
        !            52: 
        !            53: state promoted {
        !            54:        init {
        !            55:                run "ifconfig carp0 advskew 0"
        !            56:                run "ifconfig carp1 advskew 0"
        !            57:        }
        !            58:        if $peer || ! $net
        !            59:                set-state backup
        !            60: }
        !            61: 
        !            62: state backup {
        !            63:        init {
        !            64:                run "ifconfig carp0 advskew 100"
        !            65:                run "ifconfig carp1 advskew 100"
        !            66:        }
        !            67:        # The "sleep 5" below is a hack to dampen the $carp_sync when we come
        !            68:        # out of promoted state. Thinking about the correct fix...
        !            69:        if ! $carp_sync && $net && "sleep 5" every 10
        !            70:                if ! $carp_sync && $net
        !            71:                        set-state promoted
        !            72: }