Return to freevrrpd.conf.sample CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / freevrrpd

Annotation of embedaddon/freevrrpd/freevrrpd.conf.sample, revision 1.1.1.1

1.1       misho       1: # This is a simple configuration file for freevrrpd
                      2: # Please read the documentation before modifying these parameters
                      3: # I recommend to not set addr to the unique and real ip of your server because
                      4: # if freevrrpd will shutdown, your server will don't have any IP address.
                      5: # a good utilization is to set a real IP address not managed by freevrrpd and
                      6: # then choosing an alias for the virtual IP address managed by freevrrpd
                      7: #
                      8: # Each VRID Section must begin with [VRID] keyword
                      9: 
                     10: [VRID]
                     11: # serverid is needed to specify the number of the VRID, here VRID = 1
                     12: serverid = 1 
                     13: 
                     14: # you must set interface with a real interface name of your system
                     15: # this interface is used for sending VRRP announces
                     16: interface = rl0
                     17: 
                     18: # this option specify a timeout for an interface like bge/em go down and up
                     19: # when an ethernet (lladdr) adress is setted on it. em/bge take about 2/3
                     20: # secondes before becoming up and running after transiting MASTER/BACKUP states
                     21: # the default is 10 seconds and must work with all NICs without problems
                     22: carriertimeout = 10
                     23: 
                     24: # this option must be set for switches that have spanning tree activated
                     25: # because there is a time between the port activation and the first VLANs
                     26: # packets received. A value of 40 seconds will be good.
                     27: # by default, spanningtreelatency is disabled (=0)
                     28: spanningtreelatency = 0
                     29: 
                     30: # priority = 255 is a MASTER of the VRID
                     31: # priority < 255 is a BACKUP with a priority 0 to 254
                     32: # 254 is a higher BACKUP priority
                     33: priority = 255
                     34: 
                     35: # addr option is need to specify ip address(es) associated with the VRID
                     36: # you can specify multiple addresses separated by ','
                     37: # netmask is specified with CIDR notation so number after '/' represent the
                     38: # number of bits set to 1 for the netmask.
                     39: # eg: /24 is 11111111 11111111 11111111 00000000 = 255.255.255.0
                     40: # you can specify another (pseudo-)device for setting this(ese) adress(es)
                     41: addr = 10.0.0.1/32, vlan100:192.168.1.1/30, vlan101:192.168.10.1/30
                     42: 
                     43: # Monitored circuits (test of carrier, interface and duplex) can be enabled
                     44: # or disabled. it's enabled by default but you may want to deactivate it for
                     45: # old NIC drivers that d'ont support mii bus
                     46: monitoredcircuits = yes
                     47: 
                     48: # Specify the number of concurrent checks on a NIC by monitored circuits
                     49: # before considering to reset the error counter on this NIC. The default value
                     50: # is 3600 concurrent checks (about 1 hour)
                     51: # if 0 is specified, nberrors wil be never resetted
                     52: MCClearErrorsCount = 3600
                     53: 
                     54: # now, you can specify a script name to execute when this host became master
                     55: # of this VRID
                     56: masterscript = /usr/local/bin/master_script.sh
                     57: 
                     58: # and you can specify a script name to execute when this host became backup
                     59: # too
                     60: backupscript = /usr/local/bin/backup_script.sh
                     61: 
                     62: # if physical interface attached to VRID 1 fail you can specify one or more
                     63: # VRIDs that must go to backup state in the same time. (monitored circuits)
                     64: # in this example if rl0 is faulty, xl0 and bge0 go to backup state mode
                     65: # This is extremly useful to avoir blackhole with Firewalls with two interfaces
                     66: vridsdep = 2, 3
                     67: 
                     68: # if you want to authenticate your VRRP packets you can set a password
                     69: # associated with this VRID. this is not required but is you don't set a
                     70: # password, everybody in your LAN can generate VRRP packets without
                     71: # authentification. If you set this, you must set it to BACKUP VRID too, if you
                     72: # don't, all BACKUP VRRP packets will be rejected.
                     73: password = vrid1
                     74: 
                     75: # if you want to authenticate your VRRP packets by AH encryption you must set
                     76: # this option to yes and specify a presharedkey parameter or useIKE=yes if you
                     77: # want an external key negociation like IKE (racoon)
                     78: #AHencryption = no
                     79: 
                     80: # if you want to use an external key exchanger IKE, let freevrrpd know it with
                     81: # useIKE = yes
                     82: #useIKE = no
                     83: 
                     84: # if you have set AHencryption = yes and useIKE = no you must specify a pre
                     85: # shared key known by VRRP servers that is on the same VRID, you can specify
                     86: # the key with this option
                     87: #presharedkey = blahblah
                     88: 
                     89: [VRID]
                     90: # specify a second VRID number 2
                     91: serverid = 2
                     92: interface = xl0
                     93: # priority = 100 so it's a backup
                     94: priority = 100
                     95: addr = 192.168.1.2/32
                     96: password = vrid2
                     97: [VRID]
                     98: serverid = 3
                     99: interface = bge0
                    100: priority = 255
                    101: addr = 192.168.2.2/32
                    102: password = vrid3