Return to freevrrpd.conf.sample CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / freevrrpd

freevrrpd 1.1

    1: # This is a simple configuration file for freevrrpd
    2: # Please read the documentation before modifying these parameters
    3: # I recommend to not set addr to the unique and real ip of your server because
    4: # if freevrrpd will shutdown, your server will don't have any IP address.
    5: # a good utilization is to set a real IP address not managed by freevrrpd and
    6: # then choosing an alias for the virtual IP address managed by freevrrpd
    7: #
    8: # Each VRID Section must begin with [VRID] keyword
    9: 
   10: [VRID]
   11: # serverid is needed to specify the number of the VRID, here VRID = 1
   12: serverid = 1 
   13: 
   14: # you must set interface with a real interface name of your system
   15: # this interface is used for sending VRRP announces
   16: interface = rl0
   17: 
   18: # this option specify a timeout for an interface like bge/em go down and up
   19: # when an ethernet (lladdr) adress is setted on it. em/bge take about 2/3
   20: # secondes before becoming up and running after transiting MASTER/BACKUP states
   21: # the default is 10 seconds and must work with all NICs without problems
   22: carriertimeout = 10
   23: 
   24: # this option must be set for switches that have spanning tree activated
   25: # because there is a time between the port activation and the first VLANs
   26: # packets received. A value of 40 seconds will be good.
   27: # by default, spanningtreelatency is disabled (=0)
   28: spanningtreelatency = 0
   29: 
   30: # priority = 255 is a MASTER of the VRID
   31: # priority < 255 is a BACKUP with a priority 0 to 254
   32: # 254 is a higher BACKUP priority
   33: priority = 255
   34: 
   35: # addr option is need to specify ip address(es) associated with the VRID
   36: # you can specify multiple addresses separated by ','
   37: # netmask is specified with CIDR notation so number after '/' represent the
   38: # number of bits set to 1 for the netmask.
   39: # eg: /24 is 11111111 11111111 11111111 00000000 = 255.255.255.0
   40: # you can specify another (pseudo-)device for setting this(ese) adress(es)
   41: addr = 10.0.0.1/32, vlan100:192.168.1.1/30, vlan101:192.168.10.1/30
   42: 
   43: # Monitored circuits (test of carrier, interface and duplex) can be enabled
   44: # or disabled. it's enabled by default but you may want to deactivate it for
   45: # old NIC drivers that d'ont support mii bus
   46: monitoredcircuits = yes
   47: 
   48: # Specify the number of concurrent checks on a NIC by monitored circuits
   49: # before considering to reset the error counter on this NIC. The default value
   50: # is 3600 concurrent checks (about 1 hour)
   51: # if 0 is specified, nberrors wil be never resetted
   52: MCClearErrorsCount = 3600
   53: 
   54: # now, you can specify a script name to execute when this host became master
   55: # of this VRID
   56: masterscript = /usr/local/bin/master_script.sh
   57: 
   58: # and you can specify a script name to execute when this host became backup
   59: # too
   60: backupscript = /usr/local/bin/backup_script.sh
   61: 
   62: # if physical interface attached to VRID 1 fail you can specify one or more
   63: # VRIDs that must go to backup state in the same time. (monitored circuits)
   64: # in this example if rl0 is faulty, xl0 and bge0 go to backup state mode
   65: # This is extremly useful to avoir blackhole with Firewalls with two interfaces
   66: vridsdep = 2, 3
   67: 
   68: # if you want to authenticate your VRRP packets you can set a password
   69: # associated with this VRID. this is not required but is you don't set a
   70: # password, everybody in your LAN can generate VRRP packets without
   71: # authentification. If you set this, you must set it to BACKUP VRID too, if you
   72: # don't, all BACKUP VRRP packets will be rejected.
   73: password = vrid1
   74: 
   75: # if you want to authenticate your VRRP packets by AH encryption you must set
   76: # this option to yes and specify a presharedkey parameter or useIKE=yes if you
   77: # want an external key negociation like IKE (racoon)
   78: #AHencryption = no
   79: 
   80: # if you want to use an external key exchanger IKE, let freevrrpd know it with
   81: # useIKE = yes
   82: #useIKE = no
   83: 
   84: # if you have set AHencryption = yes and useIKE = no you must specify a pre
   85: # shared key known by VRRP servers that is on the same VRID, you can specify
   86: # the key with this option
   87: #presharedkey = blahblah
   88: 
   89: [VRID]
   90: # specify a second VRID number 2
   91: serverid = 2
   92: interface = xl0
   93: # priority = 100 so it's a backup
   94: priority = 100
   95: addr = 192.168.1.2/32
   96: password = vrid2
   97: [VRID]
   98: serverid = 3
   99: interface = bge0
  100: priority = 255
  101: addr = 192.168.2.2/32
  102: password = vrid3