Re: OpenBSD isakmpd and pf vs Cisco PIX or ASA

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
To: <misc@...>
Date: Friday, April 11, 2008 - 12:13 pm

On Fri, Apr 11, 2008 at 4:12 AM, Henning Brauer wrote:

I didn't suggest that when the "watchdev" interface goes down that the
carp interface would immediately switch to MASTER, but that it could
lower the timeout in waiting for an advertisement from the current
master.

> not worth it. q. e. d.

Probably not. I've never had problems with carp's fallover time and
I've never used a Cisco firewall so I don't really know how it
actually compares. I just wanted to suggest a maybe-solution assuming
the supposed slow failover time was a problem.

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
Re: OpenBSD isakmpd and pf vs Cisco PIX or ASA, Stuart Henderson, (Thu Apr 10, 5:33 pm)
Re: OpenBSD isakmpd and pf vs Cisco PIX or ASA, Matthew Dempsky, (Thu Apr 10, 8:32 pm)
Re: OpenBSD isakmpd and pf vs Cisco PIX or ASA, Henning Brauer, (Fri Apr 11, 7:12 am)
Re: OpenBSD isakmpd and pf vs Cisco PIX or ASA, Matthew Dempsky, (Fri Apr 11, 12:13 pm)
Re: OpenBSD isakmpd and pf vs Cisco PIX or ASA, Karsten McMinn, (Fri Apr 25, 7:39 pm)
Re: OpenBSD isakmpd and pf vs Cisco PIX or ASA, Steven Surdock, (Fri Apr 25, 9:21 pm)
Re: OpenBSD isakmpd and pf vs Cisco PIX or ASA, Henning Brauer, (Fri Apr 11, 12:42 pm)