VMAC problems

Jon Foster <[email protected]>
Newsgroups gmane.linux.keepalived.devel
Organization JF Possibilities, Inc.
Message-ID <[email protected]>
I've been trying to use the vmac support without much success. First the
system details:

Distro: Gentoo Linux x86_64 Linux current.
Kernel: Linux 3.10.17 x86_64
Keepalived: 1.2.12

I've followed the "NOTE_vrrp_vmac.txt" file. And have a config like this:


-----
vrrp_instance vrrp-eth1-1 {
    state MASTER
    interface eth1
    virtual_router_id 19
    priority 100
    advert_int 2
    use_vmac
    vmac_xmit_base
    notify_master "/etc/keepalived/config_vmac vrrp/19"
    virtual_ipaddress {
        10.10.10.19
    }
    authentication {
        auth_type AH
        auth_pass SECret
    }
    smtp_alert
}
-----

My notify script looks like this:

-----
#!/bin/sh
# Tweak global ARP handling. All of these default to 0
sysctl -qw net.ipv4.conf.all.arp_ignore=1
sysctl -qw net.ipv4.conf.all.arp_announce=1
sysctl -qw net.ipv4.conf.all.arp_filter=0

# Alter eth1 behavior
sysctl -qw net.ipv4.conf.eth1.arp_filter=1

# Finally configure the virtual network adapter
sysctl -qw "net.ipv4.conf.$1.arp_filter=0"
sysctl -qw "net.ipv4.conf.$1.accept_local=1"
-----


The global ARP settings are setup as described in the notify script, so
the notify script is redundant for that purpose. Just making sure it
doesn't get changed by someone else.

My problem is simple. No response from the virtual IP address. Except
for the notify script, use_vmac and vmax_xmit_base the configuration
works. When I add these lines I see the virtual adapter created but
can't ping it or get a response from it. It does however switch between
MASTER and BACKUP with its BACKUP server as expected.

I've manually setup macvlan adapters with a Linux 3.2.0 i386 system and
configured the ARP settings the same and the virtual adapter works for
me. The only difference that I see from my test setup and the vmac setup
by keepalived is that I was using "bridge" mode and keepalived uses
"private".

I should also mention that with my test macvlan adapters I had to
manually enable "promiscuous" mode on the real NIC for it to work. I had
modified my notify script to do that also... but to no avail.

Anyone know what I'm doing wrong?

THX - Jon

-- 
Sent from my Debian Linux laptop -- http://www.debian.org/intro/about

Jon Foster
JF Possibilities, Inc.
[email protected]
541-410-2760
Making computers work for you!


------------------------------------------------------------------------------
Open source business process management suite built on Java and Eclipse
Turn processes into business applications with Bonita BPM Community Edition
Quickly connect people, data, and systems into organized workflows
Winner of BOSSIE, CODIE, OW2 and Gartner awards
http://p.sf.net/sfu/Bonitasoft
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.