CARP paquets dropped by the switch

[mike99]

Thanks Eric, I will take a look at this monday.

[mike99]

Disabling igmp snooping via the init.d file change nothing, Rx Drops still increase. I also add done some test with 1.2.4 with the same result.

It seem to be the multicast src mac-address that the switch reject. IP stealth mode use mac 00:00:5e:00:01:0a while ip mode use 01:00:5e:00:01:0a as src mac.

A good discution that seem related from the Cisco: NSP mailling list archive:
http://www.gossamer-threads.com/lists/cisco/nsp/138935
A other thing I found that may be related, reverse path forwarding:
https://en.wikipedia.org/wiki/Reverse_path_forwarding

Else, I would be able to use unicast mode if I was able to mirror traffic to several ports. Could it be possible ?

[mike99]

On Cisco doc, for MS load balancing in multicast mode, you need to add static ARP entry for both port since it's violate RFC 1812 (that should be update).
http://www.cisco.com/c/en/us/support/do ... lb-00.html (Multicast Mode section)

[mike99]

I found a way that seem to work, the're a option call carppeer that send unicast advertissement to specified peer. This option was not in PF CARP FAQ, nor in the kernel panic article I read about CARP load balancing but found it in the OpenBSD ifconfig man page.

I now must test it with more than 2 hosts on the balancing group. :-)

Thanks for the help.