On Fri, 30 Nov 2007, Steve Drew wrote:
> Hi,
>
> I've been trying to get a LVS-TUN setup working, but I've been
> experiencing problems with our PIX dropping traffic.
Have you read
http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.weird_hardware.html
It has examples of hardware manufacturers breaking tcpip
protocols to enhance their market share.
If you figure it out (or don't figure it out), let us know
and I'll add it to the section.
With reverse path verification turned off, have you checked
that you can get packets with src_addr=VIP out of the
network?
Thanks Joe
--
Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at http://www.wm7d.net/azproj.shtml
Homepage http://www.austintek.com/ It's GNU/Linux!
|