From nobody Sun Feb 13 04:34:41 2022
X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
	by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 90780194C00F
	for <freebsd-net@mlmmj.nyi.freebsd.org>; Sun, 13 Feb 2022 04:34:54 +0000 (UTC)
	(envelope-from thomas@gibfest.dk)
Received: from smtp1.servers.tyktech.dk (smtp1.servers.tyktech.dk [85.209.118.35])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
	(Client did not present a certificate)
	by mx1.freebsd.org (Postfix) with ESMTPS id 4JxDzK0yScz3LJg
	for <freebsd-net@freebsd.org>; Sun, 13 Feb 2022 04:34:52 +0000 (UTC)
	(envelope-from thomas@gibfest.dk)
Subject: Re: Some strangeness with CARP
DKIM-Filter: OpenDKIM Filter v2.10.3 smtp1.servers.tyktech.dk 11C3411712
To: Andrea Venturoli <ml@netfence.it>
References: <594e3d18-9645-3b3f-7a41-87c586fb93ad@netfence.it>
Cc: freebsd-net@freebsd.org
From: Thomas Steen Rasmussen <thomas@gibfest.dk>
Message-ID: <13ac2230-2851-fcd0-4661-34074c57c0e5@gibfest.dk>
Date: Sun, 13 Feb 2022 05:34:41 +0100
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Archive: https://lists.freebsd.org/archives/freebsd-net
List-Help: <mailto:freebsd-net+help@freebsd.org>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Subscribe: <mailto:freebsd-net+subscribe@freebsd.org>
List-Unsubscribe: <mailto:freebsd-net+unsubscribe@freebsd.org>
Sender: owner-freebsd-net@freebsd.org
MIME-Version: 1.0
In-Reply-To: <594e3d18-9645-3b3f-7a41-87c586fb93ad@netfence.it>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: en-US
Content-Transfer-Encoding: 7bit
X-Rspamd-Queue-Id: 4JxDzK0yScz3LJg
X-Spamd-Bar: ---
Authentication-Results: mx1.freebsd.org;
	dkim=none;
	dmarc=pass (policy=reject) header.from=gibfest.dk;
	spf=pass (mx1.freebsd.org: domain of thomas@gibfest.dk designates 85.209.118.35 as permitted sender) smtp.mailfrom=thomas@gibfest.dk
X-Spamd-Result: default: False [-3.80 / 15.00];
	 ARC_NA(0.00)[];
	 NEURAL_HAM_MEDIUM(-1.00)[-1.000];
	 FREEFALL_USER(0.00)[thomas];
	 FROM_HAS_DN(0.00)[];
	 TO_DN_SOME(0.00)[];
	 R_SPF_ALLOW(-0.20)[+mx];
	 NEURAL_HAM_LONG(-1.00)[-1.000];
	 MIME_GOOD(-0.10)[text/plain];
	 TO_MATCH_ENVRCPT_SOME(0.00)[];
	 NEURAL_HAM_SHORT(-1.00)[-1.000];
	 RCPT_COUNT_TWO(0.00)[2];
	 DMARC_POLICY_ALLOW(-0.50)[gibfest.dk,reject];
	 MLMMJ_DEST(0.00)[freebsd-net];
	 RCVD_COUNT_ZERO(0.00)[0];
	 FROM_EQ_ENVFROM(0.00)[];
	 R_DKIM_NA(0.00)[];
	 MIME_TRACE(0.00)[0:+];
	 ASN(0.00)[asn:209327, ipnet:85.209.116.0/22, country:DK];
	 MID_RHS_MATCH_FROM(0.00)[]
X-ThisMailContainsUnwantedMimeParts: N

On 2/12/22 12:53 PM, Andrea Venturoli wrote:
> Hello.


Hello :)


> I tracked this down to the switch not learning the MAC address 
> 00:00:5e:00:01:01 (which is what CARP vhid 1 uses), so every outgoing 
> packet is broadcast to the whole network.
> Is this normal???
> 
> 
> 
> Changing to any other VHID (I tried 2, 4 and 10) does not show the same 
> problem, as 00:00:5e:00:01:xx will show up in the switch MAC database.

This is absolutely not normal. VHID 1 usually acts the same as the other 
VHIDs. I also suspect your switch.

Best regards,

Thomas