PF + GATEWAY + BRIDGE + CARP failover

[kevin]

Hello,


I made a post to this list several weeks ago regarding transparent bridging
+ pf + rstp + failover. My experiments with RSTP  / MSTP with my switch and
freebsd transparent bridging produced many problems.

So I would like to remove the 'transparent' item out of the equasion and
assign an ip address to my bridge and provide a gateway ip to all my devices
through a CARP failover IP address.

So my network will look like this :


[switch                     vlan1] 
|                                |
[fw1 bridge ip x.x.x.x]  [fw2 bridge ip x.x.x.y]
|                                |
[fw1 CARP gateway IP x.x.x.x] - [fw2 CARP SLAVE gateway IP x.x.x.x]
|                                |
[switch                     vlan2]
|
[devices (gateway set to CARP gatway IP)]



Does anyone see a problem with this configuration? I want to get around the
locking issues experienced with transparent bridging with only 1 switch and
2 vlans. My mind is a mess from all these problems so if I'm missing
something obvious, please let me know!


Many thanks,

Kevin