|
From: Haute S. <sub...@gm...> - 2008-01-31 21:30:17
|
Franck Bourdonnec wrote:
> Le mercredi 30 janvier 2008 19:28, Olaf Westrik a écrit :
>
>> Gilles Espinasse wrote:
>>
>>> My suggestion would be to create CONFIG_GREEN, CONFIG_BLUE,
>>> CONFIG_ORANGE, CONFIG_RED by default and put inside the number of
>>> interfaces of corresponding color inside.
>>> This way, it is trivial to test if an interface type is configured and in
>>> the futur, we may have a loop to configure each interface of the same
>>> color.
>>>
>> I forgot to write that down, I actually considered GREEN_COUNT,
>> BLUE_COUNT etc. But the actual name is not that important. Important is
>> that they will be (always) present and set to 0,1,2 etc.
>>
>> This makes (especially if we make multiple colours someday) testing and
>> loop iteration very easy.
>>
>>
>> Olaf
>>
>
> Here we come, fixed configuration is bad, un-extandable, un-understandable.
> Better now than never.
>
> The actual mistake you are doing (from1.4) is saying that a logical interface
> is a physical interface.
>
> Clearly separate the hardware interface with it's own and relevant parameters
> (eg an eth, an isdn, an usb, a wifi, whatever you want) from logical
> interfaces used in the firewall (red, green(s), ...) then use a bind system
> to say RED is this hardware interfaces, GREEN is that one, ....
>
>
>
> Franck
>
>
Just to extend that a bit, if VLAN support is every added to the mix
then multiple GREEN_x logical interfaces could actually bind to the same
hardware interface.
--
Do not meddle in the affairs of wizards,
for they are subtle and quick to anger.
-- Gildor Inglorion
|