#-----------------------------------------------------------------------------
# configuration for a Soekris net45xx
#
# SOEKRIS_NET45xx,v 1.8 2003/09/07 14:10:23 edwin Exp
#-----------------------------------------------------------------------------
machine		i386
cpu		I486_CPU
ident		SOEKRIS_NET45xx
maxusers	0

options		CPU_ELAN
options		HZ=250
options		NO_SWAPPING

options 	INET			#InterNETworking
options 	INET6			#IPv6 communications protocols
options 	FFS			#Berkeley Fast Filesystem
options 	FFS_ROOT		#FFS usable as root device [keep this!]
options 	SOFTUPDATES		#Enable FFS soft updates support
options 	UFS_DIRHASH		#Improve performance on big directories
options 	MFS			#Memory Filesystem
options 	MD_ROOT			#MD is a potential root device
options 	PROCFS			#Process filesystem
options 	COMPAT_43
options 	SYSVSHM			#SYSV-style shared memory
options 	SYSVMSG			#SYSV-style message queues
options 	SYSVSEM			#SYSV-style semaphores
options 	P1003_1B		#Posix P1003_1B real-time extensions
options 	_KPOSIX_PRIORITY_SCHEDULING

# networking/firewall options
options 	IPFILTER
options 	IPFILTER_LOG
##options	IPFILTER_DEFAULT_BLOCK
options 	ICMP_BANDLIM
options 	TCP_DROP_SYNFIN

# DON'T INCLUDE BOTH 'IPSEC' AND 'FAST_IPSEC' -- CHOOSE ONE !
#
##options 	IPSEC			# IP security
##options 	IPSEC_ESP		# IP security (crypto; define w/ IPSEC)
options 	IPSEC_DEBUG		# debug for IP security
#
# Experimental  IPsec   implementation  that  uses  the   kernel  crypto
# framework.  This   cannot  be  configured  together   with  IPSEC  and
# (currently) supports  only IPv4. To  use this you must  also configure
# the crypto device (see below).
#
options 	FAST_IPSEC

# PPP
options 	PPP_BSDCOMP
options 	PPP_DEFLATE

device		isa
device		pci
device		npx0	at nexus? port IO_NPX flags 0x0 irq 13

# ATA (IDE) disk - required for CompactFlash too
device		ata
device		atadisk			# ATA disk drives
options 	ATA_STATIC_ID		#Static device numbering

# Serial (COM) ports
device		sio0	at isa? port IO_COM1 flags 0x30 irq 4

# MII bus support is required for some PCI 10/100 ethernet NICs
device		miibus
device		sis
device		wi

# PCCARD (PCMCIA) support
device		card
device		pcic0
device		pcic1

# crypto subsystem
pseudo-device	crypto		# core crypto support
pseudo-device	cryptodev	# /dev/crypto for access to h/w
# Soekris vpn1211
device		hifn		# Hifn 7951, 7781, etc.

pseudo-device	loop		# Loopback
pseudo-device	ether		# Ethernet
pseudo-device	pty		# Pseudo-TTY
pseudo-device	md		# Memory "disk"
pseudo-device	tun		# Packet tunnel (required by PPP)
pseudo-device	bpf 		# Berkeley packet filter