bridge with access on both interfaces

From: Ian Smith (smithi_at_nimnet.asn.au)
Date: 12/23/03

  • Next message: Michael W. Oliver: "Re: bridge with access on both interfaces" 
    Date: Wed, 24 Dec 2003 04:38:32 +1100 (EST)
To: freebsd-net@freebsd.org

    Hello net crew,

    We're new to bridges; please be gentle. 4.8-RELEASE box, 2 ed NICs,
    test rig with 10-base coax. Bridging itself is working nicely.

    Aim is for the box to bridge a 192.168.0.1 gateway (satellite down /
    ISDN back proxy server black box) to a /24 of about a dozen mostly winXP
    boxes, using IPFW to count and dis/enable bridged connections to gw. All
    that's well along, but the firewall is just open so far while struggling
    with inside/outside connectivity to/from the bridge box itself.

    Assigning an address (.7) to the outside interface (ed0) works fine for
    outside (gw side) access, but we also need this box accessible from the
    inside, for ssh/webmin/web/mysql and a samba domain controller / file
    server for the inside network. My coworker has that side well in hand.

    What I can't get to is setting up both NICs for the same /24, using
    either one or two separate addresses. I'd hoped to get away with one
    IP, which some of the docs (and bridge.c, skimmed) led me to believe
    that any local IPs of this host, on whatever of the bridged interfaces,
    should provide unbridged local stack access - however if we need to have
    'inside' and 'outside' IPs separately on each bridge interface, fine.

    In short, ifconfig appears unwilling to have two NICs covering the same
    /24. Can this be set up? I'm also at a bit of a loss with the routing,
    so inside packets to the bridge box (ie unbridged packets) are responded
    to on the same interface, and outside unbridged packets go only to/from
    the gw. Some tcpdumps on both in and outside interfaces suggest an ARP
    response problem also, perhaps; no responses on the inside iface at all.

    I'm unsure if that's too little initial detail or too much?

    Clues, anyone?

    Ian

    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"

  • Next message: Michael W. Oliver: "Re: bridge with access on both interfaces"

    Relevant Pages

    • Re: bridge issues with pf rules on OpenBSD/Sparc
      ... confused as to which physical interface traffic goes in and out on ... for the bridge, I was hoping to have the bridge tell it. ... >> router always appears to match rules for le2 outbound traffic from ... I want to be functional between the LAN and AP. ...
      (comp.unix.bsd.openbsd.misc)
    • Re: Paketfiler als Bridge (was: Stealth Gateway)
      ... >>der Hauptnachteil eines solchen Paketfilters. ... Eine Ethernet Bridge nimmt alle Ethernetpakete auf einem Interface ...
      (de.comp.security.firewall)
    • Re: Multiple pvcs on Cisco 878
      ... full bridge. ... interface BRI0 ... ip route 0.0.0.0 0.0.0.0 Dialer0 ... The gateway of last resort disappears, and the routing table is shut ...
      (comp.dcom.sys.cisco)
    • Re: If_bridge behaving as HUB
      ... I have a bridge setup with a number of vlan IF's as members. ... After a while traffic destined for one member IF are sent to all member IF's. ... A bridge works like a hub, forwarding traffic from one interface to ... Multicast and broadcast packets are always forwarded to all ...
      (freebsd-net)
    • bridge issues with pf rules on OpenBSD/Sparc
      ... I bridge two interfaces, wherein one interface has an IP address ... bridging causes pf to mis-apply frames to the wrong interface. ... @4 pass out log-all quick on le0 all ... packets that TRAVERSE the router from one host on le0 to another on le2, ...
      (comp.unix.bsd.openbsd.misc)