Re: Dual-Homed/Triple-Subnet Bridge Challenge

A little more research on this subject which may switch on a light bulb
or two...

> In any case, this is a critical point we need to clear up 
> from the outset!

Is this the horse's mouth on this subject?
http://www.linux-foundation.org/en/Net:Bridge#Network_cards

To Quote:
"Before you start make sure both network cards are set up and working
properly. Don't set the IP address, and don't let the startup scripts
run DHCP on the ethernet interfaces either. The IP address needs to be
set after the bridge has been configured...The command ifconfig should
show both network cards, and they should be DOWN"

> A conceptual data path diagram would be nice here i.e.
> where does the bridge filter actually reside in relation
> to the *bound* eth0 and eth1 interfaces (as distinct from
> the *raw*  interfaces). Would this depend on whether the
> interfaces were bound *before* or *after* the bridge was set up?

Some useful diagrams in this link:
http://ebtables.sourceforge.net/br_fw_ia/br_fw_ia.html

> My guess is that the bridge filter would need to be first in 
> line so perhaps additional rules are necessary before the 
> DROP rule to "route" 192.168.3.* and 192.168.4.* packets to
> the "internal" interfaces. Maybe I'm clutching at straws here.
> Any ideas?

Okay, I'm very unsure about these rules but I did come across
the following example, which might be pertinent:
http://ebtables.sourceforge.net/examples.html#ex_brouter

And yet, this seems to contradict the "horse's mouth" above
in relation to unbinding interfaces before bridging!

Vincent



-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/