Re: "Hiding" a "chatty" bridge link
"Cunningham, Robert" <[email protected]> Wed, 11 Jun 2014 14:08:05 +0000
| Newsgroups | gmane.linux.network.bridge.ebtables.user |
|---|---|
| Message-ID | <8D5812289502B448AD36E6780A069B8D0138773911@ashexcmb01.corp.solutionpoint-intl.com> |
--===============0701444072963178795== Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_8D5812289502B448AD36E6780A069B8D0138773911ashexcmb01cor_" --_000_8D5812289502B448AD36E6780A069B8D0138773911ashexcmb01cor_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Do you know of an up-to-date "paint by numbers" complete example or tutoria= l for l2tp3? My initial searches found recipes that are missing various pa= rts (such as rules for MTU management), or use legacy tools instead of the = "ip" command (I'd like to be 'future-proof' to simplify maintenance, if the= "ip" command is up to it). And the top-level documentation (http://man7.o= rg/linux/man-pages/man8/ip-l2tp.8.html ) is somewhat opaque to me as a firs= t-time user. After the l2tpv3 tunnel is up, what is the best way to temporarily bring up= ssh on the same physical eth0 interface? Is it as simple as adding and re= moving the IP address on eth0 and restarting ssh? (ssh should always be av= ailable on eth1.) Can I be sure that all other traffic arriving at eth0 wi= ll still go through the tunnel? The tunnel and proxy don't (yet) need any security (authentication or encry= ption), since the RF link itself is fully encrypted and the LAN segments ar= e physically isolated (and would be DMZ'ed if connected to the corporate LA= N/WAN). Plus, the ARM chips and NICs don't appear to have onboard encrypti= on engines (or they lack drivers) to offload the CPU (latency and throughpu= t hit). Access to the ARM board logins would be only over encrypted links = (ssh). I'm also thinking it could be convenient to occasionally use the ARM boards= as part of my test environment, such as to run Wireshark or iperf. Any is= sues I should be aware of? Or would it be better not to? Thanks! -BobC From: Fernando Rodriguez [mailto:frod-Y20lP/[email protected]] Sent: Wednesday, June 11, 2014 6:37 AM To: Cunningham, Robert Cc: [email protected] Subject: Re: [Ebtables-user] "Hiding" a "chatty" bridge link Hello, 1.- Layer 2 tunnel You can do a Layer 2 tunnel to pass the traffic from one side to the other = transparently read on l2tpv3 this will work as if you where directly connec= ted to the other side of the network. 2.- A simple proxy. You can use a ssh to create a proxy to the lan of the equipment you want to= monitor so if the equipment is on lan B you can ssh -D and make a tunnel a= s if you where ARM B so you can read the traffic directly. On Jun 10, 2014, at 10:30 AM, Cunningham, Robert <RCunningham@nsmsurveillan= ce.com<mailto:[email protected]>> wrote: Hi, I have a test LAN that I needed to extend to another building, so I got a p= oint-to-point RF link (non-WiFi) that does the job nicely. Unfortunately, = that link generates lots of miscellaneous traffic (STP, ARP, etc.) and also= hosts a web-based management interface on each end that I can't disable (t= hough I can set its address, but not the port). I like my test LAN to be = very, very clean: I mainly use it to Wireshark various instrumentation prod= ucts (networked sensors and data relays) to check for correct data packet c= ontent, spurious traffic, and to gather traffic stats under various operati= onal conditions. Devices under test may use any valid IPv4 address, and t= he test LAN presently has no direct connection to a WAN or any other compan= y LAN (but it may in the future). I thought it would be a "simple" task to take a pair of ARM-Ubuntu boards I= had available (similar to Beagle/Panda, running 12.04 LTS) and put one bet= ween each end of the RF link and the test LAN to hide the chatter. But for= the life of me I can't come up with a workable configuration. I've fallen= into ebtables and I can't get up! Here's the hardware picture: |- ARM-A -| |- RF-A -| |- RF-B -| |- ARM-B -| Local Test LAN -- eth0 eth1 -- wired RF -- RF wired -- eth1 eth0 --= Remote Test LAN My goal is to make the two eth0 interfaces be transparent, like a cable or = a 2-port switch: Packets arriving on one eth0 depart on the other, and vice= -versa. ARP requests (and all other non-IP traffic) are passed cleanly thr= ough. All traffic originated by RF-A and RF-B is dropped before exiting ei= ther eth0. Neither eth0 will have an IP address. There should be no need = for STP. If possible, I'd even like the MAC addresses to be unchanged by t= he link (so I don't have to think too hard while using Wireshark). But I would like the RF management interfaces to be visible within the ARM = boards (e.g., if I add another interface via USB). So I don't want to drop= their packets on ingress to eth1, but certainly not let them egress eth0. = I'd also like to be able to be able temporarily expose an SSH interface fo= r each ARM board on eth0 to make board configuration easier (and always hav= e SSH on eth1, so I can configure over the RF link). Here's my progress so far (though it may only show my ignorance). The addr= essing can be anything it needs to be. ARM-A: eth0 ---- br0 ------- dummy0 --------- gre0 eth1 (no IP) (no IP) (192.168.1.254/24) (to ARM-B: 192.168.2.254) (172.10.= 10.10) ARM-B: eth0 ---- br0 ------- dummy0 -------- gre0 eth1 (no IP) (no IP) (192.168.2.254/24) (to ARM-A: 192.168.1.245) (172.10.= 10.11) To provide temporary access to services on eth0, I'm thinking I could dynam= ically create eth0:0 with an IP address, then delete it when no longer need= ed. But will it interfere with the passing of all other traffic over the t= unnel? I haven't yet been able to get a ping through the link, and I am way too as= hamed to share the tangled mess of buggy ebtables rules I've been trying to= write (I'm certain I'm putting bad rules into the wrong tables, etc.). Any clues to get me going in the right direction? I can't imagine that thi= s kind of "device wrapping and tunneling" is all that rare, but many net se= arches have failed to turn up relevant examples (or examples I understood t= o be relevant), and endless reading of the ebtables/iptables documentation = has left me bleary-eyed. Perhaps it's a vocabulary thing? I'm obviously n= ot any kind of network engineer (I mainly work with TCP/UDP payloads). I've tried asking on various StackExchange forums, but with no responses so= far. Help? TIA, -BobC ---------------------------------------------------------------------------= --- HPCC Systems Open Source Big Data Platform from LexisNexis Risk Solutions Find What Matters Most in Your Big Data with HPCC Systems Open Source. Fast. Scalable. Simple. Ideal for Dirty Data. Leverages Graph Analysis for Fast Processing & Easy Data Exploration http://p.sf.net/sfu/hpccsystems____________________________________________= ___ Ebtables-user mailing list [email protected]<mailto:[email protected]= net> https://lists.sourceforge.net/lists/listinfo/ebtables-user --_000_8D5812289502B448AD36E6780A069B8D0138773911ashexcmb01cor_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)"> <style><!-- /* Font Definitions */ @font-face {font-family:Helvetica; panose-1:2 11 6 4 2 2 2 2 2 4;} @font-face {font-family:Helvetica; panose-1:2 11 6 4 2 2 2 2 2 4;} @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;} @font-face {font-family:Tahoma; panose-1:2 11 6 4 3 5 4 4 2 4;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0in; margin-bottom:.0001pt; font-size:12.0pt; font-family:"Times New Roman","serif";} a:link, span.MsoHyperlink {mso-style-priority:99; color:blue; text-decoration:underline;} a:visited, span.MsoHyperlinkFollowed {mso-style-priority:99; color:purple; text-decoration:underline;} span.EmailStyle17 {mso-style-type:personal-reply; font-family:"Calibri","sans-serif"; color:#1F497D;} .MsoChpDefault {mso-style-type:export-only; font-size:10.0pt;} @page WordSection1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in;} div.WordSection1 {page:WordSection1;} --></style><!--[if gte mso 9]><xml> <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" /> </xml><![endif]--><!--[if gte mso 9]><xml> <o:shapelayout v:ext=3D"edit"> <o:idmap v:ext=3D"edit" data=3D"1" /> </o:shapelayout></xml><![endif]--> </head> <body lang=3D"EN-US" link=3D"blue" vlink=3D"purple"> <div class=3D"WordSection1"> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif";color:#1F497D">Do you know of an up-to-d= ate “paint by numbers” complete example or tutorial for l2tp3?&= nbsp; My initial searches found recipes that are missing various parts (suc= h as rules for MTU management), or use legacy tools instead of the “ip= ” command (I’d like to be ‘future-proof’ to simplif= y maintenance, if the “ip” command is up to it). And the = top-level documentation (http://man7.org/linux/man-pages/man8/ip-l2tp.8.htm= l ) is somewhat opaque to me as a first-time user.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif";color:#1F497D"><o:p> </o:p></span><= /p> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif";color:#1F497D">After the l2tpv3 tunnel i= s up, what is the best way to temporarily bring up ssh on the same physical= eth0 interface? Is it as simple as adding and removing the IP address on eth0 and restarting ssh? (ssh should always be ava= ilable on eth1.) Can I be sure that all other traffic arriving at eth= 0 will still go through the tunnel?<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif";color:#1F497D"><o:p> </o:p></span><= /p> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif";color:#1F497D">The tunnel and proxy don&= #8217;t (yet) need any security (authentication or encryption), since the R= F link itself is fully encrypted and the LAN segments are physically isolated (and would be DMZ’ed if connected to the corporate LAN/WAN)= . Plus, the ARM chips and NICs don’t appear to have onboard enc= ryption engines (or they lack drivers) to offload the CPU (latency and thro= ughput hit). Access to the ARM board logins would be only over encrypted links (ssh).<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif";color:#1F497D"><o:p> </o:p></span><= /p> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif";color:#1F497D">I’m also thinking i= t could be convenient to occasionally use the ARM boards as part of my test= environment, such as to run Wireshark or iperf. Any issues I should be aware of? Or would it be better not to?<o:p></o:p></span><= /p> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif";color:#1F497D"><o:p> </o:p></span><= /p> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif";color:#1F497D">Thanks!<o:p></o:p></span>= </p> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif";color:#1F497D"><o:p> </o:p></span><= /p> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif";color:#1F497D">-BobC<o:p></o:p></span></= p> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif";color:#1F497D"><o:p> </o:p></span><= /p> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif";color:#1F497D"><o:p> </o:p></span><= /p> <div style=3D"border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in = 4.0pt"> <div> <div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in = 0in 0in"> <p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:"= ;Tahoma","sans-serif"">From:</span></b><span style=3D"font-s= ize:10.0pt;font-family:"Tahoma","sans-serif""> Fernando= Rodriguez [mailto:frod-Y20lP/[email protected]] <br> <b>Sent:</b> Wednesday, June 11, 2014 6:37 AM<br> <b>To:</b> Cunningham, Robert<br> <b>Cc:</b> [email protected]<br> <b>Subject:</b> Re: [Ebtables-user] "Hiding" a "chatty"= bridge link<o:p></o:p></span></p> </div> </div> <p class=3D"MsoNormal"><o:p> </o:p></p> <div> <div> <div> <p class=3D"MsoNormal"><span style=3D"font-family:"Helvetica",&qu= ot;sans-serif";color:black">Hello,<o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-family:"Helvetica",&qu= ot;sans-serif";color:black"><br> <br> <o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-family:"Helvetica",&qu= ot;sans-serif";color:black"><br> <br> <o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-family:"Helvetica",&qu= ot;sans-serif";color:black"><br> <br> <o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-family:"Helvetica",&qu= ot;sans-serif";color:black">1.- Layer 2 tunnel<o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-family:"Helvetica",&qu= ot;sans-serif";color:black"><o:p> </o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-family:"Helvetica",&qu= ot;sans-serif";color:black">You can do a Layer 2 tunnel to pass the tr= affic from one side to the other transparently read on l2tpv3 this will wor= k as if you where directly connected to the other side of the network.<o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-family:"Helvetica",&qu= ot;sans-serif";color:black"><o:p> </o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-family:"Helvetica",&qu= ot;sans-serif";color:black"><o:p> </o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-family:"Helvetica",&qu= ot;sans-serif";color:black">2.- A simple proxy.<o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-family:"Helvetica",&qu= ot;sans-serif";color:black"><o:p> </o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-family:"Helvetica",&qu= ot;sans-serif";color:black">You can use a ssh to create a proxy to the= lan of the equipment you want to monitor so if the equipment is on lan B y= ou can ssh -D and make a tunnel as if you where ARM B so you can read the traffic directly.<o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-family:"Helvetica",&qu= ot;sans-serif";color:black"><o:p> </o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif";color:black"> <o:p></o:p></span></p= > </div> </div> </div> <p class=3D"MsoNormal"><o:p> </o:p></p> <div> <div> <p class=3D"MsoNormal">On Jun 10, 2014, at 10:30 AM, Cunningham, Robert <= ;<a href=3D"mailto:[email protected]">RCunningham@nsmsurveill= ance.com</a>> wrote:<o:p></o:p></p> </div> <p class=3D"MsoNormal"><br> <br> <o:p></o:p></p> <div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif"">Hi,<o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif""> <o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif"">I have a test LAN that I needed to exte= nd to another building, so I got a point-to-point RF link (non-WiFi) that d= oes the job nicely. Unfortunately, that link generates lots of miscellaneous traffic (STP, ARP, etc.) and also hosts a web-based = management interface on each end that I can’t disable (though I can s= et its address, but not the port). I like my test LAN to be ver= y, very clean: I mainly use it to Wireshark various instrumentation products (networked sensors and data relays) to check for = correct data packet content, spurious traffic, and to gather traffic stats = under various operational conditions. Devices under test may us= e any valid IPv4 address, and the test LAN presently has no direct connection to a WAN or any other company LAN (but = it may in the future).<o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif""> <o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif"">I thought it would be a “simple&#= 8221; task to take a pair of ARM-Ubuntu boards I had available (similar to = Beagle/Panda, running 12.04 LTS) and put one between each end of the RF link and the test LAN to hide the chatter. But for the life of me= I can’t come up with a workable configuration. I’ve fall= en into ebtables and I can’t get up!<o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif""> <o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif"">Here’s the hardware picture:<o:p>= </o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Co= urier New""> &nbs= p; |- ARM-A -| = |- RF-A -| |- RF-B -| |- ARM-B -|</span= ><span style=3D"font-size:11.0pt;font-family:"Calibri","sans= -serif""><o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Co= urier New"">Local Test LAN -- eth0 eth1 -- wired &nbs= p; RF -- RF wired -- eth1 eth0 -– Remote Test= LAN</span><span style=3D"font-size:11.0pt;font-family:"Calibri",= "sans-serif""><o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Co= urier New""> </span><span style=3D"font-size:11.0pt;font-family:&= quot;Calibri","sans-serif""><o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif"">My goal is to make the two eth0 interfa= ces be transparent, like a cable or a 2-port switch: Packets arriving on on= e eth0 depart on the other, and vice-versa. ARP requests (and all other non-IP traffic) are passed cleanly through. All traff= ic originated by RF-A and RF-B is dropped before exiting either eth0. = Neither eth0 will have an IP address. There should be no need for ST= P. If possible, I’d even like the MAC addresses to be unchanged by the link (so I don’t have to think too hard while= using Wireshark).<o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif""> <o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif"">But I would like the RF management inte= rfaces to be visible within the ARM boards (e.g., if I add another interfac= e via USB). So I don’t want to drop their packets on ingress to eth1, but certainly not let them egress eth0. I’d also like= to be able to be able temporarily expose an SSH interface for each ARM boa= rd on eth0 to make board configuration easier (and always have SSH on eth1,= so I can configure over the RF link).<o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif""> <o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif"">Here’s my progress so far (though= it may only show my ignorance). The addressing can be anything it ne= eds to be.<o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif""> <o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Co= urier New"">ARM-A:</span><span style=3D"font-size:11.0pt;font-family:&= quot;Calibri","sans-serif""><o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Co= urier New""> eth0 ---- br0 ------- dummy0 --------- gre0 &n= bsp; &nbs= p; eth1</span><span style=3D"font-= size:11.0pt;font-family:"Calibri","sans-serif""><o:p></= o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Co= urier New"">(no IP) (no IP) (192.168.1.254/24) = (to ARM-B: 192.168.2.254) (172.10.10.10)</span><span style=3D"= font-size:11.0pt;font-family:"Calibri","sans-serif""><o= :p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Co= urier New""> </span><span style=3D"font-size:11.0pt;font-family:&= quot;Calibri","sans-serif""><o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Co= urier New"">ARM-B:</span><span style=3D"font-size:11.0pt;font-family:&= quot;Calibri","sans-serif""><o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Co= urier New""> eth0 ---- br0 ------- dummy0 -------- gre0 &nb= sp;  = ; eth1</span><span style=3D"= font-size:11.0pt;font-family:"Calibri","sans-serif""><o= :p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Co= urier New"">(no IP) (no IP) (192.168.2.254/24) = (to ARM-A: 192.168.1.245) (172.10.10.11)</span><span style=3D"= font-size:11.0pt;font-family:"Calibri","sans-serif""><o= :p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Co= urier New""> </span><span style=3D"font-size:11.0pt;font-family:&= quot;Calibri","sans-serif""><o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif"">To provide temporary access to services= on eth0, I’m thinking I could dynamically create eth0:0 with an IP a= ddress, then delete it when no longer needed. But will it interfere with the passing of all other traffic over the tunnel?<o:p></o:p></span></= p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif""> <o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif"">I haven’t yet been able to get a = ping through the link, and I am way too ashamed to share the tangled mess o= f buggy ebtables rules I’ve been trying to write (I’m certain I’m putting bad rules into the wrong tables, etc.).<o:p></o:p></span= ></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif""> <o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif"">Any clues to get me going in the right = direction? I can’t imagine that this kind of “device wrap= ping and tunneling” is all that rare, but many net searches have fail= ed to turn up relevant examples (or examples I understood to be relevant), and e= ndless reading of the ebtables/iptables documentation has left me bleary-ey= ed. Perhaps it’s a vocabulary thing? I’m obviously = not any kind of network engineer (I mainly work with TCP/UDP payloads).<o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif""> <o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif"">I’ve tried asking on various Stac= kExchange forums, but with no responses so far. Help?<o:p></o:p></spa= n></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif""> <o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif"">TIA,<o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif""> <o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif"">-BobC<o:p></o:p></span></p> </div> <div> <p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca= libri","sans-serif""> <o:p></o:p></span></p> </div> <p class=3D"MsoNormal"><span style=3D"font-size:9.0pt;font-family:"Hel= vetica","sans-serif"">--------------------------------------= ----------------------------------------<br> HPCC Systems Open Source Big Data Platform from LexisNexis Risk Solutions<b= r> Find What Matters Most in Your Big Data with HPCC Systems<br> Open Source. Fast. Scalable. Simple. Ideal for Dirty Data.<br> Leverages Graph Analysis for Fast Processing & Easy Data Exploration<br= > <a href=3D"http://p.sf.net/sfu/hpccsystems_________________________________= ______________"><span style=3D"color:purple">http://p.sf.net/sfu/hpccsystem= s_______________________________________________</span></a><br> Ebtables-user mailing list<br> <a href=3D"mailto:[email protected]"><span style=3D"color= :purple">[email protected]</span></a><br> <a href=3D"https://lists.sourceforge.net/lists/listinfo/ebtables-user"><spa= n style=3D"color:purple">https://lists.sourceforge.net/lists/listinfo/ebtab= les-user</span></a><o:p></o:p></span></p> </div> </div> <p class=3D"MsoNormal"><o:p> </o:p></p> </div> </div> </body> </html> --_000_8D5812289502B448AD36E6780A069B8D0138773911ashexcmb01cor_-- --===============0701444072963178795== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ------------------------------------------------------------------------------ HPCC Systems Open Source Big Data Platform from LexisNexis Risk Solutions Find What Matters Most in Your Big Data with HPCC Systems Open Source. Fast. Scalable. Simple. Ideal for Dirty Data. Leverages Graph Analysis for Fast Processing & Easy Data Exploration http://p.sf.net/sfu/hpccsystems --===============0701444072963178795== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Ebtables-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/ebtables-user --===============0701444072963178795==--