Re: Best/simplest/fastest approach for creating "virtual switch" out of

Article View: bit.listserv.openbsd-pf

Article #171

Back to bit.listserv.openbsd-pf Previous Next

#171

From: Stuart Henderson
Date: Mon, 18 Mar 2013 15:03

24 lines
1921 bytes

On 2013/03/18 15:25, Daniel Hartmeier wrote:
> Yes, bridge between em2 and em3.
> 
> Assign the IP (used as gateway by the clients) to bridge0.

This isn't possible on OpenBSD, you either need to put the IP on one
real interface (then it may go down if the port is down), or bridge a
vether with it (http://www.openbsd.org/faq/faq6.html#Bridge, but you
will end up with made-up MAC addresses on the wire that way).

iirc NetBSD has changed their bridge(4) to allow an address directly
configured on it.

> You'll have to duplicate the MAC filter rules per interface.
> 
> The pf rules need to match both interfaces with 'on { em2 em3 }',
> and floating state-policy (default) will simply work. No increase in
> complexity there.
> 
> If you dislike the syntax there, you can use an interface group, but
> it's purely cosmetical.
> 
> HTH,
> Daniel

Technical Details

Message-ID: <20130318143415.GD2846@symphytum.spacehopper.org>

Path:

arc1-ca.pugleaf.net!q9ni22418pba.1!nntp.google.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn

References: <0f1df14d-6c52-4e16-8077-f64e5c3ba014@googlegroups.com> <20130318142529.GA16007@insomnia.benzedrine.cx>

Show Full Headers

Complete Article Headers

X-Google-Thread: ff4ef,fbee5b1469703794
X-Google-NewGroupId: yes
X-Google-Attributes: gidbffa70e3,domainid0,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
X-Received: by 10.66.243.72 with SMTP id ww8mr692415pac.30.1363619020463;
        Mon, 18 Mar 2013 08:03:40 -0700 (PDT)
Path: arc1-ca.pugleaf.net!q9ni22418pba.1!nntp.google.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn
From: stu@spacehopper.org (Stuart Henderson)
Newsgroups: bit.listserv.openbsd-pf
Subject: Re: Best/simplest/fastest approach for creating "virtual switch" out
 of
Date: 18 Mar 2013 08:03:39 -0700
Organization: None
Lines: 24
Message-ID: <20130318143415.GD2846@symphytum.spacehopper.org>
References: <0f1df14d-6c52-4e16-8077-f64e5c3ba014@googlegroups.com>
 <20130318142529.GA16007@insomnia.benzedrine.cx>
NNTP-Posting-Host: localhost.newsguy.com
Mime-Version: 1.0
NNTP-Posting-Date: 18 Mar 2013 15:03:39 GMT
X-Received-Bytes: 1549
Content-Type: text/plain; charset=us-ascii

Reply to Parent Message