Re: [Shorewall-users] Bridge Issue

[Tom E. <te...@sh...>]

Fernando Rodriguez wrote:
> =20
> It also seems that the lower the number 00001 means that is the root br=
idge
> that means that is the master bridge of the network
>=20
> Yes the routing is correct i have put my computer in the 192.168.0.0/24=

> segment and i dont ping the bridge to its ip=20

I guess my advice would be to try one of the many published *tested*
bridge configuration scripts available (there are a number of them on
the Shorewall site). For example, I've never seen a bridge configuration
script that explicitly sets promiscuous mode like yours is doing.

Here's the config info of a working bridge. Notice that eth1 is *not* in
promiscuous mode.

root@lists:/home/teastep/shorewall/trunk/New# brctl show
bridge name     bridge id               STP enabled     interfaces
br0             8000.00a0ccd2353a       no              tap0
                                                        eth1
root@lists:/home/teastep/shorewall/trunk/New# man brctl


3: eth1: <BROADCAST,MULTICAST,UP,10000> mtu 1500 qdisc pfifo_fast qlen 10=
00
    link/ether 00:a0:cc:d2:35:3a brd ff:ff:ff:ff:ff:ff
    inet6 fe80::2a0:ccff:fed2:353a/64 scope link
       valid_lft forever preferred_lft forever
4: tap0: <BROADCAST,MULTICAST,UP,10000> mtu 1500 qdisc noqueue qlen 100
    link/ether 3a:19:0e:23:2c:2a brd ff:ff:ff:ff:ff:ff
    inet6 fe80::3819:eff:fe23:2c2a/64 scope link
       valid_lft forever preferred_lft forever
5: br0: <BROADCAST,MULTICAST,UP,10000> mtu 1500 qdisc noqueue
    link/ether 00:a0:cc:d2:35:3a brd ff:ff:ff:ff:ff:ff
    inet 192.168.3.254/24 brd 192.168.3.255 scope global br0
    inet 192.168.1.254/24 scope global br0
    inet6 fe80::2a0:ccff:fed2:353a/64 scope link
       valid_lft forever preferred_lft forever
root@lists:/home/teastep/shorewall/trunk/New#

-Tom
--=20
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ te...@sh...
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key