On Sat, 27 Sep 2003 16:55:35 +0000, Nathan Kinkade <[EMAIL PROTECTED]> wrote:

On Sat, Sep 27, 2003 at 03:31:16PM -0700, Drew Tomlinson wrote:
I'm trying to get a Linksys WET11 Wireless Ethernet Bridge working with a
D-Link 530 NIC that uses the rl driver. I have configured the bridge and
gotten it to work with a Windows XP box if I tell the bridge to use "MAC
address cloning". However I can not get it working on my 4.8 FBSD box.

I'm not really sure but I suspect my problem might be with ARP? The rl0
interface is configured as and the bridge is connected to this
interface. The bridge is configured with an IP address of
but as I understand it, this is only the address to use when connecting to
the web based configuration utility. I have a Linksys access point with IP

Anyway, after attempting connections to these three addresses, my arp table
looks like this:

? ( at (incomplete) on rl0 [ethernet]
? ( at 00:05:5d:d0:ba:67 on rl0 permanent [ethernet]
? ( at (incomplete) on rl0 [ethernet]

I can not get any response from any device beyond the rl0 interface.  I
setup ipfw to log all traffic to that interface and can see the traffic
going out:

Sep 27 15:18:04 blacksheep /kernel: ipfw: 50 Accept ICMP:8.0 out via rl0

Sep 27 15:24:00 blacksheep /kernel: ipfw: 50 Accept ICMP:8.0 out via rl0

Can anyone educate me on arp and if it's my problem, tell me what I might
need to add to my arp table to get things going?



Thank you for your response.

I had this problem recently.  Turns out that ipfw when used in
conjunction with bridging (net.link.ether.bridge_ipfw=1) that your

I don't seem to have this. I'm running 4.8. Here's all of my net.link sysctls:

net.link.generic.system.ifcount: 8
net.link.ether.inet.prune_intvl: 300
net.link.ether.inet.max_age: 1200
net.link.ether.inet.host_down_time: 20
net.link.ether.inet.maxtries: 5
net.link.ether.inet.useloopback: 1
net.link.ether.inet.proxyall: 0
net.link.ether.inet.log_arp_wrong_iface: 1
net.link.ether.ipfw: 0
net.link.gif.max_nesting: 1
net.link.gif.parallel_tunnels: 0

default rule must be to allow all.  You can mitigate this by making your
last rule something like:

deny { tcp or udp } from any to any

I am already set up like this.

This should basically block pretty much any traffic that you are
probably worried about.  To test that this is the problem, disable the
firewall temporarily, maybe with something like:

# sysctl net.link.ether.bridge_ipfw=0

then try your network.  if it works, the re-enable ipfw by setting the
above parameter back to 1.  then take a look at your arp cache expiry
with `arp -an' and make note as to wether the net breaks again as soon
as the arp entry expires.

you can set ipfw to use a default rule of accepting by adding this
option to you kernel config:


As I understand it, I don't need to configure my FBSD box as a bridge. Please let me know if I am incorrect. Basically, I want to use my neighbor's connection as a backup link to the Internet. He has a Linksys Wireless Access Point/Router in his home. Instead of installing a wireless card in my FBSD box, I bought a Linksys Wireless Bridge so I could install it by a window to get a better signal. The Linksys bridge connects via ethernet cable to the D-Link NIC in my FBSD box. Here's a diagram of the setup:

        Public IP
      ADSL Modem/Router
        FBSD 4.8 --------- rl0
           dc1              |
            |         Wireless Bridge
       Internal LAN         |
                      Neighbor's AP

I can get to the wireless bridge from my neighbor's network and I can get to the rl0 from my internal LAN. The breakage is between the rl0 interface and the linksys wireless bridge. Do you have any idea what I need to configure to make things work?

Thanks again for your time!!!


_______________________________________________ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to