Hello...
Here on Campus we have been connecting existing network fragments into one
big one, results: very unstructured !!
The following ASCII should explain our current setup (the Router/GW is
in my building, but the other networks not)
192.168.1.0
|
|----------- My bulding
| (also 192.168.1.0)
eth0
|
192.168.0.0 | +---------+
192.168.2.0 |---eth1--- | Router/ |
192.168.11.0 | | GW |
172.17.102.0 | +---------+
This is working just fine now.
I now want to seperate my building from the rest of the 192.168.1.0 network,
to reduce traffic, via a transparent bridge :
192.168.1.0
|
eth0 (192.168.1.250)
|
192.168.0.0 | +---------+
192.168.2.0 |-----eth1--------| Router/ |---eth2--------- My bulding
192.168.11.0 | (192.168.2.250) | GW | (also 192.168.1.0)
172.17.102.0 | +---------+
I am using RedHat 5.2 with a newly compiled 2.0.36 kernel with bridging
enabled.
I did try but it didn't work. I put eth0 and eth2 in promiscuous mode and
enabled bridging : brcfg -ena. (I also tryed putting all the interfaces in
promiscuous mode). On the status screen (brcfg) I only saw the
ports configured for FORWARDING, never LEARNING or something else.
I have read the mini/Bridge HOWTO but it's just explains a complete
transparent Bridge (no interfaces with IP's at all).
And now the questions:
Is this basicaly possible, with this setup ??
The eth2 interface is to have no IP. How is the
/etc/sysconfig/network-scripts/ifcfg-eth2 supposed to look ??
Do I need to change the routing tables ?? Current tables :
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 29 eth0
192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 45 eth1
192.168.0.0 192.168.2.1 255.255.255.0 UG 0 0 58 eth1
192.168.11.0 192.168.2.1 255.255.255.0 UG 0 0 84 eth1
172.17.102.0 192.168.2.1 255.255.255.0 UG 0 0 23 eth1
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 eth2
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 2 lo
I also use the the GW as my internet GW (dialup), so I have a masquerading
firewall installed. Is there anything I need to do about that ??
Current FW settings :
/sbin/ipfwadm -F -p deny
/sbin/ipfwadm -F -a accept -S 192.168.0.0/16 -D 192.168.0.0/16
/sbin/ipfwadm -F -a accept -S 192.168.0.0/16 -D 172.17.102.0/24
/sbin/ipfwadm -F -a accept -S 172.17.102.0/24 -D 192.168.0.0/16
/sbin/ipfwadm -F -a m -S 192.168.1.90/32 -D 0.0.0.0/0 -W ppp0
(Thank you if you read this far :)
I hope this gives you the informations you need to help me ;)
Arni
[EMAIL PROTECTED]
