On Mon, Jan 22, 2007 at 01:05:47AM +0000, Stuart Henderson wrote: > On 2007/01/21 19:01, stan wrote: > > On Sun, Jan 21, 2007 at 11:16:26PM +0000, Stuart Henderson wrote: > > > > ifconfig bridge0 create > > > > ifconfig gif0 create > > > > ifconfig gif0 tunnel x.x.176.33 x.x.176.37 > > > > ifconfig gif0 up > > > > brconfig bridge0 up > > that all looks ok. > > > > > But when I try to do "brconfig learn bridge0" I get a message about the > > > > interface not being configured. Looks like it is though: > > > > > > If you're typing exactly that, you are trying to use the command > > > 'bridge0' on the bridge interface called 'learn'. > > i.e. 'brconfig learn bridge0' is incorrect. > > perhaps you mean 'brconfig bridge0 learn <some_interface>' but that's > unnecessary, 'learn' is the default. > > > > > ifconfig snippet follows > > > > > > 'brconfig' will tell you more than ifconfig. It defaults to learning > > > anyway. > > ifconfig only gives you basic interface information. > > brconfig (maybe 'brconfig -a' depending on how recent your OS is) gives you > more information about the bridge (which MAC addresses are seen on each side > etc). > > > In addition to this I need for the Windows machines to be able to mount > > shares. If I understand that part of it correctly, it's a non routable (sub > > IP) protocol. So I need for the Non IP Ethernet frames to be bridged > > between the 2 locations , right? > > generally it's all TCP/IP with Windows file shares. the main problem is > with network browsing, which is often easier to configure with a flat L2 > network rather than a routed network, as you have setup with the gif > tunnel and bridging. > > consider the ipsec'd gif bridge as some type of ethernet connection > between the sites. (if the term 'bridge' is unfamiliar, it basically just > means a 2-port switch). > Thanks, I thinj I understand now. Basicly I need to either:
1. Do what I have working (ipsec at teh IP level). or 2. Do the bridging, and put both in the same subnet. I was tryng to do 2 _after_ having gotten 1 working, and this does no make sense, in retrospect. Thanks for all the help on this, to everyone that has pitched in and clarified it for me! -- Unix is very simple, but it takes a genius to understand the simplicity. (Dennis Ritchie)