On Mon, Jan 22, 2007 at 01:05:47AM +0000, Stuart Henderson wrote:
> On 2007/01/21 19:01, stan wrote:
> > On Sun, Jan 21, 2007 at 11:16:26PM +0000, Stuart Henderson wrote:
> > > > ifconfig bridge0 create 
> > > > ifconfig gif0 create 
> > > > ifconfig gif0 tunnel x.x.176.33 x.x.176.37 
> > > > ifconfig gif0 up 
> > > > brconfig bridge0 up
> 
> that all looks ok.
> 
> > > > But when I try to do "brconfig learn bridge0" I get a message about the
> > > > interface not being configured. Looks like it is though:
> > > 
> > > If you're typing exactly that, you are trying to use the command
> > > 'bridge0' on the bridge interface called 'learn'.
> 
> i.e. 'brconfig learn bridge0' is incorrect.
> 
> perhaps you mean 'brconfig bridge0 learn <some_interface>' but that's
> unnecessary, 'learn' is the default.
> 
> > > > ifconfig snippet follows
> > > 
> > > 'brconfig' will tell you more than ifconfig. It defaults to learning 
> > > anyway.
> 
> ifconfig only gives you basic interface information.
> 
> brconfig (maybe 'brconfig -a' depending on how recent your OS is) gives you
> more information about the bridge (which MAC addresses are seen on each side
> etc).
> 
> > In addition to this I need for the Windows machines to be able to mount
> > shares. If I understand that part of it correctly, it's a non routable (sub
> > IP) protocol. So I need for the Non IP Ethernet frames to be bridged
> > between the 2 locations , right?
> 
> generally it's all TCP/IP with Windows file shares. the main problem is
> with network browsing, which is often easier to configure with a flat L2
> network rather than a routed network, as you have setup with the gif
> tunnel and bridging.
> 
> consider the ipsec'd gif bridge as some type of ethernet connection
> between the sites. (if the term 'bridge' is unfamiliar, it basically just
> means a 2-port switch).
> 
Thanks, I thinj I understand now. Basicly I need to either:

1. Do what I have working (ipsec at teh IP level). 

or

2. Do the bridging, and put both in the same subnet.

I was tryng to do 2 _after_ having gotten 1 working, and this does no make
sense, in retrospect.

Thanks for all the help on this, to everyone that has pitched in and
clarified it for me!

-- 
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)

Reply via email to