On 2013/03/18 15:25, Daniel Hartmeier wrote: > Yes, bridge between em2 and em3. > > Assign the IP (used as gateway by the clients) to bridge0.
This isn't possible on OpenBSD, you either need to put the IP on one real interface (then it may go down if the port is down), or bridge a vether with it (http://www.openbsd.org/faq/faq6.html#Bridge, but you will end up with made-up MAC addresses on the wire that way). iirc NetBSD has changed their bridge(4) to allow an address directly configured on it. > You'll have to duplicate the MAC filter rules per interface. > > The pf rules need to match both interfaces with 'on { em2 em3 }', > and floating state-policy (default) will simply work. No increase in > complexity there. > > If you dislike the syntax there, you can use an interface group, but > it's purely cosmetical. > > HTH, > Daniel
