From owner-freebsd-questions Thu Apr 30 13:23:29 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id NAA13887 for freebsd-questions-outgoing; Thu, 30 Apr 1998 13:23:29 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from mail.exo.net.au (root@sky-valley.exo.net.au [203.14.230.103]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id NAA13876; Thu, 30 Apr 1998 13:23:10 -0700 (PDT) (envelope-from bullseye.apana.org.au!andymac@mail.exo.net.au) Received: by mail.exo.net.au id m0yUzr4-0004p5C (Debian Smail-3.2 1996-Jul-4 #2); Fri, 1 May 1998 06:22:54 +1000 (EST) Received: from bullseye.apana.org.au (central [203.9.107.245]) by bullseye.apana.org.au (8.6.12/8.6.12) with SMTP id UAA14504; Thu, 30 Apr 1998 20:44:37 +1000 Date: Thu, 30 Apr 1998 18:39:30 +1100 (EDT) From: Andrew MacIntyre To: Chris Shenton cc: Luigi Rizzo , current@FreeBSD.ORG, questions@FreeBSD.ORG Subject: Re: Bridging... In-Reply-To: Message-ID: X-X-Sender: andymac@bullseye.apana.org.au MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On 28 Apr 1998, Chris Shenton wrote: > I've got a /240 subnet from my ISP. I'd really prefer not to subnet > this into two /248s and lose two more addresses in the process. I'd > also like to avoid dealing with gated If I can. > > Is there some simple bridging SW? I didn't find anything in the > ports. If there is, what kind of HW do I need to support bridging at > this speed? I don't need packet filtering and other firewall functions > here, but if something like Drawbridge is the easiest thing to make > work, I can do that. As long as it also will let me talk out the PPP > interface to the world. I can see two approaches which might be possible with 2.2.6 as shipped on CD: 1. Use NATD on the system you use to connect to your ISP, and use this system as a router between two subnets (say 10.1.1 and 10.1.2, both /0) with static routes. One disadvantage of this would be that only the router would be visible from the internet. 2. proxy arp requests on the "bridge", with host routes specified for all machines attached to the hubs. This is normally impractical with more than a couple of machines, but your situation may be manageable. -- Andrew I MacIntyre "These thoughts are mine alone..." E-mail: andrew.macintyre@aba.gov.au (work) | Snail: PO Box 370 andymac@bullseye.apana.org.au (play) | Belconnen ACT 2616 Fido: Andrew MacIntyre, 3:620/243.18 | Australia To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message