[Bridge] Bridge and broadcasting (ping)

Raphaël Rigo ML ml at twilight-hall.net
Wed Dec 8 09:57:32 PST 2004


Hello,
first please CC me since i did not subscribe.
i am currently setting up a VPN with some friends, using openvpn.
Let's do some ascii art to explain the (basic) network :



  __________                   ___________
| 10.0.4.1 |  <--- VPN --->  | 10.0.0.10 |
  ----------                   -----------
       |                             | eth0
  __________                   __________
| 10.0.4.2 |                 | 10.0.0.1 |
  ----------                   ----------

The VPN is materialized by a tap ethernet interface. I am 10.0.0.10.
I am bridging eth0 (lan) and tap1 (vpn) together. Everything works fine 
except that broadcast pings from 10.0.4.1 only get a reply from 10.0.0.10.
Here's a tcpdump of the ping on the bridge interface :
18:55:31.683690 IP 10.0.4.1 > 10.0.255.255: icmp 64: echo request seq 30
18:55:31.683733 IP 10.0.0.10 > 10.0.4.1: icmp 64: echo reply seq 30
18:55:31.683841 IP 10.0.0.1 > 10.0.0.10: icmp 64: echo reply seq 30

As you can see .1 answers to .10, which is wrong.

How can I make it work ?

The thing is that it works on 10.0.4.1, I mean, if i ping 10.0.255.255 
from 10.0.0.10, 10.0.4.2 replies. This gateway is using shorewall, I 
think the config of iptables has something to do with this but I cannot 
find what.

I'm using linux 2.6.10-rc3.

Regards,
Raphaël



More information about the Bridge mailing list