Hi,

I have a laptop that is connected via wifi to an OBSD router. The router has seperate subnets for the wired and wireless interfaces (ie, they are not bridged). I'd like to give the laptop an IP from the wired LAN, the goal being to eventually get failover to work with trunk(4).

As per the "IPSEC BRIDGE" section in brconfig(8) I've set up host-to-host ipsec and a gif tunnel between the router and the laptop. Then on the router, I bridge the wired interface and the gif tunnel.

tcpdump shows me the laptop is recieving etherip packets from the router, but ofcourse since it isn't a bridge itself it doesn't know what to do with them. How do I get the laptop to process these packets? What interface do I assign an IP address to? I've tried giving the gif tunnel an ipv6 address, but if I then use it to send data it will send protocol 41 (ipv6) encapsulated packets and not 97 (etherip).


Bridging the wired and wireless interfaces directly (and then having the router do transparent IPSEC) would only solve part of the problem, since I'd like the laptop to be able to use its local IP address even if it's doing IPSEC to the router over the internet.

How does one, in general, bridge only a single host to a LAN with an OpenBSD router? Help!!


Please cc,

bbee

Reply via email to