Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.networking > #4141

Re: Separate two network bridges on linux

From Kevin Osthoff <icepic1984@gmx.de>
Newsgroups comp.os.linux.networking
Subject Re: Separate two network bridges on linux
Date 2018-06-21 23:52 +0200
Message-ID <8736xfbydy.fsf@gmx.de> (permalink)
References <878t77c331.fsf@gmx.de> <pggr42$ijn$1@tncsrv09.home.tnetconsulting.net>

Show all headers | View raw


Grant Taylor <gtaylor@tnetconsulting.net> writes:

> Hi,

Hi Grant!

> I don't think this has anything to do with bridging.
>
> It also sounds like devices on lan0 (eth0) and wifi0 use brg0 as their
> default gateway.  Similarly devices on lan1 (eth1) and wifi1 use brg1
> as their default gateway.  So client devices are using their default
> gateway to get to where ever they want to go, even if that's the other
> network.
>
> Linux has routes to networks on brg0 and brg1 as directly attached.
> I'm guessing it also has an internet connection and a default route.
> The point being that Linux as the (assumed) default gateway for each
> network is dutifully routing traffic between the networks.
>
>> My question is, why does this happen, how to configure the router so
>> that both networks are separated form each other? Do I need to use
>> traffic filter rules? Can this be implemented with etables? Or is my
>> setup somehow broken and it should not be possible to reach service
>> from one network to the other?
>
> Aside:  You indicate this is a router.  So I'm assuming that it is
> routing the two (W)LANs to / from the Internet.

I guess i need to be more specific here. I want to build a router and by
this i mean, that packages from network connected on brg0 and brg1 will
be forwarded to the internet. The connection to the internet will be
established via ppoe over wan0. But currently i am trying to setup the
basic configuration of the network, so lets ignore internet and traffic
filtering moment.

Lets simplify my setup even more and lets remove the bridges and only
look at the interfaces lan0/eth0 and lan1/eth1 (i renamed eth0 and eth1
to lan0/lan1 in my setup). Using the same setup as described in my
previous post, lan0 will have ip address 192.168.10.1/24 and lan1 will
have ip 192.168.20.1/24. Another pc connected to lan0, which is in the
same subnet (192.168.10.2) cannot ping 192.168.20.1. This is at least
my expectation and i verified my expectation by trying this out. But as
soon as i bridge the interfaces, a ping from subnet 192.168.10.1/24 to
192.168.20.1 is possible, even though the bridges don't know each other.

This is what confuse me.

-- 
No fun. Not ever!

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Separate two network bridges on linux Kevin Osthoff <icepic1984@gmx.de> - 2018-06-21 22:11 +0200
  Re: Separate two network bridges on linux Grant Taylor <gtaylor@tnetconsulting.net> - 2018-06-21 12:30 -0600
    Re: Separate two network bridges on linux Kevin Osthoff <icepic1984@gmx.de> - 2018-06-21 23:52 +0200
      Re: Separate two network bridges on linux Grant Taylor <gtaylor@tnetconsulting.net> - 2018-06-21 16:37 -0600
      Re: Separate two network bridges on linux Pascal Hambourg <pascal@plouf.fr.eu.org> - 2018-06-22 21:27 +0200
        Re: Separate two network bridges on linux Kevin Osthoff <icepic1984@gmx.de> - 2018-06-23 00:16 +0200
  Re: Separate two network bridges on linux Jorgen Grahn <grahn+nntp@snipabacken.se> - 2018-06-21 19:36 +0000
    Re: Separate two network bridges on linux Kevin Osthoff <icepic1984@gmx.de> - 2018-06-21 23:59 +0200
      Re: Separate two network bridges on linux Jorgen Grahn <grahn+nntp@snipabacken.se> - 2018-06-21 20:39 +0000
      Re: Separate two network bridges on linux Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2018-06-22 11:14 +0300
        Re: Separate two network bridges on linux Kevin Osthoff <icepic1984@gmx.de> - 2018-06-22 20:18 +0200
          Re: Separate two network bridges on linux Grant Taylor <gtaylor@tnetconsulting.net> - 2018-06-22 12:35 -0600
            Re: Separate two network bridges on linux Kevin Osthoff <icepic1984@gmx.de> - 2018-06-23 00:10 +0200
              Re: Separate two network bridges on linux Grant Taylor <gtaylor@tnetconsulting.net> - 2018-06-22 14:36 -0600
                Re: Separate two network bridges on linux Richard Kettlewell <invalid@invalid.invalid> - 2018-06-22 22:23 +0100
                Re: Separate two network bridges on linux Grant Taylor <gtaylor@tnetconsulting.net> - 2018-06-22 15:37 -0600
              Re: Separate two network bridges on linux Grant Taylor <gtaylor@tnetconsulting.net> - 2018-06-22 15:46 -0600
              Re: Separate two network bridges on linux Jorgen Grahn <grahn+nntp@snipabacken.se> - 2018-06-22 22:45 +0000
                Re: Separate two network bridges on linux Grant Taylor <gtaylor@tnetconsulting.net> - 2018-06-22 17:38 -0600
    Re: Separate two network bridges on linux Grant Taylor <gtaylor@tnetconsulting.net> - 2018-06-21 16:40 -0600
      Re: Separate two network bridges on linux Jorgen Grahn <grahn+nntp@snipabacken.se> - 2018-06-22 05:38 +0000
    Re: Separate two network bridges on linux Stefan Monnier <monnier@iro.umontreal.ca> - 2018-06-21 22:01 -0400
      Re: Separate two network bridges on linux Jorgen Grahn <grahn+nntp@snipabacken.se> - 2018-06-22 05:54 +0000
        Re: Separate two network bridges on linux Grant Taylor <gtaylor@tnetconsulting.net> - 2018-06-22 13:40 -0600
          Re: Separate two network bridges on linux Jorgen Grahn <grahn+nntp@snipabacken.se> - 2018-06-23 06:36 +0000
          Re: Separate two network bridges on linux Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2018-06-23 20:18 +0300

csiph-web