Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.os.linux.networking > #4138
| From | Kevin Osthoff <icepic1984@gmx.de> |
|---|---|
| Newsgroups | comp.os.linux.networking |
| Subject | Separate two network bridges on linux |
| Date | 2018-06-21 22:11 +0200 |
| Message-ID | <878t77c331.fsf@gmx.de> (permalink) |
Hi!
I am currently trying to setup a router for my homenetwork using linux
(Archlinux to be more specific). The embedded board i am using has 3 lan
interfaces, called wan0, lan0, lan1 and two wifi cards, called wifi0 and
wifi1. I want to have two separate networks, one for my guests and for
my family and me. My current setup looks like this :
> +-------+
> | wifi0 +----------------+
> +-------+ +----+---+
> | brg0 |
> +-------+ +----+---+
> | eth0 +----------------+
> +-------+
> +-------+
> | wifi1 +----------------+
> +-------+ +----+---+
> | brg1 |
> +-------+ +----+---+
> | eth1 +----------------+
> +-------+
I configured a bridge containing lan0 and wifi0, called brd0, with ip
address 192.168.10.1/24 and a bridge containing lan1 and wifi1, called
brd1, with ip address 192.168.20.1/24. On brd0 as well as brd1 dnsmasq
is running in dhcpd mode to propagate ip addresses to clients in the
range 192.168.10.50-125 for brd0 and range 192.168.20.50-125 for
brd1. The 192.168.20.1/24 network is my guest network, while
192.168.10.1/24 is my home network.
This setup works so far. However, one thing took me by surprise. I
though, because guest and home network are in two different subnets the
traffic between them is also separated. However, when i am connect to
the guest network i can also reach services and computers on the home
network, even though no static router or forwarding is set. ( the other
way around is also true). I guess this has something to do how bridge
devices work under linux.
My question is, why does this happen, how to configure the router so
that both networks are separated form each other? Do I need to use
traffic filter rules? Can this be implemented with etables? Or is my
setup somehow broken and it should not be possible to reach service from
one network to the other?
--
No fun. Not ever!
Back to comp.os.linux.networking | Previous | Next — Next in thread | Find similar | Unroll thread
Separate two network bridges on linux Kevin Osthoff <icepic1984@gmx.de> - 2018-06-21 22:11 +0200
Re: Separate two network bridges on linux Grant Taylor <gtaylor@tnetconsulting.net> - 2018-06-21 12:30 -0600
Re: Separate two network bridges on linux Kevin Osthoff <icepic1984@gmx.de> - 2018-06-21 23:52 +0200
Re: Separate two network bridges on linux Grant Taylor <gtaylor@tnetconsulting.net> - 2018-06-21 16:37 -0600
Re: Separate two network bridges on linux Pascal Hambourg <pascal@plouf.fr.eu.org> - 2018-06-22 21:27 +0200
Re: Separate two network bridges on linux Kevin Osthoff <icepic1984@gmx.de> - 2018-06-23 00:16 +0200
Re: Separate two network bridges on linux Jorgen Grahn <grahn+nntp@snipabacken.se> - 2018-06-21 19:36 +0000
Re: Separate two network bridges on linux Kevin Osthoff <icepic1984@gmx.de> - 2018-06-21 23:59 +0200
Re: Separate two network bridges on linux Jorgen Grahn <grahn+nntp@snipabacken.se> - 2018-06-21 20:39 +0000
Re: Separate two network bridges on linux Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2018-06-22 11:14 +0300
Re: Separate two network bridges on linux Kevin Osthoff <icepic1984@gmx.de> - 2018-06-22 20:18 +0200
Re: Separate two network bridges on linux Grant Taylor <gtaylor@tnetconsulting.net> - 2018-06-22 12:35 -0600
Re: Separate two network bridges on linux Kevin Osthoff <icepic1984@gmx.de> - 2018-06-23 00:10 +0200
Re: Separate two network bridges on linux Grant Taylor <gtaylor@tnetconsulting.net> - 2018-06-22 14:36 -0600
Re: Separate two network bridges on linux Richard Kettlewell <invalid@invalid.invalid> - 2018-06-22 22:23 +0100
Re: Separate two network bridges on linux Grant Taylor <gtaylor@tnetconsulting.net> - 2018-06-22 15:37 -0600
Re: Separate two network bridges on linux Grant Taylor <gtaylor@tnetconsulting.net> - 2018-06-22 15:46 -0600
Re: Separate two network bridges on linux Jorgen Grahn <grahn+nntp@snipabacken.se> - 2018-06-22 22:45 +0000
Re: Separate two network bridges on linux Grant Taylor <gtaylor@tnetconsulting.net> - 2018-06-22 17:38 -0600
Re: Separate two network bridges on linux Grant Taylor <gtaylor@tnetconsulting.net> - 2018-06-21 16:40 -0600
Re: Separate two network bridges on linux Jorgen Grahn <grahn+nntp@snipabacken.se> - 2018-06-22 05:38 +0000
Re: Separate two network bridges on linux Stefan Monnier <monnier@iro.umontreal.ca> - 2018-06-21 22:01 -0400
Re: Separate two network bridges on linux Jorgen Grahn <grahn+nntp@snipabacken.se> - 2018-06-22 05:54 +0000
Re: Separate two network bridges on linux Grant Taylor <gtaylor@tnetconsulting.net> - 2018-06-22 13:40 -0600
Re: Separate two network bridges on linux Jorgen Grahn <grahn+nntp@snipabacken.se> - 2018-06-23 06:36 +0000
Re: Separate two network bridges on linux Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2018-06-23 20:18 +0300
csiph-web