[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

RE: [Openvpn-users] Multiple tap devices, multiple bridges??


  • Subject: RE: [Openvpn-users] Multiple tap devices, multiple bridges??
  • From: "James Yonan" <jim@xxxxxxxxx>
  • Date: Mon, 13 Oct 2003 07:21:08 -0000

Micha Silver <Micha@xxxxxxxxxxx> said:

> 
> 
> > 
> > 
> > On Sun, 2003-10-12 at 10:15, Micha Silver wrote:
> > 
> > > Do I need to create separate bridges (br0, br1, etc) for 
> > each tapX virtual
> > > device?  
> > 
> > No, a bridge contains the devices more than one device and routes
> > packets appropriately.
> 
> Thanks, Rob, that's what I needed to know.
> 
> > 
> > You just need to create br0 and then do a brctl addif br0 
> > tapX for each
> > tap device to add it to the bridge.  From there a few packets 
> > should let
> > the bridge know what's up.
> > 
> > That is, of course, assuming you want to bridge all the connections in
> > to a single bridge, as if they were all plugged in to the local LAN.
> 
> Yes, All the VPN connections need to get into the same LAN, but I will want
> to firewall them differently. (Some need access to the whole LAN, some to
> only certain hosts). Is this done with separate tapX firewall rules?

You will need to use

http://ebtables.sourceforge.net/

instead of iptables if you want to filter on an ethernet bridge.

James


____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users