cole@coledd.com
March 2001
| Revision History | ||
|---|---|---|
| Revision 1.22 | 2002-05-20 | Revised by: tab |
| Converted to Docbook 4.1 SGML and added GFDL per Christopher Cole | ||
| Revision 1.21 | 2001-03-07 | Revised by: cc |
BRCFG may also be found at: http://coledd.com/networking/bridge
Enable multiple ethernet devices on your machine by adding this line to your /etc/lilo.conf, and re-run lilo:
append = "ether=0,0,eth1" |
If you have three interfaces on your bridge, use this line instead:
append = "ether=0,0,eth1 ether=0,0,eth2" |
More interfaces can be found by adding more ether statements. By default a stock Linux kernel probes for a single ethercard, and once one is found the probe ceases. The above append statement tells the kernel to keep probing for more ethernet devices after the first one is found. Alternatively, the boot parameter can be used instead:
linux ether=0,0,eth1 |
Or, with 3 interfaces, use:
linux ether=0,0,eth1 ether=0,0,eth2 |
Recompile the kernel with BRIDGING enabled.
A bridge should not have an IP address. It CAN, but a plain bridge doesn't need one. To remove the IP address from your bridge, go to /etc/sysconfig/network-scripts/ (for a RedHat system) and copy ifcfg-lo0 to ifcfg-eth0 & ifcfg-eth1. In these two new files, change the line containing DEVICE=lo to DEVICE=eth0 and DEVICE=eth1. Since other distributions may deviate from this, you may need to refer to additional documentation. If there are more than 2 interfaces to this bridge, be sure to make the corresponding configurations to those, as well.
Reboot so you are running the new kernel with BRIDGING in it, and also to make sure that an IP addresses are not bound to the network interfaces.
Once the system is backed up, put the ethernet cards into promiscuous mode, so they will look at every packet that passes by its interface:
ifconfig eth0 promisc ; ifconfig eth1 promisc |
Turn bridging ON using the brcfg program:
brcfg -ena |
Verify that there is different traffic on each interface:
tcpdump -i eth0 (in one window)
tcpdump -i eth1 (in another window)
|
Run a sniffer or tcpdump on another machine to verify the bridge is separating the segment correctly.
Copyright � 2002 Christopher Cole
Copyright (C) 2000 Free Software Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed.
The Free Software Foundation may publish new, revised versions of the GNU Free Documentation License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. See http://www.gnu.org/copyleft/.
Each version of the License is given a distinguishing version number. If the Document specifies that a particular numbered version of this License "or any later version" applies to it, you have the option of following the terms and conditions either of that specified version or of any later version that has been published (not as a draft) by the Free Software Foundation. If the Document does not specify a version number of this License, you may choose any version ever published (not as a draft) by the Free Software Foundation.
Copyright (c) YEAR YOUR NAME. Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.1 or any later version published by the Free Software Foundation; with the Invariant Sections being LIST THEIR TITLES, with the Front-Cover Texts being LIST, and with the Back-Cover Texts being LIST. A copy of the license is included in the section entitled "GNU Free Documentation License".
If you have no Invariant Sections, write "with no Invariant Sections" instead of saying which ones are invariant. If you have no Front-Cover Texts, write "no Front-Cover Texts" instead of "Front-Cover Texts being LIST"; likewise for Back-Cover Texts.
If your document contains nontrivial examples of program code, we recommend releasing these examples in parallel under your choice of free software license, such as the GNU General Public License, to permit their use in free software.