Re: bridge with tap - trying to set up openvpn server

[Manuel Bouyer <bouyer%antioche.eu.org@localhost>]

On Mon, Apr 04, 2011 at 08:20:27AM -0400, yancm%sdf.lonestar.org@localhost 
wrote:
> I'm running on i386, NetBSD 5_Stable branch.
> 
> I'm trying to set up an openvpn server on my home network
> (<10 vpn devices).
> 
> I am wanting to use bridged mode because I want the vpn
> connections to see the internal network resources.
> 
> My internal network was 192.168.1.0/24 (main server/gateway/
> NAT/DHCP/firewall/DNS is on 192.168.1.1).
> 
> I have recompiled the kernel with bridging support.
> 
> The internal interface, wm1, was specified with 192.168.1.1
> netmask 255.255.255.0.
> 
> To allow some of this subnet for the tap0 interface, I changed
> the wm1 netmask to 255.255.255.128. I set up the tap0 interface
> to 192.168.1.193 netmask 255.255.255.192.
> 
> With this setup the internal network operates fine before I try
> to turn on bridging.

If you use bridging, you have the same netmask everywhere.
So wm1 says as 192.168.1.1/24, tap0 doesn't have an interface
(as its packets will be bridged to wm1).

-- 
Manuel Bouyer <bouyer%antioche.eu.org@localhost>
     NetBSD: 26 ans d'experience feront toujours la difference
--