From owner-freebsd-questions@FreeBSD.ORG Wed Feb 8 15:56:34 2006 Return-Path: X-Original-To: questions@freebsd.org Delivered-To: freebsd-questions@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id F329516A420 for ; Wed, 8 Feb 2006 15:56:33 +0000 (GMT) (envelope-from cswiger@mac.com) Received: from pi.codefab.com (pi.codefab.com [199.103.21.227]) by mx1.FreeBSD.org (Postfix) with ESMTP id 82D6343D46 for ; Wed, 8 Feb 2006 15:56:31 +0000 (GMT) (envelope-from cswiger@mac.com) Received: from localhost (localhost [127.0.0.1]) by pi.codefab.com (Postfix) with ESMTP id CCDF25CFA; Wed, 8 Feb 2006 10:56:30 -0500 (EST) Received: from pi.codefab.com ([127.0.0.1]) by localhost (pi.codefab.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 11256-01; Wed, 8 Feb 2006 10:56:30 -0500 (EST) Received: from [192.168.1.3] (pool-68-161-67-226.ny325.east.verizon.net [68.161.67.226]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by pi.codefab.com (Postfix) with ESMTP id BF7C55CB3; Wed, 8 Feb 2006 10:56:29 -0500 (EST) Message-ID: <43EA14AD.3080500@mac.com> Date: Wed, 08 Feb 2006 10:56:29 -0500 From: Chuck Swiger Organization: The Courts of Chaos User-Agent: Thunderbird 1.5 (Windows/20051201) MIME-Version: 1.0 To: Andrew Pantyukhin References: <43E9E5E5.2070709@mac.com> In-Reply-To: X-Enigmail-Version: 0.94.0.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: amavisd-new at codefab.com Cc: FreeBSD Questions Subject: Re: How to get 2 if's act like a switch? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Feb 2006 15:56:34 -0000 Andrew Pantyukhin wrote: > On 2/8/06, Chuck Swiger wrote: >> Andrew Pantyukhin wrote: [ ... ] >> See: "man bridge". > > Thanks. First I thought that bridge is not what I want. > Apparently, if_bridge does not switch packets, and > with 100 hosts on each if that would create unnecessary > overhead. But then, networks on both sides are switches, > so the overhead should be minimal if not none. > > I still wonder if there's some way to get switch > functionality. Connect the machine to a switch? :-) Your bridge machine should not see traffic directed towards MACs on other ports on the switch if the switch is working right. The switch ought to learn which MAC addresses are reachable through the port your bridge machine is on, and will just deliver the appropriate traffic (plus broadcasts). There's probably some netgraph trickery that would let you do STP on the bridge machine as an alternative solution, but I don't know enough about that to advise you on it.... -- -Chuck