From owner-freebsd-questions@FreeBSD.ORG Thu Apr 4 00:15:14 2013 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id 11DDFA5A for ; Thu, 4 Apr 2013 00:15:14 +0000 (UTC) (envelope-from hunci@hunci.sk) Received: from mail-ie0-x22f.google.com (mail-ie0-x22f.google.com [IPv6:2607:f8b0:4001:c03::22f]) by mx1.freebsd.org (Postfix) with ESMTP id DAAEBA6B for ; Thu, 4 Apr 2013 00:15:13 +0000 (UTC) Received: by mail-ie0-f175.google.com with SMTP id c12so2381156ieb.6 for ; Wed, 03 Apr 2013 17:15:13 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:mime-version:x-originating-ip:from:date:message-id :subject:to:content-type:x-gm-message-state; bh=UzlHWAH7yU2BOTxO1sd/Idkh+GiR7THrQagHSYiuJOE=; b=LY7pMNcp3JEoPEXV/F18t+LO9BZzmfDOxHKj87U7CE0WX/1nKLFkm+ikLSpH1UFGAy +dRk8OaJO9sKJvEZsOG80UZqDZv2UDJarbgHapNLjfJIt6QOt2olmtm94E1NVHTsisLb 1Fan+XAkZavHUanB2IxRPakUGbu7/+mACq6Ifk4Su+Nrho89SVU3l/736NYgQGVmwsz1 t1qfGucSnBSnAMEtSJjjeW4aVeb2XmmzdvgWOQIZ0m9s/5VVRKCRvlg14H4psIMKVeDm ZbDy79fnMdKN9NfVWi5v9nt7zH0uuAhRqE0546mQ1fZTeYR+1aLKQeDFjJMgqzxPEZkz nzvA== X-Received: by 10.50.17.131 with SMTP id o3mr8476579igd.63.1365034512883; Wed, 03 Apr 2013 17:15:12 -0700 (PDT) MIME-Version: 1.0 Received: by 10.50.155.135 with HTTP; Wed, 3 Apr 2013 17:14:52 -0700 (PDT) X-Originating-IP: [62.197.196.40] From: =?UTF-8?B?UGV0ZXIgSHVuxI3DoXI=?= Date: Thu, 4 Apr 2013 02:14:52 +0200 Message-ID: Subject: 9.1-release bridge config at startup not working To: freebsd-questions@freebsd.org X-Gm-Message-State: ALoCoQknTfCXn69diq4T14AVtMLqwGeS5QOvso8ocQ5xfKjUPr7X3gQPfeFDQvkAefxApkLCnPZu Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.14 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Apr 2013 00:15:14 -0000 Hello list After pretty much of googling I was able to make this bridge setup up and running: cloned_interfaces="bridge0" ifconfig_bridge0="addm igb6 addm igb7" ifconfig_bridge0_alias0="inet x.x.x.x netmask x.x.x.x" ifconfig_igb6="up" ifconfig_igb7="up" however I'm running xorp pim multicast router on the box as well and it complains about not being able to get the primary IP address of bridge0. And I need xorp running on that subnet. (after manually assigning an IP to bridge0, bridge0 becomes unresponsive) I tried autobridge according to some sparse "documentation" found, but autobridge with setup: cloned_interfaces="bridge0" autobridge_interfaces="bridge0" autobridge_bridge0="igb6 igb7" ifconfig_bridge0="inet x.x.x.x netmask x.x.x.x" ifconfig_igb6="up" ifconfig_igb7="up" does not start at all. I end up with having only igb6 added in bridge0 without an IP address. Well, I would gladly live without a bridge ;) if somebody could give me a hit how to protect a group of servers on the same subnet as the router is. Without a need of NAT or IP changes. I need a DMZ, so I thought I'd simply put the boxes behind a filtered bridge. Seems like it's not that easy as it sound. Thank you very much for any kind of help/advice Peter Huncar