Difference between revisions of "Bridge Interface"

From RHS Wiki
Jump to navigation Jump to search
m
Tag: visualeditor
 
(3 intermediate revisions by the same user not shown)
Line 1: Line 1:
* Install bridge utils
+
*Install bridge utils
 +
 
 
  apt install bridge-utils
 
  apt install bridge-utils
* sudo nano /etc/network/interfaces
+
 
<nowiki>auto eth0
+
*sudo nano /etc/network/interfaces<syntaxhighlight lang="text">
allow-hotplug eth0
+
auto eth0  
 +
allow-hotplug eth0  
 
iface eth0 inet manual
 
iface eth0 inet manual
  
auto br0
+
auto br0  
iface br0 inet manual
+
iface br0 inet dhcp
  bridge_ports eth0
+
    bridge_ports eth0  
  wpa-driver wired
+
    wpa-driver wired wpa-conf  
  wpa-conf /etc/wpa_supplicant.conf
+
    /etc/wpa_supplicant.conf  
  bridge_hw ec:8e:b5:77:3e:e1</nowiki>
+
    bridge_hw ec:8e:b5:77:3e:e1
* Edit /etc/wpa_supplicant.conf
+
    dns-nameservers 127.0.0.1
 +
    post-up route add -net 20.1.43.0 netmask 255.255.255.0 gw 15.17.160.1
 +
    up route add -net 22.0.0.0 netmask 255.255.255.0 gw 15.17.160.1
 +
    #gateaway 10.23.0.1
 +
</syntaxhighlight>
 +
 
 +
<br />
 +
 
 +
*Edit /etc/wpa_supplicant.conf
 +
 
 
  <nowiki>ctrl_interface=/var/run/wpa_supplicant
 
  <nowiki>ctrl_interface=/var/run/wpa_supplicant
ctrl_interface_group=0
+
ctrl_interface_group=0
eapol_version=2
+
eapol_version=2
ap_scan=0
+
ap_scan=0
network={
+
network={
    ssid="BBVA"
+
    ssid="BBVA"
    key_mgmt=IEEE8021X
+
    key_mgmt=IEEE8021X
    eap=TLS
+
    eap=TLS
    identity="host/WF0006D3.ad.bbva.com"
+
    identity="host/WF0006D3.ad.bbva.com"
    ca_cert="/NAC/cacert.pem"
+
    ca_cert="/NAC/cacert.pem"
    client_cert="/NAC/cert.pem"
+
    client_cert="/NAC/cert.pem"
    private_key="/NAC/key.pem"
+
    private_key="/NAC/key.pem"
    private_key_passwd="1234567890"
+
    private_key_passwd="1234567890"
}</nowiki>
+
}</nowiki>
* Change routes to go through br0
+
 
 +
*Change routes to go through br0
 +
 
 
  <nowiki>#!/bin/bash
 
  <nowiki>#!/bin/bash
echo "Removing routes"
+
echo "Removing routes"
sudo ip r d default via 15.17.160.1 dev br0
+
sudo ip r d default via 15.17.160.1 dev br0
 
+
echo "Adding routes"
+
echo "Adding routes"
sudo ip r a 20.1.30.0/24 via 15.17.160.1 dev br0
+
sudo ip r a 20.1.30.0/24 via 15.17.160.1 dev br0
sudo ip r a 20.1.40.0/24 via 15.17.160.1 dev br0
+
sudo ip r a 20.1.40.0/24 via 15.17.160.1 dev br0
sudo ip r a 20.1.43.0/24 via 15.17.160.1 dev br0
+
sudo ip r a 20.1.43.0/24 via 15.17.160.1 dev br0
sudo ip r a 22.0.0.0/16 via 15.17.160.1 dev br0
+
sudo ip r a 22.0.0.0/16 via 15.17.160.1 dev br0
sudo ip r a 20.1.32.0/24 via 15.17.160.1 dev br0
+
sudo ip r a 20.1.32.0/24 via 15.17.160.1 dev br0
sudo ip r a 192.168.45.0/24 via 15.17.160.1 dev br0</nowiki>
+
sudo ip r a 192.168.45.0/24 via 15.17.160.1 dev br0</nowiki>

Latest revision as of 08:40, 31 July 2019

  • Install bridge utils
apt install bridge-utils
  • sudo nano /etc/network/interfaces
    auto eth0 
    allow-hotplug eth0 
    iface eth0 inet manual
    
    auto br0 
    iface br0 inet dhcp 
        bridge_ports eth0 
        wpa-driver wired wpa-conf 
        /etc/wpa_supplicant.conf 
        bridge_hw ec:8e:b5:77:3e:e1
        dns-nameservers 127.0.0.1
        post-up route add -net 20.1.43.0 netmask 255.255.255.0 gw 15.17.160.1 
        up route add -net 22.0.0.0 netmask 255.255.255.0 gw 15.17.160.1
        #gateaway 10.23.0.1
    


  • Edit /etc/wpa_supplicant.conf
ctrl_interface=/var/run/wpa_supplicant
 ctrl_interface_group=0
 eapol_version=2
 ap_scan=0
 network={
     ssid="BBVA"
     key_mgmt=IEEE8021X
     eap=TLS
     identity="host/WF0006D3.ad.bbva.com"
     ca_cert="/NAC/cacert.pem"
     client_cert="/NAC/cert.pem"
     private_key="/NAC/key.pem"
     private_key_passwd="1234567890"
 }
  • Change routes to go through br0
#!/bin/bash
 echo "Removing routes"
 sudo ip r d default via 15.17.160.1 dev br0
 
 echo "Adding routes"
 sudo ip r a 20.1.30.0/24 via 15.17.160.1 dev br0
 sudo ip r a 20.1.40.0/24 via 15.17.160.1 dev br0
 sudo ip r a 20.1.43.0/24 via 15.17.160.1 dev br0
 sudo ip r a 22.0.0.0/16 via 15.17.160.1 dev br0
 sudo ip r a 20.1.32.0/24 via 15.17.160.1 dev br0
 sudo ip r a 192.168.45.0/24 via 15.17.160.1 dev br0