Bridge Interface

• Install bridge utils

apt install bridge-utils

• sudo nano /etc/network/interfaces

auto eth0
allow-hotplug eth0
iface eth0 inet manual

auto br0
iface br0 inet manual
  bridge_ports eth0
  wpa-driver wired
  wpa-conf /etc/wpa_supplicant.conf
  bridge_hw ec:8e:b5:77:3e:e1

• Edit /etc/wpa_supplicant.conf

ctrl_interface=/var/run/wpa_supplicant
ctrl_interface_group=0
eapol_version=2
ap_scan=0
network={
    ssid="BBVA"
    key_mgmt=IEEE8021X
    eap=TLS
    identity="host/WF0006D3.ad.bbva.com"
    ca_cert="/NAC/cacert.pem"
    client_cert="/NAC/cert.pem"
    private_key="/NAC/key.pem"
    private_key_passwd="1234567890"
}

• Change routes to go through br0

#!/bin/bash
echo "Removing routes"
sudo ip r d default via 15.17.160.1 dev br0

echo "Adding routes"
sudo ip r a 20.1.30.0/24 via 15.17.160.1 dev br0
sudo ip r a 20.1.40.0/24 via 15.17.160.1 dev br0
sudo ip r a 20.1.43.0/24 via 15.17.160.1 dev br0
sudo ip r a 22.0.0.0/16 via 15.17.160.1 dev br0
sudo ip r a 20.1.32.0/24 via 15.17.160.1 dev br0
sudo ip r a 192.168.45.0/24 via 15.17.160.1 dev br0

• Edit /etc/ssl/openssl.cnf

...
nsCertType = client
...