Hi, I'm trying to set up the following
LAN1 - LEAF1 - internet - LEAF2 - LAN2 LAN1 : 192.168.70.0/24 FW1 : auto eth0 iface eth0 inet static address EXT-IP1 netmask 255.255.255.252 gateway EXT-GW1 auto br0 iface br0 inet static address 192.168.70.253 netmask 255.255.255.0 broadcast 192.168.70.255 bridge_ports eth1 LAN2: 192.168.70.0/24 FW2: auto eth0 iface eth0 inet static address EXT-IP2 netmask 255.255.255.252 gateway EXT-GW2 auto br0 iface br0 inet static address 192.168.70.254 netmask 255.255.255.0 broadcast 192.168.70.255 bridge_ports eth1 Both LAN's can connect to the net, and it appears openvpn connects, but I can't reach ip's from the other LAN. on both FW's firefly# brctl show bridge name bridge id STP enabled interfaces br0 8000.0050baca8c0b no eth1 tap0 firefly# ip route EXT-NET/30 dev eth0 proto kernel scope link src EXT-IP1 192.168.70.0/24 dev br0 proto kernel scope link src 192.168.70.253 default via EXT-GW1 dev eth0 firefly2# ip route EXT-NET2/30 dev eth0 proto kernel scope link src EXT-IP2 192.168.70.0/24 dev br0 proto kernel scope link src 192.168.70.254 default via EXT-GW2 dev eth0 For setting up openvpn I kind off followed this : http://www.linux.com/feature/58336?theme=print Can this be done ? Regards, Stefaan ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ ------------------------------------------------------------------------ leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/