Hi at 11.10.2011 00:08, groups, freeman wrote: > Sort of a brief, general question, having spent 8 hrs on this and gotten > nowhere. > > I currently have LEAF uC v3.1.1b3 router, with extensive shorewall rules > for eth1 (my LAN). > > If I want to migrate to using OpenVPN, road warrior setup (incl using > bridging and not routing to access the eth1 network), I need to remove > eth1 from my interfaces file and activate br0, I believe.
Mhhh... yes this makes browsing (in a SMB sense) easier, but you may be paying dearly on the bandwidth side. Typically on the OpenVPN list the general feeling is "if you don't need bridging, dont use it". > > However since all my shorewall rules refer to eth1 I need to change > those to be for br0, yes? If you bridge eth1 and tap(n), yes. They are considered one network. > > Just want to confirm that last point since it'll be a pile of work (incl > the fact that I have a eth1:1 interface that'll complicate things) to do > such a switch. > > I guess I could use the routing method, but prefer the bridging method > because I want to use Windows network shares, etc. Have you consiered to deploy a WINS service somewhere? cheers Erich
smime.p7s
Description: S/MIME Kryptografische Unterschrift
------------------------------------------------------------------------------ All the data continuously generated in your IT infrastructure contains a definitive record of customers, application performance, security threats, fraudulent activity and more. Splunk takes this data and makes sense of it. Business sense. IT sense. Common sense. http://p.sf.net/sfu/splunk-d2d-oct
------------------------------------------------------------------------ leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
