On Wed, Jul 02, 2025 at 03:17:42PM -0600, Brook Milligan wrote:
>
> The key is that the host needs an address on the bridge in the guest?s subnet
> so it can route packets.
When you add the host ethernet interface to the bridge, you do not route
packets and you do not have a "guest subnet". It's all one, just like
connecting the guest to the same switch the host is connected to.
> I?m not sure what ?neither? refers to. In my experience testing this, some
> interface attached to the bridge (either tap or vether) needs an IP address
> for routing.
Connecting to the bridge connects the interfaces on layer 2, routing
is not part of this and not required. Also, for connectivity to the
outside, a routed guest network also needs proper routes on the host
network. You can do that, but it adds lots of complexity.
Greetings,
--
Michael van Elst
Internet: [email protected]
"A potential Snark may lurk in every tree."