Re: Bridged Network Question

2007-08-05 Thread Sheridan Hutchinson

Wayne Topa wrote:

I have been using an old laptop as an Access Point for our laptops to
connect to the internet through the main box - modem connection.
The Lan (eth0) is bridged with a Netgear WG511U PCMCIA card (ath0) to
connect to the gatway computer.

It works fine, as an AP, but has one problem.  The AP itself can not
connect to the internet through the gatway.  The only way to update
the AP's software is to change /etc/network/interfaces from the
bridged setup to just a Lan setup, reboot, do the update/upgrade,
change the interfaces file back to the bridged mode and reboot again.

I have googled for an answer to this problem for the past 4 months,
without finding any answers.  Either I didn't use the correct search
terms or no one else has had the same problem.

I would like to move the AP to an old 500Mhz headless box so that I
can setup the firewall and a mailserver, etc on it and free up the
laptop.  I can't see how to do that with the above problem.

Here is the current bridged interfaces file.  I would appreciate any 
input on how I might go about fixing this. 


--
/etc/init.d/interfaces
mapping hotplug
script grep
map eth0 ath0

# The primary network interface
#
#:05:00.0: 3Com PCI 3CCFE575CT Tornado CardBus at 0x4800.
#Vers LK1.1.19
auto eth0
iface eth0 inet manual

# Netgear WG511U PCMCIA Double 108 Mbps Card
## Bring up ath0 with the correct wifi settings
# manual causes it to bring up the interface without TCP/IP (which
auto ath0
iface ath0 inet manual
pre-up wlanconfig ath0 destroy
pre-up wlanconfig ath0 create wlandev wifi0 wlanmode ap
# remove the ath0 device when bringing the interface down
post-down ifconfig ath0 down
post-down wlanconfig ath0 destroy
post-down ifconfig eth0 down
post-down ifconfig br0 down
post-down brctl delbr br0
post-down ifconfig eth0 up
iwpriv ath0 bgscan 0
wireless-mode master
wireless-channel 6
wireless-essid Mtntop_AP

# The Debian Bridge method
auto br0
iface br0 inet static
address 192.168.1.8
network 192.168.1.0
netmask 255.255.255.0
broadcast 192.168.1.255
gateway 192.168.1.3
#   bridge_ports all  # this doesn't bring up ath0
bridge_ports ath0 eth0
route add default gateway 192.168.1.3


Thanks for 'any' suggestions!

Wayne


Hi bud,

I'm not exactly sure what you're doing however I just run these commands 
as route:


brctl addbr br0
brctl addif br0 eth1
ifup br0
brctl addif br0 eth0
ifconfig eth0 up

It may or may not help.
xx

--
Regards,
Sheridan Hutchinson
[EMAIL PROTECTED]


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Bridged Network Question

2007-08-02 Thread Wayne Topa

I have been using an old laptop as an Access Point for our laptops to
connect to the internet through the main box - modem connection.
The Lan (eth0) is bridged with a Netgear WG511U PCMCIA card (ath0) to
connect to the gatway computer.

It works fine, as an AP, but has one problem.  The AP itself can not
connect to the internet through the gatway.  The only way to update
the AP's software is to change /etc/network/interfaces from the
bridged setup to just a Lan setup, reboot, do the update/upgrade,
change the interfaces file back to the bridged mode and reboot again.

I have googled for an answer to this problem for the past 4 months,
without finding any answers.  Either I didn't use the correct search
terms or no one else has had the same problem.

I would like to move the AP to an old 500Mhz headless box so that I
can setup the firewall and a mailserver, etc on it and free up the
laptop.  I can't see how to do that with the above problem.

Here is the current bridged interfaces file.  I would appreciate any 
input on how I might go about fixing this. 

--
/etc/init.d/interfaces
mapping hotplug
script grep
map eth0 ath0

# The primary network interface
#
#:05:00.0: 3Com PCI 3CCFE575CT Tornado CardBus at 0x4800.
#Vers LK1.1.19
auto eth0
iface eth0 inet manual

# Netgear WG511U PCMCIA Double 108 Mbps Card
## Bring up ath0 with the correct wifi settings
# manual causes it to bring up the interface without TCP/IP (which
auto ath0
iface ath0 inet manual
pre-up wlanconfig ath0 destroy
pre-up wlanconfig ath0 create wlandev wifi0 wlanmode ap
# remove the ath0 device when bringing the interface down
post-down ifconfig ath0 down
post-down wlanconfig ath0 destroy
post-down ifconfig eth0 down
post-down ifconfig br0 down
post-down brctl delbr br0
post-down ifconfig eth0 up
iwpriv ath0 bgscan 0
wireless-mode master
wireless-channel 6
wireless-essid Mtntop_AP

# The Debian Bridge method
auto br0
iface br0 inet static
address 192.168.1.8
network 192.168.1.0
netmask 255.255.255.0
broadcast 192.168.1.255
gateway 192.168.1.3
#   bridge_ports all  # this doesn't bring up ath0
bridge_ports ath0 eth0
route add default gateway 192.168.1.3


Thanks for 'any' suggestions!

Wayne

-- 
What boots up must come down.
___


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Bridged Network Question

2007-08-02 Thread Douglas Allan Tutty
On Thu, Aug 02, 2007 at 03:09:48PM -0400, Wayne Topa wrote:
 
 I have been using an old laptop as an Access Point for our laptops to
 connect to the internet through the main box - modem connection.
 The Lan (eth0) is bridged with a Netgear WG511U PCMCIA card (ath0) to
 connect to the gatway computer.
 
 It works fine, as an AP, but has one problem.  The AP itself can not
 connect to the internet through the gatway.  The only way to update
 the AP's software is to change /etc/network/interfaces from the
 bridged setup to just a Lan setup, reboot, do the update/upgrade,
 change the interfaces file back to the bridged mode and reboot again.
 
 I would like to move the AP to an old 500Mhz headless box so that I
 can setup the firewall and a mailserver, etc on it and free up the
 laptop.  I can't see how to do that with the above problem.

I've never needed bridge and I'm wondering why you do?  Bridging makes
the two networks look like one, but expecially when you start
firewalling, they need to be different.  For details on setting this up,
read the shorewall-doc package, even if you don't want to use shorewall.

Doug.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Bridged Network Question

2007-08-02 Thread David Brodbeck



On Thu, Aug 02, 2007 at 03:09:48PM -0400, Wayne Topa wrote:


I have been using an old laptop as an Access Point for our laptops to
connect to the internet through the main box - modem connection.
The Lan (eth0) is bridged with a Netgear WG511U PCMCIA card (ath0) to
connect to the gatway computer.

It works fine, as an AP, but has one problem.  The AP itself can not
connect to the internet through the gatway.  The only way to update
the AP's software is to change /etc/network/interfaces from the
bridged setup to just a Lan setup, reboot, do the update/upgrade,
change the interfaces file back to the bridged mode and reboot again.


Do you have an IP address associated with the bridge?  Setting an IP  
on one of the network cards won't work if they're bridged -- it has  
to be on the bridge interface.





--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Bridged Network Question

2007-08-02 Thread Wayne Topa
Douglas Allan Tutty([EMAIL PROTECTED]) is reported to have said:
 On Thu, Aug 02, 2007 at 03:09:48PM -0400, Wayne Topa wrote:
  
  I have been using an old laptop as an Access Point for our laptops to
  connect to the internet through the main box - modem connection.
  The Lan (eth0) is bridged with a Netgear WG511U PCMCIA card (ath0) to
  connect to the gatway computer.
  
  It works fine, as an AP, but has one problem.  The AP itself can not
  connect to the internet through the gatway.  The only way to update
  the AP's software is to change /etc/network/interfaces from the
  bridged setup to just a Lan setup, reboot, do the update/upgrade,
  change the interfaces file back to the bridged mode and reboot again.
  
  I would like to move the AP to an old 500Mhz headless box so that I
  can setup the firewall and a mailserver, etc on it and free up the
  laptop.  I can't see how to do that with the above problem.
 
 I've never needed bridge and I'm wondering why you do?  Bridging makes
 the two networks look like one, but expecially when you start
 firewalling, they need to be different.  For details on setting this up,
 read the shorewall-doc package, even if you don't want to use shorewall.

I did not explain this very well then.  :-(

I use the AP laptop to allow our wireless laptops the ability to
access the internet form anywhere on our property.  They connect, via
DHCP, to the AP and the bridge sends them, via ethernet, to the
gateway and thus to the internet.

The AP (bridge) is open to all and the firewall is on the gateway box.
The AP is selective as to which MAC's it allows a connection to.

I have been firewalling since the ipchains era so really have no need
for shorewall.

The problem is, simply, the AP box, which is running testing, can ping
everyone including the internet, BUT, it never receives answers from
the internet.  All the laptops connecting through the AP do not have
any problem getting replies.  I have only read of one other person
having this problem and he never, AFAICT, received a reply.  I must be
doing something wrong, but I know not what.

This would not be the method I would use if I was able to get a
broadband connection here, but as that will not happen while I am alive,
it is best I can do for now.

Sorry for the confusion

Wayne

-- 
The day-to-day travails of the IBM programmer are so amusing to most
of us who are fortunate enough never to have been one -- like watching
Charlie Chaplin trying to cook a shoe.  
___


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Bridged Network Question

2007-08-02 Thread Wayne Topa
David Brodbeck([EMAIL PROTECTED]) is reported to have said:
 
 On Thu, Aug 02, 2007 at 03:09:48PM -0400, Wayne Topa wrote:
 
 I have been using an old laptop as an Access Point for our laptops to
 connect to the internet through the main box - modem connection.
 The Lan (eth0) is bridged with a Netgear WG511U PCMCIA card (ath0) to
 connect to the gatway computer.
 
 It works fine, as an AP, but has one problem.  The AP itself can not
 connect to the internet through the gatway.  The only way to update
 the AP's software is to change /etc/network/interfaces from the
 bridged setup to just a Lan setup, reboot, do the update/upgrade,
 change the interfaces file back to the bridged mode and reboot again.
 
 Do you have an IP address associated with the bridge?  Setting an IP  
 on one of the network cards won't work if they're bridged -- it has  
 to be on the bridge interface.
 

Yes, I discovered that when I first set the AP up.

# The Debian Bridge method
auto br0
iface br0 inet static
address 192.168.1.8
network 192.168.1.0
netmask 255.255.255.0
broadcast 192.168.1.255
gateway 192.168.1.3
#   bridge_ports all  # this doesn't bring up ath0
bridge_ports ath0 eth0
route add default gateway 192.168.1.3
dns-nameservers 192.168.1.3 64.136.173.5 164.136.164.77  #  Just added but 
didn't help

I must have missed something but darned if I can find what!

Thanks
Wayne

-- 
Plug-and-Play is really nice, unfortunately it only works 50% of the time.
To be specific the Plug almost always works.--unknown source
___


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Bridged Network Question

2007-08-02 Thread Wayne Topa
Douglas Allan Tutty([EMAIL PROTECTED]) is reported to have said:
 On Thu, Aug 02, 2007 at 09:47:58PM -0400, Wayne Topa wrote:
  Douglas Allan Tutty([EMAIL PROTECTED]) is reported to have said:
   On Thu, Aug 02, 2007 at 03:09:48PM -0400, Wayne Topa wrote:

I have been using an old laptop as an Access Point for our laptops to
connect to the internet through the main box - modem connection.
The Lan (eth0) is bridged with a Netgear WG511U PCMCIA card (ath0) to
connect to the gatway computer.

  
 I think I understand your setup, although I've never used wireless.  I
 too am on dialup and at one point had a laptop that I connected with a
 serial cable to a box that then connected to the box that had the modem.

The AP laptop -is- connected to the gatway machine via Cat5 cable to
the gateway.

 
 I set up the access box with NAT at the time by simply installing ipmasq
 and dnsmasq and setting forwarding.  All boxes could access the
 internet.  
 
 I never needed bridge and wonder why you're using it.  

Because I needed a way to connect the wireles laptops to the internet.
The AP has the the wireless adapter and an ethernet adapter in it do
does what you did with your laptop except it accepts wireless signals
in/out.

 As I understand
 it, bridging is for making stand-alone boxes that perform the same
 function as the various ubiquetous blue ones: routers, switches, etc.
But I didn't have a router/switch and I did have an old laptop.  :-)

 They themselves don't need to access the internet.

As this one can do much more then a switch, it runs Debian you know,
it was an easy choice to make. Getting it to work as an AP alone isn't
all I wanted to do.  It's a PITA to have to reconfigure it to upgrade
but if I can find a way -not- to reconfigure, it will be just great.

 Anyway, if you're happy to bridge, good, but I don't know how to make it
 do what you want.

I'm about as happy with the bridge, as it is now, as I am with my
2.5KBs dialup connection.  ~6 minutes for each Meg downloaded is a
bigger PITA but I don't have any other alternative, currently.  

It may not be possible to do what I am trying to do.  I don't know so
that is why it took me 4 months to ask.  Thanks for trying, anyway.

Regards
Wayne

-- 
A. Because it breaks the logical sequence of discussion 
Q. Why is top posting bad?  
___


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Bridged Network Question

2007-08-02 Thread Douglas Allan Tutty
On Thu, Aug 02, 2007 at 09:47:58PM -0400, Wayne Topa wrote:
 Douglas Allan Tutty([EMAIL PROTECTED]) is reported to have said:
  On Thu, Aug 02, 2007 at 03:09:48PM -0400, Wayne Topa wrote:
   
   I have been using an old laptop as an Access Point for our laptops to
   connect to the internet through the main box - modem connection.
   The Lan (eth0) is bridged with a Netgear WG511U PCMCIA card (ath0) to
   connect to the gatway computer.
   
 
I think I understand your setup, although I've never used wireless.  I
too am on dialup and at one point had a laptop that I connected with a
serial cable to a box that then connected to the box that had the modem.

I set up the access box with NAT at the time by simply installing ipmasq
and dnsmasq and setting forwarding.  All boxes could access the
internet.  

I never needed bridge and wonder why you're using it.  As I understand
it, bridging is for making stand-alone boxes that perform the same
function as the various ubiquetous blue ones: routers, switches, etc.
They themselves don't need to access the internet.

Anyway, if you're happy to bridge, good, but I don't know how to make it
do what you want.

Good luck.

Doug.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Bridged Network Question

2007-08-02 Thread Douglas Allan Tutty
On Thu, Aug 02, 2007 at 10:45:43PM -0400, Wayne Topa wrote:
 Douglas Allan Tutty([EMAIL PROTECTED]) is reported to have said:
  On Thu, Aug 02, 2007 at 09:47:58PM -0400, Wayne Topa wrote:
   Douglas Allan Tutty([EMAIL PROTECTED]) is reported to have said:
On Thu, Aug 02, 2007 at 03:09:48PM -0400, Wayne Topa wrote:
 
 I have been using an old laptop as an Access Point for our laptops to
 connect to the internet through the main box - modem connection.
 The Lan (eth0) is bridged with a Netgear WG511U PCMCIA card (ath0) to
 connect to the gatway computer.
 
   
  I think I understand your setup, although I've never used wireless.  I
  too am on dialup and at one point had a laptop that I connected with a
  serial cable to a box that then connected to the box that had the modem.
 
 The AP laptop -is- connected to the gatway machine via Cat5 cable to
 the gateway.

I understand that.

 
  
  I set up the access box with NAT at the time by simply installing ipmasq
  and dnsmasq and setting forwarding.  All boxes could access the
  internet.  
  
  I never needed bridge and wonder why you're using it.  
 
 Because I needed a way to connect the wireles laptops to the internet.
 The AP has the the wireless adapter and an ethernet adapter in it do
 does what you did with your laptop except it accepts wireless signals
 in/out.

 I'm about as happy with the bridge, as it is now, as I am with my
 2.5KBs dialup connection.  ~6 minutes for each Meg downloaded is a
 bigger PITA but I don't have any other alternative, currently.  
 

You don't need to bridge.  

If it were me trying to set this up, here's how I'd do it.  IP numbers
are examples only.

Internet

209.181.8.8
= 
ppp0 
Gateway box, masqurade using iptables
eth0: 192.168.1.1
=
eth0: 192.168.1.2
AP laptop, masqurade using iptables.
ath0: 192.168.2.1
=
wireless0: dhcp e.g. 192.168.2.2
user's laptop

A bridge gives all boxes the same network number but this isn't required
for your setup.  All your user's laptops would be on network
192.168.2.0, and their default gatway would be 192.168.2.1

The only things different from what I do all the time is the dhcp and
wireless (never used either).  The iptables setup I've always done with
either ipmasq (no config required) or for more control shorewall.

Good luck, I hope this helps.

Doug.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Bridged Network Question

2007-08-02 Thread Celejar
On Thu, 2 Aug 2007 22:45:43 -0400
Wayne Topa [EMAIL PROTECTED] wrote:

 Douglas Allan Tutty([EMAIL PROTECTED]) is reported to have said:
  On Thu, Aug 02, 2007 at 09:47:58PM -0400, Wayne Topa wrote:
   Douglas Allan Tutty([EMAIL PROTECTED]) is reported to have said:
On Thu, Aug 02, 2007 at 03:09:48PM -0400, Wayne Topa wrote:
 
 I have been using an old laptop as an Access Point for our laptops to
 connect to the internet through the main box - modem connection.
 The Lan (eth0) is bridged with a Netgear WG511U PCMCIA card (ath0) to
 connect to the gatway computer.
 
   
  I think I understand your setup, although I've never used wireless.  I
  too am on dialup and at one point had a laptop that I connected with a
  serial cable to a box that then connected to the box that had the modem.
 
 The AP laptop -is- connected to the gatway machine via Cat5 cable to
 the gateway.
 
  
  I set up the access box with NAT at the time by simply installing ipmasq
  and dnsmasq and setting forwarding.  All boxes could access the
  internet.  
  
  I never needed bridge and wonder why you're using it.  
 
 Because I needed a way to connect the wireles laptops to the internet.
 The AP has the the wireless adapter and an ethernet adapter in it do
 does what you did with your laptop except it accepts wireless signals
 in/out.

The question is whether you can accomplish this without bridging.  I
think you can set up both the modem box and the laptop AP as routers.
Have the laptop / AP forward its wireless clients' packets to the
gateway / modem box, and have that box then forward them to the
internet (as you're doing now). 

 Regards
 Wayne

Celejar
--
mailmin.sourceforge.net - remote access via secure (OpenPGP) email
ssuds.sourceforge.net - A Simple Sudoku Solver and Generator


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Bridged Network Question

2007-08-02 Thread Wayne Topa
Douglas Allan Tutty([EMAIL PROTECTED]) is reported to have said:
 On Thu, Aug 02, 2007 at 10:45:43PM -0400, Wayne Topa wrote:
  Douglas Allan Tutty([EMAIL PROTECTED]) is reported to have said:
   On Thu, Aug 02, 2007 at 09:47:58PM -0400, Wayne Topa wrote:
Douglas Allan Tutty([EMAIL PROTECTED]) is reported to have said:
 On Thu, Aug 02, 2007 at 03:09:48PM -0400, Wayne Topa wrote:
  
 
 You don't need to bridge.  
 
 If it were me trying to set this up, here's how I'd do it.  IP numbers
 are examples only.
 
   Internet
 
   209.181.8.8
   = 
   ppp0 
   Gateway box, masqurade using iptables
   eth0: 192.168.1.1
   =
   eth0: 192.168.1.2
   AP laptop, masqurade using iptables.
   ath0: 192.168.2.1
   =
   wireless0: dhcp e.g. 192.168.2.2
   user's laptop
 
 A bridge gives all boxes the same network number but this isn't required
 for your setup.  All your user's laptops would be on network
 192.168.2.0, and their default gatway would be 192.168.2.1
 
 The only things different from what I do all the time is the dhcp and
 wireless (never used either).  The iptables setup I've always done with
 either ipmasq (no config required) or for more control shorewall.
 
 Good luck, I hope this helps.

It's late, I'm tired but both you and Celejar have got me thinking.

It seems I may have had blinders on.  I see now what you have been
trying to say ( I just re-read all your posts) and you might just be
right.  If I can get some sleep, while running this over in my mind,
I will try it out in the morning.

Thanks guys, you may have made my day.  The old man thanks you and
will report back on the results.

Good Night, and many thanks for all the comments!

Wayne

-- 
Computers can never replace human stupidity.
___


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]