Re: [Ntop-misc] ntopng bridge on nat gateway with vlans

2017-05-31 Thread Simone Mainardi
out over br0 instead of eth0 > > Can this work? Or do I need at least one attached interface at the > existing bridge and then let ntopng attach a second interface? > > regards, Thomas > > *Gesendet:* Dienstag, 30. Mai 2017 um 10:24 Uhr > *Von:* "Marco Teixeira" &

Re: [Ntop-misc] ntopng bridge on nat gateway with vlans

2017-05-30 Thread thomasmeier1976
Hi,   yes i like to do the NTOPNG inline policing. And don't know where to insert the bridge because LAN is NATed to WAN. Vlans can come later. In my first Testcase I can simulate it without vlans because eth0 has no vlan. Would be nice to hear from someone who managed it on one machine. I like

Re: [Ntop-misc] ntopng bridge on nat gateway with vlans

2017-05-30 Thread Marco Teixeira
7 um 10:24 Uhr > *Von:* "Marco Teixeira" <ma...@scom.uminho.pt> > *An:* ntop-misc@listgateway.unipi.it > *Betreff:* Re: [Ntop-misc] ntopng bridge on nat gateway with vlans > Hi Thomas, > To the best of my knowledge, packets still have to pass on eth0, so attach > it the

Re: [Ntop-misc] ntopng bridge on nat gateway with vlans

2017-05-30 Thread thomasmeier1976
and then let ntopng attach a second interface?   regards, Thomas   Gesendet: Dienstag, 30. Mai 2017 um 10:24 Uhr Von: "Marco Teixeira" <ma...@scom.uminho.pt> An: ntop-misc@listgateway.unipi.it Betreff: Re: [Ntop-misc] ntopng bridge on nat gateway with vlans Hi Thomas, To the best

Re: [Ntop-misc] ntopng bridge on nat gateway with vlans

2017-05-30 Thread Marco Teixeira
Hi Thomas, To the best of my knowledge, packets still have to pass on eth0, so attach it there. I don't use NTOP with a setup like yours, but you might have to account for the VLAN tagging in NTOP config... maybe. =Marco 2017-05-30 8:45 GMT+01:00 : > Dear community, > >

[Ntop-misc] ntopng bridge on nat gateway with vlans

2017-05-30 Thread thomasmeier1976
Dear community,   I have a NAT gateway with iptables that is acting as main gateway for all workstations. Ntopng is working fine, but now i like to use inline traffic policing. Therefore I need a bridge.   Currently i have a eth0(WAN untagged), eth1.1 (workstations), eth1.2 (phones), eth1.3