OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Brian Camp (sevenn_at_nezzwerk.net)
Date: Tue Oct 01 2002 - 23:08:19 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Wed, 2 Oct 2002 md5ghettohackers.net wrote:

    > hello obsdr's,
    >
    > correct me if i'm wrong, but from what i have gathered to date on google groups,
    > the following network topology is impossible to achieve via the bridge*
    > interface and lucent wireless hardware:
    >
    >
    > // LAN_0 // <-> fxp0 - wi0 <-> // WIRELESS BRIDGE // <-> wi0 - fxp0 <-> //LAN_0
    > ---------- ----------
    > obsd 3.1 gw_a obsd 3.1 gw_b
    >

    Afaik, only wireless interfaces functioning in hostap mode may be
    bridged and two wireless interfaces functioning in hostap mode may not
    talk to each other. You can however set one wireless
    interface in BSS mode, the other in hostap mode and run a gif tunnel
    between the two. You could then secure the wireless link with ipsec
    with little effort. The "IPSEC BRIDGE" section of brconfig(8) has a
    nice example of this.

    Your network would look something like this...:

       fxp0(bridge0) fxp0(bridge0)
        Router-A Router-B
       wi0(hostap) wi0(bss)
    IPSEC(gif0(bridge0) - - - - - - - - - - -gif0(bridge0))IPSEC
        ---------------Wireless Link-------------

    -Brian