os/doc
3
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

- Switch to my @FreeBSD.org email address

Browse source 
- Update sysctl variables to 5.2-RELESE

Approved by:	blackend (mentor)
This commit is contained in:
Alex Dupre 2004-02-01 00:15:23 +00:00
parent c5a313bd14
commit fee858d85e
Notes: svn2git 2020-12-08 03:00:23 +00:00 
svn path=/head/; revision=19902
1 changed files with 12 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
en_US.ISO8859-1/articles/filtering-bridges/article.sgml
View file

@ -1,6 +1,8 @@
<!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook V4.1-Based Extension//EN" [
<!ENTITY % man PUBLIC "-//FreeBSD//ENTITIES DocBook Manual Page Entities//EN">
%man;
<!ENTITY % freebsd PUBLIC "-//FreeBSD//ENTITIES DocBook Miscellaneous FreeBSD Entities//EN">
%freebsd;
<!ENTITY % trademarks PUBLIC "-//FreeBSD//ENTITIES DocBook Trademark Entities//EN">
%trademarks;
]>
@ -14,7 +16,7 @@
<firstname>Alex</firstname>
<surname>Dupre</surname>
<affiliation>
<address><email>sysadmin@alexdupre.com</email></address>
<address><email>ale@FreeBSD.org</email></address>
</affiliation>
</author>
</authorgroup>
@ -202,18 +204,23 @@ firewall_logging="YES"</programlisting>
two network interfaces <devicename>fxp0</devicename> and
<devicename>xl0</devicename> with your own ones):</para>
<screen>&prompt.root; <userinput>sysctl net.link.ether.bridge_cfg=fxp0:0,xl0:0</userinput>
&prompt.root; <userinput>sysctl net.link.ether.bridge_ipfw=1</userinput>
&prompt.root; <userinput>sysctl net.link.ether.bridge=1</userinput></screen>
<screen>&prompt.root; <userinput>sysctl net.link.ether.bridge.config=fxp0:0,xl0:0</userinput>
&prompt.root; <userinput>sysctl net.link.ether.bridge.ipfw=1</userinput>
&prompt.root; <userinput>sysctl net.link.ether.bridge.enable=1</userinput></screen>
<para>The first row specifies which interfaces should be activated by the
bridge, the second one will enable the firewall on the bridge and
finally the third one will enable the bridge.</para>
<note>
<para>If you have &os;&nbsp;5.1-RELEASE or previous the sysctl variables
are spelled differently. See &man.bridge.4; for details.</para>
</note>
<para>At this point you should be able to insert the machine between two
sets of hosts without compromising any communication abilities between
them. If so, the next step is to add the
<literal>net.link.ether.<replaceable>[blah]</replaceable>=<replaceable>[blah]</replaceable></literal>
<literal>net.link.ether.bridge.<replaceable>[blah]</replaceable>=<replaceable>[blah]</replaceable></literal>
portions of these rows to the <filename>/etc/sysctl.conf</filename>
file, in order to have them execute at startup.</para>
</sect1>