[LARTC] Virtual circuits

[LARTC] Virtual circuits

[M.F. PSIkappa]

Hi, I see this topic in LARTC:
Virtual Circuits over TCP/IP sockets

I'm interesting about this, I know that in FreeBSD it's posible via
netgraph but I didn't see any usable solutions for linux.
I know about Frame Diverter but it's not suitable for my purpose.

My problem: I have breezenet microwave network with some nodes which
are routed and my clients want use my network as a transport net and
want to have point-to-point connection.

Fig. Topology of network

client1
  ||
~~~~~~~~~~~~~~~~~~~~~~~~~~~~microwave network~~~~~~~~~~~~~~~~~~~~~~~
Access_point --- |switch| --- Node_router1
                               /
                              /
                             /
                         Node_router2
                           /
                          /
                         /
                     Node_router3 --- |switch| --- Access_point
~~~~~~~~~~~~~~~~~~~~~~~~~~~microwave network~~~~~~~~~~~~~~~~~~~~~~~
                                                        ||
                                                   client1_router


How to sent _everything_ (e.g. arp) from client1 to client1_router?
I cant use any tunnel.
It's posible with linux ?


With regards

PSIkappa
psi _at_ atlantis.sk


_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/

Re: [LARTC] Virtual circuits

[bert hubert]

On Mon, Dec 03, 2001 at 11:01:09AM +0100, M.F. PSIkappa wrote:

> I'm interesting about this, I know that in FreeBSD it's posible via
> netgraph but I didn't see any usable solutions for linux.
> I know about Frame Diverter but it's not suitable for my purpose.

This is not what these Virtual Circuits are - the VCs I mention are ATM
vc's, not 'bridging tunnels'.

> How to sent _everything_ (e.g. arp) from client1 to client1_router?
> I cant use any tunnel.
> It's posible with linux ?

Well, you can use a tunnel, it's just that you want a 'bridging tunnel',
that appears by magic so to speak. Basically you are then a two-port
repeater with a long bit in the middle.

Now, is this possible? I think it is, I'm just not entire sure how. 

Perhaps a proxy-arping pseudo bridge does what you want? In that case ARPs
are not transmitted over your tunnel, but your tunnel device reacts to ARP
requests for hosts it knows about on the other side.

If you want a real bridge, you should find a way to create a 'virtual
interface' that lives on the remote host, and run a bridge between your
regular interface and the 'virtual long distance' one.

Perhaps this is possible.

Regards,

bert

-- 
http://www.PowerDNS.com          Versatile DNS Software & Services
Trilab                                 The Technology People
Netherlabs BV / Rent-a-Nerd.nl           - Nerd Available -
'SYN! .. SYN|ACK! .. ACK!' - the mating call of the internet

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/

Re: [LARTC] Virtual circuits

[Martin Josefsson]

On Mon, 3 Dec 2001, bert hubert wrote:

> On Mon, Dec 03, 2001 at 11:01:09AM +0100, M.F. PSIkappa wrote:
> 
> > I'm interesting about this, I know that in FreeBSD it's posible via
> > netgraph but I didn't see any usable solutions for linux.
> > I know about Frame Diverter but it's not suitable for my purpose.
> 
> This is not what these Virtual Circuits are - the VCs I mention are ATM
> vc's, not 'bridging tunnels'.
> 
> > How to sent _everything_ (e.g. arp) from client1 to client1_router?
> > I cant use any tunnel.
> > It's posible with linux ?
> 
> Well, you can use a tunnel, it's just that you want a 'bridging tunnel',
> that appears by magic so to speak. Basically you are then a two-port
> repeater with a long bit in the middle.
> 
> Now, is this possible? I think it is, I'm just not entire sure how. 
> 
> Perhaps a proxy-arping pseudo bridge does what you want? In that case ARPs
> are not transmitted over your tunnel, but your tunnel device reacts to ARP
> requests for hosts it knows about on the other side.
> 
> If you want a real bridge, you should find a way to create a 'virtual
> interface' that lives on the remote host, and run a bridge between your
> regular interface and the 'virtual long distance' one.
> 
> Perhaps this is possible.

Yes it is, by using CIPE and the normal ethernet bridge you can do exactly
this. CIPE is an encrypted tunnel that creates a virtual ethernet
interface that can be used for bridging.

http://sites.inka.de/bigred/devel/cipe.html

"it is even possible to run an Ethernet bridge over CIPE"

It says it only works with the bridge in kernel 2.4 or using a patched 2.2

Hope it helps.

/Martin

Never argue with an idiot. They drag you down to their level, then beat you with experience.


_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/

Re: [LARTC] Virtual circuits

[Jasper Spaans]

On Mon, Dec 03, 2001 at 02:32:22PM +0100, bert hubert wrote:

> > How to sent _everything_ (e.g. arp) from client1 to client1_router?
> > I cant use any tunnel.
> > It's posible with linux ?
> 
> Well, you can use a tunnel, it's just that you want a 'bridging tunnel',
> that appears by magic so to speak. Basically you are then a two-port
> repeater with a long bit in the middle.
> 
> Now, is this possible? I think it is, I'm just not entire sure how. 

This is possible, using vtund + bridging as found in the kernel - the only
question is whether you need to be able to filter or use QoS on that traffic
- since that isn't possible (well, my experience was that that's not
possible, maybe it is right now!)

I've had this setup working however, the arp and netbios broadcasts flooded
the connection over which I was tunneling - rendering it quite useless ;)

Regards,

Jasper
-- 
  Q_.           Jasper Spaans <jasper@spaans.ds9a.nl>
 `~\            http://jsp.ds9a.nl/
Mr /\           Tel/Fax: +31-84-8749842
Zap             Move '.sig' for great justice!

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/