0

I am trying to bridge my LAN over TAP to remote machine. The connection is established per VPN over SSH and I can ping already from remote to local host over TAP and the other way.

Now I need help with IP configuration and routing.

The scenario:

Local server in my LAN. No public IP. LAN: 192.168.0.0/16

Remote server, which needs to present its services into my LAN.

For the TAP adapters I assigned 169.254.0.0/16, but I am not shure if this is correct when I want to forward the remote traffic to my LAN.

Want to connect remote host with its services (UDP&TCP Ports, Broadcast) into my LAN.

Now I am confused:

  • The private IP for the tunnel is not important?
  • How to route services from remote over VPN to my LAN-server and forward that in my LAN.
  • Server is serving other public things like Web, Mail wich should not be interrupted

I looked at THIS How-to and used much from that.

I already set up bridge interface at my LAN-server [..]

  • 1
    Don't use 169.254.0.0/16, as these are non-routed link-local addresses. Use a block from one of the other RFC1918 options, such as 172.16.0.0/24 – roaima Jun 27 '19 at 21:59
  • If you're bridging with a tap interface then there is no need for routing. Both sides should have the same subnet because they're part of the same bridged network. – roaima Jun 27 '19 at 22:02
  • @roaima I updated ip block. Also I added iptables MASQUERADE and so on. Now I can ping from remote into my LAN-Clients :) The last step i need to go, is to route specific ports from the 'external server, which is not physically in my LAN' to my LAN over the TAP construction ;) I will update my question soon, if everything works. – weutz Jun 28 '19 at 0:24
  • 1
    Your configuration really doesn't make sense. If you're bridging you shouldn't be trying to route. If you're routing please stop referring to it as bridging. – roaima Jun 28 '19 at 6:51
  • 1
    To add on @roaima: If you are bridging, you have a tap network interface, say tap0. You create a bridge with ip and then add both tap0 and your LAN interface (say eth0) to it. You don't assign IP addresses. If you want to route, then indicate this in your question. – dirkt Jun 28 '19 at 8:09

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.