LAN-WAN Bridge is not routing

[martincho]

Hi All

I'm trying to set up a bridge between 2 internal sub-nets.
One of them, 192.168.1.0 is provided by a Lynksis router (connected to ISP modem). To this network are connected a PC (with OpenBSD) via LAN and mobiles and laptops via wifi.
The PC with Open BSD has 2 interfaces: vr0 which is connected to the Lynksis router via LAN, and a ath0 (192.168.2.1) which is configured as hotspot (SSID: nobs) to provide connectivity to those laptops and mobiles that can't reach the wifi signal from Lynksis.

Unfortunately, the hosts that are connected to nobs (wifi subnet in the OpenBSD PC, couldn't go out to internet.

Don't know if it is a network definition o something else that must be configured.
Lynksis internal subnet is 192.168.1.0 - vr0 in the bridge
OpenBSD AP subnet is 192.168.2.0 - ath0 in the bridge

These are the configuration files:
Hostnames + bridge:

$ cat /etc/hostname.vr0
dhcp
$ cat /etc/hostname.ath0
inet 192.168.2.1 255.255.255.0 NONE media autoselect mediaopt hostap nwid nobs chan 1 wpakey "thesecretkey"
$ cat /etc/hostname.bridge0
add vr0
add ath0
up

PF:

int_if="vr0"
wlan_if="ath0"

pass quick on $int_if no state
pass quick on $wlan_if no state

DHCP:

$ cat /etc/rc.conf.local
pkg_scripts="dbus_daemon avahi_daemon mysqld"

dhcpd_flags="ath0"

pf=""
pf_rules=/etc/pf.conf

$ cat /etc/dhcpd.conf
# $OpenBSD: dhcpd.conf,v 1.2 2008/10/03 11:41:21 sthen Exp $
#
# DHCP server options.
# See dhcpd.conf(5) and dhcpd(8) for more information.
#

# Network: 192.168.1.0/255.255.255.0
# Domain name: my.domain
# Name servers: 192.168.1.3 and 192.168.1.5
# Default router: 192.168.1.1
# Addresses: 192.168.1.32 - 192.168.1.127
#
option domain-name "my.domain";
option domain-name-servers 192.168.1.3, 192.168.1.5;

subnet 192.168.2.0 netmask 255.255.255.0 {
option routers 192.168.2.1;
range 192.168.2.2 192.168.2.100;
}

Any help will be welcome.

Regards
Martin

[jggimi]

Hello, and welcome!

Your bridge device is misconfigured, as you have separate subnets for each span. But it isn't needed. You can route your TCP/IP traffic, so the bridge is only getting in the way.

I recommend eliminating the bridge device, and forwarding packets (per FAQ 6.2.7) between these two networks. This will turn your OpenBSD device from a misconfigured bridge into a functioning router.

[jggimi]

Your outer network (192.168.1.*) will need to know how to route to the inner network. You do that by adding the route to the inner network to the routing table of your Linksys router.