up vote 0 down vote favorite
share [g+] share [fb]

i have setup a linux box (on an esxi5) which acts as an openvpn server. the server is configured to use bridging for the clients, which essentially works, with one exception.

if the client pings some machine on the network which is not the server itself it does not work. i ruled out etherything i know of (iptables, etc) and running tcpdump bioled it down to the following things:

  • i see arp requests on tap0 and br0
  • i see the arp replies on br0
  • i do NOT see the arp replies on tap0

my simple and short question: why does the br0 device not forward the arp reply to the tap0 device?

any idea might help!

link|improve this question
ok - i got a step further. when i watch the mac table of the bridge using brctl showmacs i see the mac address of my vpn client on the tap0 side. if i now start pinging from the vpn client to the subnet the mac address moves over to the over bridge port which of course blocks the arp reply of the subnet. the mac switches back almost immediately when the ping stops. so what i do not know is why the mac address switches to the wrong switchport - all my searches yielded to no results so far. – fen Dec 12 '11 at 9:46
feedback

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
or
required, but never shown
discard

Browse other questions tagged or ask your own question.