Advertisement
Guest User

Untitled

a guest
Jan 26th, 2012
91
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.69 KB | None | 0 0
  1. batman-adv ap_isolation issue
  2. =============================
  3.  
  4. --------------
  5. Network layout
  6. --------------
  7. Internet <---> Linux firewall <---> batman-adv-AP#1
  8. ^
  9. |
  10. mesh--> batman-adv-AP#2
  11.  
  12. ---------------------
  13. Configuration details
  14. ---------------------
  15. ap_isolation is enabled on both batman-adv-AP#1 and batman-adv-AP#2
  16.  
  17. batctl info on the devices:
  18. batman-adv-AP#1:
  19. Locally retrieved addresses (from bat0) announced via TT (TTVN: 3):
  20. * da:0f:30:51:ca:2e [.P...]
  21. * ac:86:74:01:b3:b0 [.....]
  22. * 00:0e:2e:bd:d7:88 [.....]
  23. Globally announced TT entries received via the mesh bat0
  24. Client (TTVN) Originator (Curr TTVN) Flags
  25. * ac:86:74:01:b4:90 ( 2) via ae:86:74:01:b4:94 ( 2) [...]
  26. * 02:69:fe:45:a3:cf ( 1) via ae:86:74:01:b4:94 ( 2) [...]
  27.  
  28. batman-adv-AP#2:
  29. Locally retrieved addresses (from bat0) announced via TT (TTVN: 2):
  30. * ac:86:74:01:b4:90 [.....]
  31. * 02:69:fe:45:a3:cf [.P...]
  32. Globally announced TT entries received via the mesh bat0
  33. Client (TTVN) Originator (Curr TTVN) Flags
  34. * da:0f:30:51:ca:2e ( 3) via ae:86:74:01:b3:b4 ( 3) [...]
  35. * ac:86:74:01:b3:b0 ( 3) via ae:86:74:01:b3:b4 ( 3) [...]
  36. * 00:0e:2e:bd:d7:88 ( 3) via ae:86:74:01:b3:b4 ( 3) [...]
  37.  
  38. brctl info on the devices:
  39. batman-adv-AP#1:
  40. bridge name bridge id STP enabled interfaces
  41. br-lan 8000.ac867401b3b0 no eth0
  42. wlan0
  43. wlan0-1
  44. bat0
  45.  
  46. batman-adv-AP#2:
  47. bridge name bridge id STP enabled interfaces
  48. br-lan 8000.ac867401b490 no eth0
  49. wlan0
  50. wlan0-1
  51. bat0
  52.  
  53. ------------------
  54. Problem definition
  55. ------------------
  56. From the Linux firewall I can ping batman-adv-AP#1 (and ssh) but not batman-adv-AP#2
  57. batman-adv-AP#1 can reach the Linux firewall (ping, http,...)
  58. batman-adv-AP#2 can not reach the Linux firewall (ping, http,...)
  59.  
  60. If I disable ap_isolation on batman-adv-AP#1 (batctl ap 0), I can ping both batman-adv-AP#1 and batman-adv-AP#2 from the Linux server
  61.  
  62. If I re-enable ap_isolation on batman-adv-AP#1 (batctl ap 1), I can still ping both batman-adv-AP#1 and batman-adv-AP#2 from the Linux server
  63. In this state (disable/re-enable of ap_isolation) an I have not tested if isolation is actually occuring
  64.  
  65. -------------------
  66. Version information
  67. -------------------
  68. Running OpenWRT Backfire r29910 with batman-adv 2011.4.0
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement