# iface eth0 inet static
#   address 192.168.10.1
#   netmask 255.255.255.0
# # post-up ipsec restart

auto br0 eth0

iface br0 inet static
  address 192.168.10.1
  netmask 255.255.255.0
## These are useful for VMs:
# pre-up   for n in 0 1 2 3 4; do tunctl -t tap$n; done; true
# pre-down for n in 0 1 2 3 4; do tunctl -d tap$n; done; true
# bridge_ports eth0 tap0 tap1 tap2 tap3 tap4
# bridge_maxwait 10

## Enable "internet connection sharing"
  up iptables -t nat -A POSTROUTING -o wlan0 -j MASQUERADE
  up sysctl -w net.ipv4.ip_forward=1

## Disable ipv6 auto-address.
## This is needed sometimes, if ipv6 breaks ipv4.
# pre-up echo 0 > /proc/sys/net/ipv6/conf/br0/accept_ra_pinfo

# NB. 'ipsec reload' does not work very well
  post-up ipsec restart

iface eth0 inet manual