Zoilo Gomez
2010-Feb-21 23:24 UTC
[Bridge] using bridges to connect vlans and untagged data
I have the following interfaces: => vlan22 and vlan2 on eth0 => vlan23 and untagged traffic on eth1 The essence is that: => vlan22 at eth0 and vlan23 at eth1 need to be bridged, and => vlan2 at eth0 and the untagged traffic on eth1 need to be bridged. Software: => Gentoo 10.1 => linux 2.6.32.7 vanilla => vconfig 1.9 => bridge-utils 1.4 ===== My implementation: vconfig add eth0 2 vconfig add eth0 22 vconfig add eth1 23 brctl addbr br0 brctl addif br0 vlan2 brctl addif br0 eth1 brctl addbr br1 brctl addif br1 vlan22 brctl addif br1 vlan23 ebtables -P FORWARD DROP ebtables -A FORWARD -j ACCEPT -p ! 802_1Q -i eth1 -o vlan2 ebtables -A FORWARD -j ACCEPT -p ! 802_1Q -i vlan2 -o eth1 ebtables -A FORWARD -j ACCEPT -i vlan23 -o vlan22 ebtables -A FORWARD -j ACCEPT -i vlan22 -o vlan23 Unfortunately, the vlan23 interface stops receiving data as soon as eth1 is connected to br0. It seems that the bridge sucks all data from eth1, effectively disabling vlan23; why is this? How can I get access to the untagged data on eth1, while simultaneously using vlan23 at eth1 ? Or should I use a different approach? Z.
richardvoigt at gmail.com
2010-Feb-22 00:47 UTC
[Bridge] using bridges to connect vlans and untagged data
On Sun, Feb 21, 2010 at 5:24 PM, Zoilo Gomez <zoilo at xs4all.nl> wrote:> I have the following interfaces: > => vlan22 and vlan2 on eth0 > => vlan23 and untagged traffic on eth1 > > The essence is that: > => vlan22 at eth0 and vlan23 at eth1 need to be bridged, and > => vlan2 at eth0 and the untagged traffic on eth1 need to be bridged. > > Software: > => Gentoo 10.1 > => linux 2.6.32.7 vanilla > => vconfig 1.9 > => bridge-utils 1.4 > > ===== My implementation: > > vconfig add eth0 2 > vconfig add eth0 22 > > vconfig add eth1 23 > > brctl addbr br0 > brctl addif br0 vlan2 > brctl addif br0 eth1 > > brctl addbr br1 > brctl addif br1 vlan22 > brctl addif br1 vlan23 > > ebtables -P FORWARD DROP > > ebtables -A FORWARD -j ACCEPT -p ! 802_1Q -i eth1 -o vlan2 > ebtables -A FORWARD -j ACCEPT -p ! 802_1Q -i vlan2 -o eth1 > > ebtables -A FORWARD -j ACCEPT -i vlan23 -o vlan22 > ebtables -A FORWARD -j ACCEPT -i vlan22 -o vlan23 > > Unfortunately, the vlan23 interface stops receiving data as soon as eth1 > is connected to br0. It seems that the bridge sucks all data from eth1, > effectively disabling vlan23; why is this? > > How can I get access to the untagged data on eth1, while simultaneously > using vlan23 at eth1 ? > > Or should I use a different approach?This is an issue with linux vlan support, there is no interface for untagged traffic. eth1 represents all traffic through that nic whether tagged or not. You should ask this question again on the vlan mailing list, maybe there's a new configuration option I don't know about or maybe they can offer a workaround.> > Z. > > _______________________________________________ > Bridge mailing list > Bridge at lists.linux-foundation.org > https://lists.linux-foundation.org/mailman/listinfo/bridge >