Re: VLAN not working - jails, bridges, and VLANs
- In reply to: Rudy : "VLAN not working - jails, bridges, and VLANs"
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Wed, 26 Jul 2023 15:06:57 UTC
Van: Rudy <crapsh@monkeybrains.net> Datum: zondag, 16 juli 2023 05:54 Aan: freebsd-net@freebsd.org Onderwerp: VLAN not working - jails, bridges, and VLANs > > > Kernel: FreeBSD 13.1-RELEASE-p8 GENERIC amd64 > Issue: vlan traffic not in the jail > > Weird issue today... > > I have a bridge with on the host, two jails, and a vlan in the jail. > The jails were networking just fine with their native vlan (1), but the host would not pass 802.1q traffic to the jail. > > If I created the vlan91 on the host, that would 'wake up vlan awareness on the bridge'. I could then destroy the vlan91 on the host, and the jail still passes traffic. > > The Workaround: > host#ifconfig vlan91 create vlan 91 vlandev igb1 10.1.1.1/28; ifconfig vlan91 destroy > > > > Maybe something wrong with the bridge spanning tree implementation? It's like that bridge was created before the vlans, and the non-native vlans are pruned. > > > Rudy > > > > > > > > > host# ifconfig bridge0 > bridge0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500 > ether 58:9c:fc:00:69:7f > id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15 > maxage 20 holdcnt 6 proto rstp maxaddr 2000 timeout 1200 > root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0 > member: epair1a flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP> > ifmaxaddr 0 port 12 priority 128 path cost 2000 > member: epair0a flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP> > ifmaxaddr 0 port 11 priority 128 path cost 2000 > member: igb1 flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP> > ifmaxaddr 0 port 4 priority 128 path cost 20000 > groups: bridge > > > jail0# ifconfig > epair1b: flags=8863<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500 > options=8<VLAN_MTU> > ether 02:eb:91:68:32:0b > inet 10.10.40.112 netmask 0xffffff00 broadcast 10.10.40.255 > groups: epair > media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>) > status: active > nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL> > vlan91: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500 > ether 02:eb:91:68:32:0b > inet 10.8.254.68 netmask 0xfffffff0 broadcast 10.8.254.79 > groups: vlan > vlan: 91 vlanproto: 802.1q vlanpcp: 0 parent interface: epair1b > media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>) > status: active > nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL> > > > host# kldstat > Id Refs Address Size Name > 1 50 0xffffffff80200000 1f30470 kernel > 2 1 0xffffffff82131000 5ec1f8 zfs.ko > 3 1 0xffffffff8271e000 b7d0 opensolaris.ko > 4 1 0xffffffff82ae5000 3378 acpi_wmi.ko > 5 1 0xffffffff82ae9000 3250 ichsmb.ko > 6 1 0xffffffff82aed000 2180 smbus.ko > 7 1 0xffffffff82af0000 8d38 ioat.ko > 8 1 0xffffffff82af9000 2110 pchtherm.ko > 9 1 0xffffffff82afc000 2340 uhid.ko > 10 1 0xffffffff82aff000 4350 ums.ko > 11 1 0xffffffff82b04000 3380 usbhid.ko > 12 1 0xffffffff82b08000 31f8 hidbus.ko > 13 1 0xffffffff82b0c000 2a08 mac_ntpd.ko > 14 1 0xffffffff82b0f000 7638 if_bridge.ko > 15 1 0xffffffff82b17000 50d8 bridgestp.ko > 16 1 0xffffffff82b1d000 3a64 if_epair.ko > > > > > > > > > Hi, What are you trying to accomplish? /--- epair1a --- epair1b --- vlan91 -> Jail1 ibg1 ---- bridge0 ---+ \--- epair0a --- epair0b --- ??? Is ibg1 running in PROMISC mode if you do not do the workaround of setting vlan91 on ibg1? Can you post complete output of ifconfig and the relevant part of your /etc/rc.conf? Regards, Ronald.