VLANs for use with jails

[Christian Baer]

I'm using 12.0-RELEASE and run several VIMAGE jails with iocage.

At the moment I use a tagged switch port to put the whole system in my LAN VLAN.

I wan't to switch the port to a trunk port and want to put the jails in different VLANs.

As the iocage networking manual is crap I have no clue what to do.

My current rc.conf looks like this:

defaultrouter="10.0.3.1"
defaultrouter6="fe80::b6fb:e4ff:fe2d:abf6%em0"

ifconfig_igb0="inet 10.0.3.11/24 -rxcsum -rxcsum6 -txcsum -txcsum6 -lro -tso -vlanhwtso"
ifconfig_igb0_ipv6="inet6 accept_rtadv -lro -tso"

ifconfig_igb1="inet 10.0.3.12/24 -rxcsum -rxcsum6 -txcsum -txcsum6 -lro -tso -vlanhwtso"
ifconfig_igb1_ipv6="inet6 accept_rtadv -lro -tso" 

I set the default interface of the jails to igb1 and use igb0 for communication with the host itself.

What's the proper way to set up igb1 to be untagged (and so be in the management vlan) and create the different VLANs on it and use it with the jails? On of the VLANs should also be in the management VLAN (to move my Unifi controller from a Pi to a jail).

Does anyone have a similar setup? I found so many different approaches but none of them suited my needs. I tried to combine some approaches messed up my config more than once.

Best regards
Chris