Questions tagged [vlan]

Virtual LAN(vlan) is a technique to create isolated broadcast and multicast domains at layer2 level.

Filter by
Sorted by
Tagged with
0
votes
0answers
17 views

Bridge port VLAN tagging

I have two bridges configured. I'm trying to add a veth pair between them, configured so that untagged traffic on one bridge is carried on the other bridge with VLAN tag 5. So far I have this: $ ...
0
votes
1answer
39 views

Networking - VLAN & Router Linux

I have a setup with 1 Debian router + 1 Debian DHCP Server. I need to create multiple VLAN on my DHCP server. From my DHCP server I have internet access. I managed to create and set up my VLANs and ...
0
votes
1answer
36 views

Possible Ways to Build a Virtual Private Cloud with VPS nodes

I have a number of internet based VPS nodes used for prototyping that I would like to connect together as if they were on the same secure private LAN, like a VLAN. I have been looking for ways that ...
2
votes
1answer
581 views

Linux VLAN-aware bridges and trunk ports

I have an ethernet port attached to a bridge: $ brctl show bridge name bridge id STP enabled interfaces eth0_bridge 8000.6a612bcc4723 yes eth0 The bridge is VLAN-aware (ie /sys/class/...
0
votes
1answer
326 views

Linux IP bridge and vlan_filtering

I'm using DSA in Linux to support an ethernet switch (KSZ9897). The switch is behaving but I'm having trouble setting up the bridge vlan filtering features through Linux (kernel 4.19). I create the ...
0
votes
0answers
19 views

Linux: One interface receive or send both taged and untaged traffic

I want to configure a virtual interface to send and receive the traffic with a VLAN-tag of 3000. And configure other virtual interfaces to send and receive the Ethernet traffic without any VLAN-tag. ...
3
votes
1answer
1k views

Bridged interfaces and VLAN tags

I'm trying to set up a system that joins an untagged Ethernet network to a TAP tunnel, adding a VLAN tag as the traffic moves to the tunnel. So far I have: eth0 - the physical Ethernet interface ...
0
votes
1answer
57 views

Configuring a bridge leads to losing connection

I have a Linux server with three NIC that are connected to a switch (one NIC is the management, two NIC form a LACP bonding). In addition I need to use a VLAN (167), because the switch is configured ...
0
votes
1answer
181 views

How to Combine a Bridge with VLAN over a Bonding and Two Default Gateways

I have a Linux server with three NIC that are connected to a switch (one NIC is the management, two NIC form a LACP bonding). In addition I need to use a VLAN (167), because the switch is configured ...
-1
votes
1answer
249 views

Creating a VLan interface in SystemD, creates extra interface. What is this?

In order to substitute my ISP router, I decied to build a custom router using ArchLinux and connecting it directly to the ONT. My ISP applies QoS by seperating services into different VLANs. The ...
3
votes
1answer
161 views

InterVLAN between namespaces using a third namespace as a router [closed]

I need to establish connection between 2 namespaces (one has ip add 10.0.0.1/24 gateway 10.0.0.254 and the other one has ip add 20.0.0.1/24 gateway 20.0.0.254), separated in different VLANs (10 and 20)...
0
votes
0answers
41 views

Get Originating device(physical device) info for Packets trapped on Bridge

Lets assume below given is the set of net devices that my frame is intended to traverse over. eth0(1) -> bond0(2) -> bridge(3) -> vlan100(4). >>> (number) is the ifindex for each netdevice I have ...
0
votes
1answer
196 views

Create multiple untagged virtual interface on a single physical interface

For some very specific reason, I need to create 4 virtual interfaces with different MAC address on each virtual interface, the frames from those interfaces will needs be sent over a single physical ...
1
vote
0answers
18 views

Manage identical dhcp servers

I have a weird problem that needs a solution. I have many identical DHCP Servers, configured the same way, same subnet, same range, same everything (are actually some PCs) and i would like to somehow ...
0
votes
0answers
58 views

From VLAN10 (eth0.10) Internet access to the whole network and clients? How to route?

Can I make the Internet Access of VLAN10 (eth0.10) to whole Router an Clients? iptables -A FORWARD -i br0 -s 192.168.1.0/255.255.255.0 -j ACCEPT iptables -A FORWARD -i eth0 -d 192.168.1.0/255.255.255....
0
votes
1answer
35 views

Linux route selection not taking expected rule

I have the following routing rules (displayed using route -n): Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 10.0.2.1 0.0.0.0 UG ...
0
votes
0answers
66 views

Routing from LXC container to another host over VPN

I've got an LXC container 10.10.3.100 on host server 10.10.3.1 On server 10.10.3.1 I have tunnel to another server 10.10.2.1 I've added iptables rule: -A POSTROUTING -s 10.10.0.0/16 -o vmbr1 -j ...
1
vote
1answer
444 views

Matching vlan id and priority with ebtables

I am attempting to use ebtables to match a specific VLAN ID (non zero) along with a specific VLAN PCP value. I tried the following: ebtables -A FORWARD -p 0x8100 --vlan-id 5 --vlan-prio 3 -j DROP ...
0
votes
0answers
52 views

Forwarding mDNS packets from an on-prem network to cloud server and back

We have an application running on an on-prem Linux server configured with a trunk port and its working is tightly associated to multiple VLANs traffic and certain device IPs present on the same ...
1
vote
1answer
62 views

Why do I see VLAN tag in my ARP IP packet even though I have disabled the module 8021.q in CentOS 7?

I have disabled 802.1Q module in my Cento 7 VM and did arping through one of the interface to it's gateway IP and captured packet traffic on that interface from the same VM. [root@vm1 ~]# lsmod | ...
3
votes
2answers
357 views

Communication fails on DSA ethernet ports of Banana Pi R1 (Lamobo R1)

I don't get TCP/IP communication running on my Banana PI R1 on the switch ports (i.e., not the separate LAN port which shows up as eth0, which is working). It runs "Debian GNU/Linux 9.8", upgraded ...
0
votes
1answer
889 views

DHCP VLAN not working on the client side?

I have developed a server using Linux. The server is a DHCP VLAN server consisting of two VLANs 110 and 120. I am trying to get it working to the client side. My /etc/network/interfaces for VLAN 110 ...
1
vote
1answer
141 views

Hosting a simple honeypot server in each of 3 VLANs using one ethernet port

I am trying to set up a honeypot server in different VLANs. The company I work in has 3 VLANS: 10, 20, 30. My goal is to use a Raspberry Pi to host a simple honeypot and broadcast sniffer (for ARP and ...
4
votes
0answers
221 views

What are “self” and “master” options for in “bridge vlan add”?

I'm reading "man bridge" and it says something like: bridge vlan { add | del } dev DEV vid VID [ pvid ] [ untagged ] [ self ] [ master ] What are "self" and "master" options for? man says: self ...
0
votes
2answers
369 views

port 1556 listening on tcp6 causing issues

on my RedHat 7, i noticed that network connection for Netbackup stopped working and i tried everything including rurning off my firewall and disabled SELINUX with no luck. the only thing i noticed ...
0
votes
1answer
78 views

macOS pf asymmetric routing through VLANs

I have a VLAN interface vlan0 that has a tag of 444 that has an IP of 172.16.16.16 The VLAN goes through the physical en0 interface. I have another interface mine0 that's local just to the computer....
0
votes
1answer
160 views

system get wrong gateway when bonding

I have a physical system with Centos 6 as OS. In eth0 I set IP, gateway and netmask as below and the physical port is attached to a switch port that its VLAN is 12. DEVICE=eth0 TYPE=Ethernet ...
2
votes
1answer
123 views

Packet meta class applied, but captured VLAN priority is wrong

My linux home router sits between my ISP (Orange) and my home network. On the WAN side, Orange provide internet in a VLAN tagged 832. Some control messages (ARP, DHCP, ICMPv6 "router discovery" types,...
1
vote
1answer
525 views

Why would properly VLAN tagged multicast traffic not arrive on the tagged interface?

I'm working with an application that sends multicast traffic between a client and server. This traffic is sent via multicast. The client and server are both using VLAN interfaces, and need to ...
2
votes
2answers
552 views

nftables / iptables rules to rewrite source IP by interface

I have a physical network with a Linux server (Ubuntu 16.04, kernel 4.13) and several gadgets on it. Each gadget has the same unchangeable static IP, e.g. 192.168.0.222/24. I would like to ...
3
votes
1answer
4k views

Linux bond with VLAN question

Do you think following configuration make sense? Does BONDTING_OPT supported in VLAN interface? I want to make sure my interface fails over when the upstream device down. ifcfg-bond0 $ cat /etc/...
0
votes
1answer
125 views

The name of the VLAN is abnormal when added to the eth1

When the VLAN is added to the Linux, the VLAN Dev name of VLAN ends normally with the network card. As a result, the abnormal VLAN ends up with the rename word. normal: abnormal: commands: ...
0
votes
0answers
2k views

Creating VLAN Bridge for KVM Virtual Machines

Original Question: I need to run a KVM based VM with a few VLANs going through a single vNIC. How to create a bridge on a Ubuntu/CentOS host machine that can handle VLAN tagged traffic (i.e. ...
2
votes
1answer
1k views

Bonding of virtual network interfaces

Is it possible to bond virtual network interfaces? If yes, how? Bonding of physical interfaces is explained here for example: https://wiki.linuxfoundation.org/networking/bonding My situation is this:...
4
votes
2answers
907 views

Backup and restore of Centos network interfaces

I have a server running Centos 7 which needs to be rebooted to upgrade some software. Some of the physical NICs have around 5-10 VLAN interfaces each. They're subject to change on a weekly/monthly ...
0
votes
3answers
43 views

How to reach an IP in a VLAN when there is no interface in that VLAN on my server? [closed]

We have a VLAN_ID that is not in the /etc/sysconfig/networking/ifcfg-* files. We need to reach an IP from this VLAN. How can we reach this VLAN if there is no interface on the server with this ...
1
vote
1answer
545 views

Iptables NAT / Kernel IP forwarding limited to ~10Mbit

I am currently setting up my iot router and ran into some issues regarding connection speed. The router itself is a cascading router. My Internet speed is 100Mbit which I verified by directly ...
1
vote
1answer
519 views

Need to DNAT mac based on vlan and destination IP match.

ebtable rule is not allowing me to specify vlanid and ipv4 protocol in one rule. Also I tried this but the second rule is not getting matched for vlan packet. ebtables -t nat -A PREROUTING --vlan-...
1
vote
1answer
174 views

Virtual LAN with VPN [closed]

I have a DigitalOcean server, a paid VPN provider, and multiple personal machines I'd like to be able to communicate with securely over the internet. In my ideal scenario, I'd have my DigitalOcean ...
0
votes
2answers
36 views

Virtual LANs in memory for several virtual machines on one host

Suppose I have host machine with no NIC. I would like to run several virtual machines on it and connect them with totally virtual LANs in between. I want many machines and many LANs. I would like to ...
1
vote
0answers
218 views

VLAN tag insertion on outgoing packet

I am working to insert vlan tags for some client macs on outgoing packets via native vlan. I have tried nh_hooks IN, OUT and Forward but didn't get any success. Can I either: add the tag to the ...
1
vote
0answers
433 views

Running Linux as a switch, but switch not receiving ARP reply

I am trying to get Linux to function as a switch by bridging two network interfaces together, but do not appear to get to ARP replies to flow back. My topology is as follows: [Client 1] -- [Linux ...
0
votes
2answers
3k views

Difference between ip link add … vlan and bridge vlan add vid…?

I am getting into details of VLANs on Linux and I came across those 2 commands: [root@machine ~]# bridge vlan add vid 100 dev em1 [root@machine ~]# ip link add link em1 name em1.100 type vlan id 100 ...
1
vote
1answer
663 views

Isolating ports on a router

A discussion with the manufacturer stated this configured is not supported or even possible with the router's hardware and OS.
1
vote
1answer
520 views

How to add an alias IP to a VLAN interface in FreeBSD

How can I add an alias to a VLAN interface in FreeBSD? I tried the following, but it seems to be ignored: # /etc/rc.conf vlans_igb0="vlan42" create_args_vlan42="vlan 42" ifconfig_igb0="up" ...
3
votes
1answer
3k views

Setup VLAN on linux bridge for virtual machines with systemd

I want to switch to systemd and with this I have to setup the linux bridge for my virtual machines in KVM to use VLAN. Having Debian GNU/Linux 9.1 (stretch), using its systemd-networkd and libvirt. ...
1
vote
0answers
281 views

Second VLAN interface starts down

I'm trying to set up multiple VLANs on a connection between a server and a router. The server is running Arch Linux. I'm using netctl to set these up. The problem is that the second VLAN interface (...
0
votes
1answer
174 views

When to tag physical ports on private VLANs?

8 port router over two switches (4+4) Using kernel 2.6.x I'm trying to setup private VLANs to enable port isolation on this router. Each physical Ethernet port should only be able to communicate ...
0
votes
1answer
549 views

How to restrict the VLAN tags permitted on a bridge

I am using FreeBSD 11.1-RELEASE. I setup bridge0 to bridge two interfaces. I want to only pass VLANs 40-90 on this bridge. How can I do this? I am looking into using pf, but I would think the network ...
0
votes
1answer
1k views

How do I view VLAN tagged packets with any ID?

I'm trying to sniff with tshark on debian and I want to see all the traffic, but I'm missing the VLAN traffic. I can manually configure the interface to add VLAN 10 to eth0 interface and then query ...