Problem of NAT with VLAN

Problem of NAT with VLAN

[zze-Proxy_Corveller ball001 exterieur FTRD]

[-- Attachment #1: Type: text/plain, Size: 626 bytes --]

Hello,

I've got n VLANs that arrive on a Linux machine. I'm using vconfig to
receive packets from those VLANs.

I want to perform DNAT on packets between my physical interface (eth2) and the virtuals devices
created by vconfig (vlan00xx, where xx is the VLAN ID of the associated VLAN).
I've place some rules at the PREROUTING chain in the nat table to perform the address
translation.

My problem is that netfilter seems don't see packets between eth2 and vlan00xx. 

I've tried some rules such as '-A PREROUTING -i eth2' or '-A PREROUTING -i vlan0010' but
the packet counters stay equal to 0.

Any idea ?


[-- Attachment #2: Type: text/html, Size: 1723 bytes --]

Re: Problem of NAT with VLAN

[Friedrich Lobenstock]

zze-Proxy_Corveller ball001 exterieur FTRD wrote:
> 
> I've got n VLANs that arrive on a Linux machine. I'm using vconfig to
> receive packets from those VLANs.
> 
> I want to perform DNAT on packets between my physical interface (eth2) 
> and the virtuals devices
> created by vconfig (vlan00xx, where xx is the VLAN ID of the associated 
> VLAN).
> I've place some rules at the PREROUTING chain in the nat table to 
> perform the address
> translation.
> 
> My problem is that netfilter seems don't see packets between eth2 and 
> vlan00xx.
> 
> I've tried some rules such as '-A PREROUTING -i eth2' or '-A PREROUTING 
> -i vlan0010' but
> the packet counters stay equal to 0.
> 
> Any idea ?
> 

Just curious, did you run:
   vconfig set_name_type VLAN_PLUS_VID
   vconfig add eth2 10

-- 
MfG / Regards
Friedrich Lobenstock

RE: Problem of NAT with VLAN

[zze-Proxy_Corveller ball001 exterieur FTRD]

Yes, indeed it's my commands

> -----Message d'origine-----
> De : Friedrich Lobenstock [mailto:fl@fl.priv.at]
> Envoye : mercredi 9 avril 2003 18:20
> A : netfilter-devel@lists.netfilter.org
> Objet : Re: Problem of NAT with VLAN
> 
> 
> zze-Proxy_Corveller ball001 exterieur FTRD wrote:
> > 
> > I've got n VLANs that arrive on a Linux machine. I'm using 
> vconfig to
> > receive packets from those VLANs.
> > 
> > I want to perform DNAT on packets between my physical 
> interface (eth2) 
> > and the virtuals devices
> > created by vconfig (vlan00xx, where xx is the VLAN ID of 
> the associated 
> > VLAN).
> > I've place some rules at the PREROUTING chain in the nat table to 
> > perform the address
> > translation.
> > 
> > My problem is that netfilter seems don't see packets 
> between eth2 and 
> > vlan00xx.
> > 
> > I've tried some rules such as '-A PREROUTING -i eth2' or 
> '-A PREROUTING 
> > -i vlan0010' but
> > the packet counters stay equal to 0.
> > 
> > Any idea ?
> > 
> 
> Just curious, did you run:
>    vconfig set_name_type VLAN_PLUS_VID
>    vconfig add eth2 10
> 
> -- 
> MfG / Regards
> Friedrich Lobenstock
> 
> 
> 

Problem of NAT with VLAN

[zze-Proxy_Corveller ball001 exterieur FTRD]

Hello,

I've got n VLANs that arrive on a Linux machine. I'm using vconfig to
receive packets from those VLANs.

I want to perform DNAT on packets between my physical interface (eth2)
and the virtuals devices
created by vconfig (vlan00xx, where xx is the VLAN ID of the associated
VLAN).
I've place some rules at the PREROUTING chain in the nat table to
perform the address
translation.

My problem is that netfilter seems don't see packets between eth2 and
vlan00xx. 

I've tried some rules such as '-A PREROUTING -i eth2' or '-A PREROUTING
-i vlan0010' but
the packet counters stay equal to 0.

Any idea ?