From mboxrd@z Thu Jan 1 00:00:00 1970 From: Benny Amorsen References: Date: Wed, 19 Aug 2009 18:40:10 +0200 In-Reply-To: (Joakim Tjernlund's message of "Wed, 19 Aug 2009 16:32:03 +0200") Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Subject: Re: [Bridge] MAC learning and VLAN List-Id: Linux Ethernet Bridging List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Joakim Tjernlund Cc: bridge@lists.linux-foundation.org Joakim Tjernlund writes: > trying to do private VLAN, http://tools.ietf.org/html/draft-sanjib-private-vlan-10, > using ebtables. It does not seem to be enough to only filter > pkgs. Isolated port are special and, as I understand it, they only > receive pkgs from the uplink via the primary VLAN and only > TX onto the isolated VLAN on the uplink(forget about other ports, it is > the uplink that is the problem) You are trying to make private VLAN's, and at the same time you're mixing in 802.1q tagging... I think you should start with making everything work using physical interfaces only. /Benny