From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jesse Gross Subject: Re: bnx2 vlan issue Date: Fri, 17 Jun 2011 09:47:27 -0700 Message-ID: References: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: QUOTED-PRINTABLE Cc: netdev@vger.kernel.org To: Dominique Martinet Return-path: Received: from mail-vx0-f174.google.com ([209.85.220.174]:48576 "EHLO mail-vx0-f174.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750742Ab1FQQrs convert rfc822-to-8bit (ORCPT ); Fri, 17 Jun 2011 12:47:48 -0400 Received: by vxi39 with SMTP id 39so2115402vxi.19 for ; Fri, 17 Jun 2011 09:47:47 -0700 (PDT) In-Reply-To: Sender: netdev-owner@vger.kernel.org List-ID: On Thu, Jun 16, 2011 at 11:10 PM, Dominique Martinet wrote: > Hi, > > Jesse Gross nicira.com> writes: >> On Thu, Mar 24, 2011 at 5:26 PM, Seblu seblu.net> wrote: >> > Maybe i was not enough clear. It seems to me that new behaviour, w= ith >> > vlan on top of bridge rather than above interface in bridge is not >> > functional. >> > In other words, i cannot use vlan and bridge together in 2.6.38 (w= ith >> > e1000e). >> >> Sorry, I misunderstood what you were saying before. =C2=A0Can you tr= y and >> see where the packets are getting lost or improperly handled by >> running tcpdump on the various interfaces? =C2=A0For example, check = that >> packets are coming in with tags on the physical interfaces, have tag= s >> on the bridge interface, no tag on the vlan interface, etc. > > I think I ran into the same problem, and my workaround for this was t= o add > a vlan do the bridge and then add the vlan'ed bridge to another bridg= e, i.e. > (since I can't draw, commands will be better :P) > > brctl addbr br0 > brctl addif br0 eth0 > ip link add link br0 name br0.42 type vlan id 42 > ip link set br0.42 up > > brctl addbr br_42 > brctl addif br_42 br0.42 > > and then I could put VMs in br_42 which got network "as expected" > before, I used to have br_42 with eth0.42 in it, so it is just one mo= re > step.. > What bothers me is that I also want to put VMs in br0, and it does wo= rk, > but this bridge also sees all the tagged data - isn't there a way to = just > "pick" the untagged network? You are bridging the VMs to the physical network, so it is expected that they will see all traffic. That said, you could use ebtables to only take vlan 0, similar to if you only wanted them to see packets to their MAC address and not flooding. > My other question is that I'm not certain if that's the expected way = to > use the new behaviour, if not I wouldn't mind light shining from abov= e :) Yes, that's the intended behavior and correct usage.