From: Marek Kierdelewicz <marek@piasta.pl>
To: Duane Larson <duane.larson@gmail.com>
Cc: netfilter@vger.kernel.org
Subject: Re: Need to remove 802.1Q tagging
Date: Fri, 7 Oct 2011 21:52:12 +0200 [thread overview]
Message-ID: <20111007215212.68a88b56@catus> (raw)
In-Reply-To: <CAFcM1Eo0X77tfC4yYHjLPJs=xPGyrV-WUMnCnEWvbD2p5uW+9Q@mail.gmail.com>
Hi,
>I am thinking that the two interfaces on the Linux box will be bridged
>(in transparent mode) and when traffic passes through the linux box
>the vlan 802.1q tag can be removed and then the traffic goes to the
>Is my thinking correct? Will this work? What all do I need to be
>aware of and are there any current examples that point to what I am
>trying to do??? I am very new to netfilter and ebtables (I found out
>about it last night).
Your idea should work.
Let's assume that "south" interface of Linux bridge on your diagram is
eth0 and "north" is eth1.
You can bridge all eth0.X vlan interfaces and eth1 to single bridge
with stp off. You should probably filter traffic on that bridge
and allow anything but eth0.x <-> eth1. It's also a good thing to setup
filtering ruleset before you start bridging (l'oops :).
I've similar solution working very well in production environment. It
involves providing pppoe on multiple vlans.
If you need any more implementation details please feel free to ask on
prv.
Best regards,
Marek Kierdelewicz
next prev parent reply other threads:[~2011-10-07 19:52 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2011-10-07 19:20 Need to remove 802.1Q tagging Duane Larson
2011-10-07 19:52 ` Marek Kierdelewicz [this message]
2011-10-07 21:22 ` Duane Larson
2011-10-07 21:36 ` Marek Kierdelewicz
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20111007215212.68a88b56@catus \
--to=marek@piasta.pl \
--cc=duane.larson@gmail.com \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox