From owner-freebsd-questions@FreeBSD.ORG Sun May 19 02:48:42 2013 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id 97ED77DC; Sun, 19 May 2013 02:48:42 +0000 (UTC) (envelope-from Devin.Teske@fisglobal.com) Received: from mx1.fisglobal.com (mx1.fisglobal.com [199.200.24.190]) by mx1.freebsd.org (Postfix) with ESMTP id 630A9100; Sun, 19 May 2013 02:48:42 +0000 (UTC) Received: from smtp.fisglobal.com ([10.132.206.15]) by ltcfislmsgpa04.fnfis.com (8.14.5/8.14.5) with ESMTP id r4J2mWpF006393 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT); Sat, 18 May 2013 21:48:32 -0500 Received: from LTCFISWMSGMB26.FNFIS.com ([10.132.99.18]) by LTCFISWMSGHT04.FNFIS.com ([10.132.206.15]) with mapi id 14.02.0309.002; Sat, 18 May 2013 21:48:32 -0500 From: "Teske, Devin" To: Joe Subject: Re: netgraph network setup for jail(8) vnet jails. Thread-Topic: netgraph network setup for jail(8) vnet jails. Thread-Index: AQHOU93CBuO69ayRZkOyIHdwpxatO5kL6zyAgAAW54CAACCkgA== Date: Sun, 19 May 2013 02:48:31 +0000 Message-ID: <13CA24D6AB415D428143D44749F57D7201F50BEC@ltcfiswmsgmb26> References: <5197A06A.9080401@a1poweruser.com> <13CA24D6AB415D428143D44749F57D7201F5076A@ltcfiswmsgmb26> <5198221D.5040601@a1poweruser.com> In-Reply-To: <5198221D.5040601@a1poweruser.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.132.253.126] MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.10.8626, 1.0.431, 0.0.0000 definitions=2013-05-18_08:2013-05-17,2013-05-18,1970-01-01 signatures=0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.14 Cc: Devin Teske , "" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list Reply-To: Devin Teske List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 19 May 2013 02:48:42 -0000 On May 18, 2013, at 5:51 PM, Joe wrote: Teske, Devin wrote: Sorry for top-post, but just wanted to add a quick note: The output of "ngctl dot" would be very helpful to others in debugging your= setup. graph netgraph { edge [ weight =3D 1.0 ]; node [ shape =3D record, fontsize =3D 12 ] { "1" [ label =3D "{rl0:|{ether|[1]:}}" ]; "5" [ label =3D "{bridge0:|{bridge|[5]:}}" ]; "9" [ label =3D "{ngeth0:|{eiface|[9]:}}" ]; "e" [ label =3D "{ngctl2355:|{socket|[e]:}}" ]; }; subgraph cluster_disconnected { bgcolor =3D pink; "e"; }; node [ shape =3D octagon, fontsize =3D 10 ] { "1.upper" [ label =3D "upper" ]; "1.lower" [ label =3D "lower" ]; }; { edge [ weight =3D 2.0, style =3D bold ]; "1" -- "1.upper"; "1" -- "1.lower"; }; node [ shape =3D octagon, fontsize =3D 10 ] { "5.link2" [ label =3D "link2" ]; "5.link1" [ label =3D "link1" ]; "5.link0" [ label =3D "link0" ]; }; { edge [ weight =3D 2.0, style =3D bold ]; "5" -- "5.link2"; "5" -- "5.link1"; "5" -- "5.link0"; }; "5.link1" -- "1.upper"; "5.link0" -- "1.lower"; node [ shape =3D octagon, fontsize =3D 10 ] { "9.ether" [ label =3D "ether" ]; }; { edge [ weight =3D 2.0, style =3D bold ]; "9" -- "9.ether"; }; "9.ether" -- "5.link2"; }; I rendered your output by saving it in a file ("joe.dot") and then running: dot -Tsvg -o joe.svg < joe.dot I then uploaded "joe.svg" to my website: http://druidbsd.sf.net/download/joe.svg Compare your output to any of the following: http://druidbsd.sf.net/download/warden0.jbsd.svg http://druidbsd.sourceforge.net/download/folsom.svg It looks like everything is connected properly. A couple thoughts off the top of my head: a. Did you enable promiscuous mode on rl0 via ngctl? (in your script perhap= s?) b. Have you tried giving ngeth0 a new MAC address? (I do this through ngctl= too, but I imagine ifconfig from within the jail could achieve the same th= ing) -- Devin _____________ The information contained in this message is proprietary and/or confidentia= l. If you are not the intended recipient, please: (i) delete the message an= d all copies; (ii) do not disclose, distribute or use the message in any ma= nner; and (iii) notify the sender immediately. In addition, please be aware= that any message addressed to our domain is subject to archiving and revie= w by persons other than the intended recipient. Thank you.