Date: Tue, 20 Dec 2011 22:49:29 -0800 From: Juli Mallett <jmallett@FreeBSD.org> To: saeedeh motlagh <saeedeh.motlagh@gmail.com> Cc: freebsd-net@freebsd.org, Alexander Lunev <sol289@gmail.com>, Nikos Vassiliadis <nvass@gmx.com>, Alireza Torabi <alireza.torabi@gmail.com> Subject: Re: vlan without ip address Message-ID: <CACVs6=9Lkd33dX%2Bo68g0TZfM6RXqOz_9iyLh1KLLTuwP67pgKg@mail.gmail.com> In-Reply-To: <CAN%2BS=WCiubYnOy7rm6PmQNs=jrxKrJ1Emg2W1mJRfq5K1Z=Phw@mail.gmail.com> References: <CAN%2BS=WDLmHuP=V616rtO7mnuzEgOt5GuYMZ4SsxgCWYdUF007g@mail.gmail.com> <CACVs6=-N5%2BL-8Q00sC_hgo=DBYudHT0a%2BQCykAzbiesOyNZZAw@mail.gmail.com> <CAN%2BS=WDd%2BRzhYcMYQCysxuMX5wM5iazw-fBY-W3RPppc3QhRYQ@mail.gmail.com> <CALoU1UMsjMLaXivejT3%2BCmd7XyvkMtmuy6H75PJASuyYjqXDwg@mail.gmail.com> <CAN%2BS=WDXBgfevY5U8LEY3iyssOt385Jps-7D0ijHPU9RZ2VbWQ@mail.gmail.com> <CABk4_A4YG=H9=v4s9u%2BgXtQUqnmmRQVvCcryFJ%2BaL6bNou-7fg@mail.gmail.com> <CAN%2BS=WBenp6k9=qQjvdrPDqjdT3z%2BS2t5o9xyzVteDS28gBnpg@mail.gmail.com> <CABk4_A7UtDcv1HKYkE%2BQcCR5X9cYHjG8-oNcYt7ZPZ-s7PMFyw@mail.gmail.com> <4EF038B9.5050203@gmx.com> <CAN%2BS=WCiubYnOy7rm6PmQNs=jrxKrJ1Emg2W1mJRfq5K1Z=Phw@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Dec 20, 2011 at 22:38, saeedeh motlagh <saeedeh.motlagh@gmail.com> wrote: > thankyou every body for your attention. yes bridging is done without ip > address. i try to use all the point which is mentioned here but my proble= m > is not solved yet. > you know i have three freebsd box. i wanna to config the intermediate one > as switch and two others as vlan member. i want to have just one vlan and > configure this vlan just on the switch (as a cisco switch) and two other > systems which are the member of this vlan, can ping each other. is it > possible? how? > > the most important point for me is that i don't want to do any vlan > configuration on the vlan members. i want just configure switch system to > do it. in a real switch, we just define a vlan on the ports without any > configuration on the systems which are connected to these ports. i exactl= y > want to do this by a freebsd system as a switch. please tell me if it is > possible or not. > thank you so much You are confusing two semi-unrelated things. FreeBSD vlan interfaces are only for tagged vlans, they are not necessary to construct a virtual network between ports. If you create a bridge between physical interfaces then vlans are not needed, and are harmful if your ports are not tagged. Switch configuration often uses a confused sense of the term VLAN which is complicating the ability of others to understand you, I believe. > On Tue, Dec 20, 2011 at 10:56 AM, Nikos Vassiliadis <nvass@gmx.com> wrote= : > >> There are reports that hw assisted VLANs caused problems >> in bridging senarios. Users have reported that -vlanhwtag >> and/or promisc on the physical interface helped. Using >> -vlanhwtag helped in a case of mine. >> >> >> On 12/20/2011 8:13 AM, Alexander Lunev wrote: >> >>> i made a little lab, all on 8.2-R: >>> >>> freebsd1-le0.10 (192.168.2.1)<=3D=3D=3D=3D=3D> =C2=A0bridge0( le0.10 - = freebsd2 - >>> le1.10 )<=3D=3D=3D=3D=3D> =C2=A0 le0.10(192.168.2.1) - freebsd3 >>> >>> freebsd2 is a "switch" it has no ip addresses assigned to interfaces >>> (except localhost of course), "switch" is made by bridge0 interface >>> which contain vlan interfaces le0.10 and le1.10. Ethernet segments >>> freebsd1-freebsd2 and freebsd2-freebsd3 are different and not visible >>> to each other. >>> In this scheme i can ping 192.168.2.2 from 192.168.2.1 just fine, so >>> if your question was "will bridge work without ip addresses", then >>> answer is "yes". >>> >>> -- >>> your sweet isn't ready yet >>> >>> >>> >>> On Mon, Dec 19, 2011 at 8:52 AM, saeedeh motlagh >>> <saeedeh.motlagh@gmail.com> =C2=A0wrote: >>> >>>> you're right but we can't assign tow parent interface to one vlan in >>>> freebsd >>>> therefore i define two vlans with the one vlan id. >>>> although we can do it by blow command but it's not work too: >>>> ifconfig gbeth0.10 create >>>> ifconfig msk0.10 create >>>> ifconfig >>>> gbeth0.10: flags=3D8842<BROADCAST,RUNNING,**SIMPLEX,MULTICAST> =C2=A0m= etric 0 >>>> mtu 1500 >>>> >>>> =C2=A0 =C2=A0 options=3D3<RXCSUM,TXCSUM> >>>> =C2=A0 =C2=A0 ether 00:27:0e:03:4b:2f >>>> =C2=A0 =C2=A0 media: Ethernet autoselect (1000baseT<full-duplex>) >>>> =C2=A0 =C2=A0 status: active >>>> =C2=A0 =C2=A0 vlan: 10 parent interface: gbeth0 >>>> msk0.10: flags=3D8842<BROADCAST,RUNNING,**SIMPLEX,MULTICAST> =C2=A0met= ric 0 >>>> mtu 1500 >>>> >>>> =C2=A0 =C2=A0 options=3D100<TSO4> >>>> =C2=A0 =C2=A0 ether 00:30:4f:63:5a:bc >>>> =C2=A0 =C2=A0 media: Ethernet autoselect (none) >>>> =C2=A0 =C2=A0 status: active >>>> =C2=A0 =C2=A0 vlan: 10 parent interface: msk0 >>>> >>>> you know when i define vlans with ip addressess they work as i expecte= d >>>> but >>>> i want to know if i can define vlan without ip address as the switch >>>> beacuse >>>> i wanna configure a freebsd box as a real switch in my network. maybe >>>> it's >>>> impossible to do that :( >>>> >>>> >>>> On Sun, Dec 18, 2011 at 10:52 PM, Alexander Lunev<sol289@gmail.com> >>>> =C2=A0wrote: >>>> >>>>> >>>>> first of all, you should name and number you vlan same, if it's clan1= 0 >>>>> on the one side, then it's vlan10 on the other side and in betweeen. >>>>> then (though you have to do it first of all), you should understand >>>>> how vlan's work, and after that connect ports to each other according >>>>> to your scheme. >>>>> >>>>> >>>>> -- >>>>> your sweet isn't ready yet >>>>> >>>>> >>>>> >>>>> On Sun, Dec 18, 2011 at 10:01 AM, saeedeh motlagh >>>>> <saeedeh.motlagh@gmail.com> =C2=A0wrote: >>>>> >>>>>> i have 3 freebsd system: 0.28 , 0.25 and 0.12 which 28 is assumed to= be >>>>>> switch here. one interface of 28 is connected to 25 and the other >>>>>> interface >>>>>> of 28 is connected to 12. as mentioned below, i've defined two vlan1= 0 >>>>>> and >>>>>> 11 with the same vlan id on the 28 and bridge them. >>>>>> now i can't ping 0.25 from 0.12. what's wrong here? should i define >>>>>> vlan10 >>>>>> on 12 and 25? >>>>>> please tell me if i'm misunderstanding. >>>>>> this is the ifconfig for 0.28: >>>>>> vlan10: flags=3D8943<UP,BROADCAST,**RUNNING,PROMISC,SIMPLEX,**MULTIC= AST> >>>>>> metric 0 >>>>>> mtu 1500 >>>>>> =C2=A0 =C2=A0options=3D3<RXCSUM,TXCSUM> >>>>>> =C2=A0 =C2=A0ether 00:27:0e:03:4b:2f >>>>>> =C2=A0 =C2=A0media: Ethernet autoselect (1000baseT<full-duplex>) >>>>>> =C2=A0 =C2=A0status: active >>>>>> =C2=A0 =C2=A0vlan: 10 parent interface: gbeth0 >>>>>> vlan11: flags=3D8943<UP,BROADCAST,**RUNNING,PROMISC,SIMPLEX,**MULTIC= AST> >>>>>> metric 0 >>>>>> mtu 1500 >>>>>> =C2=A0 =C2=A0options=3D100<TSO4> >>>>>> =C2=A0 =C2=A0ether 00:30:4f:63:5a:bc >>>>>> =C2=A0 =C2=A0media: Ethernet autoselect (none) >>>>>> =C2=A0 =C2=A0status: active >>>>>> =C2=A0 =C2=A0vlan: 10 parent interface: msk0 >>>>>> bridge0: flags=3D8843<UP,BROADCAST,**RUNNING,SIMPLEX,MULTICAST> =C2= =A0metric >>>>>> 0 mtu >>>>>> 1500 >>>>>> =C2=A0 =C2=A0ether d6:c4:f6:0f:5e:4f >>>>>> =C2=A0 =C2=A0id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddela= y 15 >>>>>> =C2=A0 =C2=A0maxage 20 holdcnt 6 proto rstp maxaddr 100 timeout 1200 >>>>>> =C2=A0 =C2=A0root id 00:00:00:00:00:00 priority 32768 ifcost 0 port = 0 >>>>>> =C2=A0 =C2=A0member: vlan11 flags=3D143<LEARNING,DISCOVER,**AUTOEDGE= ,AUTOPTP> >>>>>> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0ifmaxaddr 0 port 6 priority= 128 path cost 55 >>>>>> =C2=A0 =C2=A0member: vlan10 flags=3D143<LEARNING,DISCOVER,**AUTOEDGE= ,AUTOPTP> >>>>>> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0ifmaxaddr 0 port 5 priority= 128 path cost 20000 >>>>>> >>>>>> >>>>>> On Sat, Dec 17, 2011 at 8:47 PM, Alireza Torabi >>>>>> <alireza.torabi@gmail.com>**wrote: >>>>>> >>>>>> =C2=A0=D9=8EAlso it's a good idea to to attach a ifconfig output. >>>>>>> >>>>>>> On 12/17/11, saeedeh motlagh<saeedeh.motlagh@gmail.**com<saeedeh.mo= tlagh@gmail.com>> >>>>>>> =C2=A0wrote: >>>>>>> >>>>>>>> when i do that, the vlan is defined but from a system in a vlan, i >>>>>>>> can't >>>>>>>> ping the other one which is in the same vlan. so i think that the >>>>>>>> vlan is >>>>>>>> not working. am i right? >>>>>>>> >>>>>>>> On Sat, Dec 17, 2011 at 1:15 PM, Juli Mallett<jmallett@freebsd.org= > >>>>>>>> >>>>>>> wrote: >>>>>>> >>>>>>>> >>>>>>>> =C2=A0You probably just need to do ifconfig vlanxxx up instead of >>>>>>>>> assigning an >>>>>>>>> IP. >>>>>>>>> >>>>>>>>> On Sat, Dec 17, 2011 at 00:08, saeedeh motlagh >>>>>>>>> <saeedeh.motlagh@gmail.com> =C2=A0wrote: >>>>>>>>> >>>>>>>>>> hi every body >>>>>>>>>> >>>>>>>>>> i wanna configure a freebsd box as a switch. in order to do that= , >>>>>>>>>> i >>>>>>>>>> >>>>>>>>> bridged >>>>>>>>> >>>>>>>>>> all my interfaces to have switching and it works fine. after tha= t >>>>>>>>>> i >>>>>>>>>> >>>>>>>>> want >>>>>>> >>>>>>>> to >>>>>>>>> >>>>>>>>>> have vlans on it. as you know, in a real switch, a vlan is >>>>>>>>>> configured >>>>>>>>>> >>>>>>>>> just >>>>>>>>> >>>>>>>>>> by assigning a port to it without any additional configuration a= nd >>>>>>>>>> >>>>>>>>> vlans >>>>>>> >>>>>>>> =C2=A0are submitted just by name. but in freebsd a vlan just works= when >>>>>>>>>> it >>>>>>>>>> >>>>>>>>> has >>>>>>> >>>>>>>> an >>>>>>>>> >>>>>>>>>> ip address (i think). when i define vlan121 on two freebsd syste= ms >>>>>>>>>> >>>>>>>>> with >>>>>>> >>>>>>>> ip >>>>>>>>> >>>>>>>>>> address it works fine but without ip address i don't know how it >>>>>>>>>> >>>>>>>>> should >>>>>>> >>>>>>>> be >>>>>>>>> >>>>>>>>>> worked. >>>>>>>>>> >>>>>>>>>> can sombody tell me if it is possible to simulate vlans in freeb= sd >>>>>>>>>> as >>>>>>>>>> >>>>>>>>> they >>>>>>>>> >>>>>>>>>> are in a real switch? i mean can we have vlans without ip >>>>>>>>>> addresses >>>>>>>>>> which >>>>>>>>>> works fine? maybe some kind of vlan which works by MAc address. = is >>>>>>>>>> it >>>>>>>>>> possible? >>>>>>>>>> it's so necessary for me to do that:( >>>>>>>>>> >>>>>>>>>> yours, >>>>>>>>>> motlagh >>>>>>>>>> ______________________________**_________________ >>>>>>>>>> freebsd-net@freebsd.org mailing list >>>>>>>>>> http://lists.freebsd.org/**mailman/listinfo/freebsd-net<http://l= ists.freebsd.org/mailman/listinfo/freebsd-net> >>>>>>>>>> To unsubscribe, send any mail to >>>>>>>>>> "freebsd-net-unsubscribe@**freebsd.org<freebsd-net-unsubscribe@f= reebsd.org> >>>>>>>>>> >>>>>>>>> " >>>>>>> >>>>>>>> >>>>>>>>> =C2=A0______________________________**_________________ >>>>>>>> freebsd-net@freebsd.org mailing list >>>>>>>> http://lists.freebsd.org/**mailman/listinfo/freebsd-net<http://lis= ts.freebsd.org/mailman/listinfo/freebsd-net> >>>>>>>> To unsubscribe, send any mail to >>>>>>>> "freebsd-net-unsubscribe@**freebsd.org<freebsd-net-unsubscribe@fre= ebsd.org> >>>>>>>> " >>>>>>>> >>>>>>>> >>>>>>> =C2=A0______________________________**_________________ >>>>>> freebsd-net@freebsd.org mailing list >>>>>> http://lists.freebsd.org/**mailman/listinfo/freebsd-net<http://lists= .freebsd.org/mailman/listinfo/freebsd-net> >>>>>> To unsubscribe, send any mail to "freebsd-net-unsubscribe@** >>>>>> freebsd.org <freebsd-net-unsubscribe@freebsd.org>" >>>>>> >>>>> >>>> >>>> =C2=A0______________________________**_________________ >>> freebsd-net@freebsd.org mailing list >>> http://lists.freebsd.org/**mailman/listinfo/freebsd-net<http://lists.fr= eebsd.org/mailman/listinfo/freebsd-net> >>> To unsubscribe, send any mail to "freebsd-net-unsubscribe@**freebsd.org= <freebsd-net-unsubscribe@freebsd.org> >>> " >>> >> >> > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CACVs6=9Lkd33dX%2Bo68g0TZfM6RXqOz_9iyLh1KLLTuwP67pgKg>