Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 02 Oct 2002 22:22:57 +0500
From:      "Ed Paquette" <ed@gtemail.net>
To:        freebsd-questions@freebsd.org
Subject:   Setting Up VLAN IFaces for IDS
Message-ID:  <20021002172257.27141.qmail@verizonmail.com>

next in thread | raw e-mail | index | archive | help
Greetings.

My goal is to set up three vlan interfaces on a FreeBSD 4.6.2R box for use with an IDS product.

Currently, the switch to which the BSD box is connected is set up properly with tagging enabled for the respective VLANS.

I have a parent interface (fxp1) configured with no IP address.

If I use TCPDUMP on the parent interface to test whether or not the tagged packets are being received I get something like:

 #tcpdump -i fxp1
 00:03:42.758875 802.1Q vlan#10 P0 ...
  <lots and lots of VLAN10 stuff here>

Which to me implies that the packets are arriving at the BSD box appropriately tagged.

So, I configure a vlan with no IP address:

 #ifconfig vlan0 vlan 10 vlandev fxp1 up

And when I do a:

 #tcpdump -i vlan0

All I get are broadcasts... ARPs, ICMP to something.255, etc for VLAN10.  All unicast packets for VLAN10 are dropped.

Am I barking up a wrong tree?  Is it possible to do this?  Ideally, I'd like to have the following:

+------+                  +-------+
| FBSD | vlan0....VLAN#10 |       |
|      +-vlan1----VLAN#11-+ switch|
| IDS  | vlan2....VLAN#12 |       |
+--+---+                  +-+-+-+-+
  |                         | | |
  |                         | | \__VLAN#10
  \__iface with IP          | \____VLAN#11
                            \______VLAN#12

Thanks for any input...
-ed
-- 
_______________________________________________
Talk More, Pay Less with Net2Phone Direct(R), up to 1500 minutes free! 
http://www.net2phone.com/cgi-bin/link.cgi?143 




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021002172257.27141.qmail>