[HOWTO] VLANs in a Snap with Gentoo

gtsquirrel · Posted: Sat Nov 13, 2004 5:48 am Post subject:

I know that at least iptables 1.2.11 supports VLANs. Example:

tecknojunky · Posted: Sat Nov 13, 2004 7:48 am Post subject:

Oh!

I was specifying eth0:0, just like in ifconfig :oops:

. I will have to try that when I get back to the lab on monday.

gtsquirrel · Posted: Sat Nov 13, 2004 8:34 am Post subject:

tecknojunky · Posted: Sun Nov 14, 2004 8:28 am Post subject:

I'm new to this. I'm still using ipfwadm on an old 486 to do all the firewalling/NAT-routing on my home LAN. Here, I wish to finally go to for the higher level

with iptables. So I learn there is iproute2 that use the ip command.... way too much for little me right now. :oops:

I have a cluster to build :wink:

_________________
(7 of 9) Installing star-trek/species-8.4.7.2::talax.

gtsquirrel · Posted: Sun Nov 14, 2004 9:45 am Post subject:

One day, grasshopper ... ;-)

drakkan · Apprentice Joined: 21 Jun 2004 Posts: 232

Hi,

I have some trouble with 3c905B driver and vlan, can you suggests wath chip do you use?

thanks
drakkan

drakkan · Apprentice Joined: 21 Jun 2004 Posts: 232

flickerfly · l33t Joined: 08 Nov 2002 Posts: 677 Location: Lanham, MD

Have you tried adjusting the MTU? I think there are directions in this post somewhere. I know they are on the web around the subject of VLANs and Linux. I think it just requires adding `mtu 1549` to the NIC params.
_________________
An Evil Genious' Guide to Sheeple and How To Avoid Becoming One | 0x4C9EF4A

masterbrian · Guru Joined: 13 Feb 2004 Posts: 461

masterbrian · Guru Joined: 13 Feb 2004 Posts: 461

Good!!! under unstable environment it works!

I hope it isn't too much unstable... what about your experiences?

UberLord · Posted: Mon Dec 20, 2004 10:57 am Post subject:

Aside from a few teething problems, baselayout-1.11.8 is fairly stable - there's still a few gotchas, but patches have been posted to bugzilla if you encounter one.

If not, let us know so we can fix it

flickerfly · l33t Joined: 08 Nov 2002 Posts: 677 Location: Lanham, MD

I've been using the unstable and seen no related issues. I think I've been running for over a month.
_________________
An Evil Genious' Guide to Sheeple and How To Avoid Becoming One | 0x4C9EF4A

addlema · Posted: Fri Jan 14, 2005 4:42 pm Post subject:

So I have the 802.1Q in my kernel as built in.. but i dont have the /proc/net/vlan/ directory?

What did i do wrong? Can someone post what should be in there and Ill create in manually?

root@magnus linux # grep CONFIG_VLAN_8021Q /usr/src/linux/.config
CONFIG_VLAN_8021Q=y
root@magnus linux #

root@magnus net # ls
arp dev_mcast ip_conntrack_expect ip_tables_names mcfilter packet rpc sockstat tcp
arp_tables_names igmp ip_queue ip_tables_targets netlink raw rt_cache softnet_stat udp
dev ip_conntrack ip_tables_matches ipt_recent netstat route snmp stat unix
root@magnus net #

flickerfly · l33t Joined: 08 Nov 2002 Posts: 677 Location: Lanham, MD

Did you...

tekn0mage · n00b Joined: 10 Sep 2003 Posts: 47

I have read this document thoroughly, and can get VLAN's going while using 'vconfig' manually. Then setting each if_vid manually with ifconfig works beautifully.

When I try to launch it with the /etc/init.d/net.eth1 script, the only interface that appears is eth1 (with no ip address assigned).

Here is a copy of my conf.d/net file:

flickerfly · l33t Joined: 08 Nov 2002 Posts: 677 Location: Lanham, MD

here's my current working config. The only thing I notice is the ( and ) surrounding the quotes for the value of the various vlan variables. Maybe that will help?

SavageMindz · Posted: Mon Jan 31, 2005 5:30 am Post subject:

Hi right i think this is basically working now. Thanks for the howto.

Just one thing though. I seem to have trunking going but not in vlan 1. I did a search and because vlan 1 from cisco does not include the header it doesnt seem to work. All the other vlans work as expected though.

Does anyone know a workaround for this (other than just moving all the ports to a different vlan which is what I have done).

Cheers

Savage

flickerfly · l33t Joined: 08 Nov 2002 Posts: 677 Location: Lanham, MD

VLAN 1 is supposed to be different. Most people seem to say, just doen't use 1 for anything. Problem is that VLAN 1 is apperently the native VLAN and older equipment doesn't allow you to change that. I'd like a workaround also as using VLANs has lost me the ability to manage my switches remotely.

This is due to the fact that VLAN 1 is not used on any network as that is generally considered as security best practice.
_________________
An Evil Genious' Guide to Sheeple and How To Avoid Becoming One | 0x4C9EF4A

gargola · n00b Joined: 18 Feb 2004 Posts: 13

You need the following before moving on with this POST:
vlan and bridging support compiled in kernel or loaded as modules &
emerge vconfig && emerge bridge-utils

Since I do use all of the above (title), and I could not find a place where it was better explained I wrote the following post just to explain how I figured it out.

I need the following:
1. Establish the VLAN (eth0.1 and eth0.50)
2 Establish a bridge between a NIC an a VLAN interface (br0 = eth0.1 and eth1)
3. Give this bridge a Static IP br0 = ???.???.???.??? and IPv6
I also have another VLAN which is configured with dhcpcd (eth0.50)

/etc/conf.d/net

dcmwai · n00b Joined: 26 Mar 2005 Posts: 11 Location: Malaysia

ok Until now the way to make it work is like

** ifconfig_eth1_vlans="1 2 3" **
is the line that causing all my problem.

drakkan · Apprentice Joined: 21 Jun 2004 Posts: 232

This is the setup for baselayout-1.11.12-r4, now stable

in my setup I have configured vlans on eth1

/etc/con.d/net:

flickerfly · l33t Joined: 08 Nov 2002 Posts: 677 Location: Lanham, MD

Why link eth1 to lo? What advantage does that give? Maybe stability if eth0 goes down?
_________________
An Evil Genious' Guide to Sheeple and How To Avoid Becoming One | 0x4C9EF4A

drakkan · Apprentice Joined: 21 Jun 2004 Posts: 232

flickerfly · l33t Joined: 08 Nov 2002 Posts: 677 Location: Lanham, MD

Oh, thanks for the code showing the answer. :-)

_________________
An Evil Genious' Guide to Sheeple and How To Avoid Becoming One | 0x4C9EF4A