From owner-freebsd-questions@FreeBSD.ORG Sat Jul 24 10:32:11 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9410416A4CE for ; Sat, 24 Jul 2004 10:32:11 +0000 (GMT) Received: from mproxy.gmail.com (rproxy.gmail.com [64.233.170.202]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3DACD43D2F for ; Sat, 24 Jul 2004 10:32:11 +0000 (GMT) (envelope-from emilholt@gmail.com) Received: by mproxy.gmail.com with SMTP id m69so34257rne for ; Sat, 24 Jul 2004 03:32:10 -0700 (PDT) Received: by 10.38.163.44 with SMTP id l44mr68529rne; Sat, 24 Jul 2004 03:32:10 -0700 (PDT) Message-ID: Date: Sat, 24 Jul 2004 12:32:10 +0200 From: emil To: freebsd-questions@freebsd.org In-Reply-To: Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit References: Subject: Fwd: 801.Q VLAN questions (potential bug?) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 24 Jul 2004 10:32:11 -0000 I don't know if this is more of a -hackers question or not, but I've come across something weird when trying to resolve the problem stated below; There's actually one single frame being sent across the network with a valid dot1q vlan tag, and that is being transmitted when a client signs on to the WLAN. Then all following traffic shows up as without any vlan tags. Is this a bug with IOS/FreeBSD 5.2.1 or just some other weirdness? regards /emil ---------- Forwarded message ---------- From: emil Date: Fri, 23 Jul 2004 13:47:39 +0200 Subject: 801.Q VLAN questions To: freebsd-questions@freebsd.org Hello, I'm currently in the middle of setting up a couple of Cisco Aironet 1100 802.11b/g access points. I've configured the APs so that they tag ethernet frames depending on what SSID is being used by the WLAN users. (One public and one private SSID). Behind the APs I've set up a FreeBSD 5.2.1p9 box with pf (/usr/ports/security/pf) installed. The FBSD machine currently has 3 intel (fxp) ethernet interfaces: fxp0, management interface. fxp1 interface connected to a small dumb switch which the APs are hooked up to, currently no IP adress configured. fxp2 interface connected to the "net", currently no IP adress configured. Then I also have 2 vlan interfaces with the respective VLAN ID's set, they use fxp1 as their parent interface. What I want to do is to bridge fxp1 and fxp2 and then have pf filter the traffic on the vlans. However, the FBSD machine seems to completely ignore the 802.1Q tags, and not separate the traffic coming to fxp1. So does the hive mind have any ideas of what to do? TIA