From owner-freebsd-net@FreeBSD.ORG Fri Mar 20 20:41:59 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 79E601065674 for ; Fri, 20 Mar 2009 20:41:59 +0000 (UTC) (envelope-from julian@elischer.org) Received: from outR.internet-mail-service.net (outr.internet-mail-service.net [216.240.47.241]) by mx1.freebsd.org (Postfix) with ESMTP id 615CC8FC17 for ; Fri, 20 Mar 2009 20:41:59 +0000 (UTC) (envelope-from julian@elischer.org) Received: from idiom.com (mx0.idiom.com [216.240.32.160]) by out.internet-mail-service.net (Postfix) with ESMTP id D7C571310ED; Fri, 20 Mar 2009 13:41:58 -0700 (PDT) X-Client-Authorized: MaGic Cook1e X-Client-Authorized: MaGic Cook1e X-Client-Authorized: MaGic Cook1e Received: from julian-mac.elischer.org (home.elischer.org [216.240.48.38]) by idiom.com (Postfix) with ESMTP id A79522D600E; Fri, 20 Mar 2009 13:41:56 -0700 (PDT) Message-ID: <49C3FFA2.5090501@elischer.org> Date: Fri, 20 Mar 2009 13:42:10 -0700 From: Julian Elischer User-Agent: Thunderbird 2.0.0.19 (Macintosh/20081209) MIME-Version: 1.0 To: Stefan Bethke References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-net@freebsd.org, Andrew Thompson Subject: Re: if_bridge and .1q VLANs X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Mar 2009 20:41:59 -0000 Stefan Bethke wrote: > Hi there, > > it appears if_bridge bridges tagged frames alongside non-tagged frames. > Is there a way to either stop if_bridge from doing so, or otherwise > filtering out the tagged frames? > > My trunk currently has one untagged network and two tagged VLANs on it > (the untagged one being the main LAN), and I'm bridging the LAN to > another site via OpenVPN. But I'd rather not bridge the other two > VLANs, if at all possible. > > I can switch the untagged VLAN to tagged on the switch, if that turns > out to be the easiest option, and bridge between tap and another vlan > interface. I don't know how much this helps but you may be able to plumb something up using the netgraph vlan and bridge nodes. I have not used the vlan nodes so I do not talk from experience.. > > > Thanks, > Stefan >