From owner-freebsd-net@FreeBSD.ORG Fri May 2 18:34:29 2014 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id CAC90A4C for ; Fri, 2 May 2014 18:34:29 +0000 (UTC) Received: from h2.funkthat.com (gate2.funkthat.com [208.87.223.18]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "funkthat.com", Issuer "funkthat.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 8E5ED1BBA for ; Fri, 2 May 2014 18:34:29 +0000 (UTC) Received: from h2.funkthat.com (localhost [127.0.0.1]) by h2.funkthat.com (8.14.3/8.14.3) with ESMTP id s42IYNCo091164 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 2 May 2014 11:34:23 -0700 (PDT) (envelope-from jmg@h2.funkthat.com) Received: (from jmg@localhost) by h2.funkthat.com (8.14.3/8.14.3/Submit) id s42IYNZA091163; Fri, 2 May 2014 11:34:23 -0700 (PDT) (envelope-from jmg) Date: Fri, 2 May 2014 11:34:23 -0700 From: John-Mark Gurney To: =?iso-8859-1?Q?=D6zkan?= KIRIK Subject: Re: VLAN switching on freebsd Message-ID: <20140502183422.GS43976@funkthat.com> Mail-Followup-To: =?iso-8859-1?Q?=D6zkan?= KIRIK , "freebsd-net@freebsd.org" References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.2.3i X-Operating-System: FreeBSD 7.2-RELEASE i386 X-PGP-Fingerprint: 54BA 873B 6515 3F10 9E88 9322 9CB1 8F74 6D3F A396 X-Files: The truth is out there X-URL: http://resnet.uoregon.edu/~gurney_j/ X-Resume: http://resnet.uoregon.edu/~gurney_j/resume.html X-TipJar: bitcoin:13Qmb6AeTgQecazTWph4XasEsP7nGRbAPE X-to-the-FBI-CIA-and-NSA: HI! HOW YA DOIN? can i haz chizburger? X-Greylist: Sender passed SPF test, not delayed by milter-greylist-4.2.2 (h2.funkthat.com [127.0.0.1]); Fri, 02 May 2014 11:34:23 -0700 (PDT) Cc: "freebsd-net@freebsd.org" X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 May 2014 18:34:29 -0000 zkan KIRIK wrote this message on Fri, May 02, 2014 at 21:04 +0300: > i need to create a virtual interface that forwards only defined vlan tags. > Lets talk on a sample scenario : > > Assume that VLAN 10, 20, 30, 40 tagged on switch connected to em0 interface. > > create ngeth0 and ngeth1. ( i dont need netgraph interface, it can be a any > virtual interface tap .. etc. ) > i want to see only VLAN 10, 20 tagged on ngeth0 > and VLAN 10, 30, 40 tagged on ngeth1 > > I tried many ways but no success. > > Can you suggest a way to do this? I'm not familar w/ netgraph, but it looks like you might be able to do something simlar w/ ng_vlan and ng_bridge? Though bridge could be replaced w/ one2many, or hub depending upon requirements... Also, is this purely for snooping traffic? or do you want to be able to pass traffic both ways? em0 | ng_vlan / / \ \ 10 20 30 40 | | | | | ng_bridge | | \ / \ | | ng_vlan ng_vlan | | ngeth0 ngeth1 Not sure if this is exactly what you want, but I think it would... Though I don't know if you tried this, since you didn't describe anything you tried... -- John-Mark Gurney Voice: +1 415 225 5579 "All that I will do, has been done, All that I have, has not."