Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 10 Apr 2020 13:09:00 +0100
From:      Paul Thornton <paul@prt.org>
To:        freebsd-net@freebsd.org
Subject:   Re: Netgraph VLANs on Hyper-V
Message-ID:  <9bef042b-3697-325f-a98b-07f3c6a768f5@prt.org>
In-Reply-To: <CADaJeD2%2BXmTyBdtj9=K29QcdxHgmwJ34KBWFkSh09dNFwP6shA@mail.gmail.com>
References:  <CADaJeD2%2BXmTyBdtj9=K29QcdxHgmwJ34KBWFkSh09dNFwP6shA@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi,

I have recently been testing with jails, vnet and netgraph on ESXi - so 
not Hyper-V - but to make this work I needed to:

ngctl msg vmx0: setpromisc 1
ngctl msg vmx0: setautosrc 0

outside of the jail when setting up netgraph (where vmx0 is the "real" 
NIC that the ng_vlans are part of).

and then I had to set the mac address for the ngeth interface that was 
set to be put into the jail

ifconfig ngeth0 ether 02:00:01:02:03:04

Once done, and the jail started, ngeth0 worked as expected.

In ESXi, the portgroup that vmx0 is connected to allowed spoofing and 
promiscuous mode.

Paul.


On 10/04/2020 08:07, Reshad Patuck wrote:
> Hi,
>
> I am trying to use ng_vlan on Hyper-V to deploy vnet jails.
> The "Enable MAC address Spoofing" setting on the Hyper-V host is enabled.
> However when I try to use ng_vlan I am not able to reach the jail.
> If I change this to if_vlan instead everything works fine.
>
> Is there something that creating a VLAN using ifconfig does that ng_vlan
> does not.
> The same setup works well on VMware ESXi, Xen and KVM.
>
> I am not sure if this is relevant to my issue but the hn1 devices sysrc's
> changes when I use different vlan methods:
>
> no vlan:
> dev.hn.1.rxfilter: 9<DIRECT,BROADCAST>
> dev.hn.1.hwassist: 17<CSUM_IP,CSUM_IP_UDP,CSUM_IP_TCP,CSUM_IP_TSO>
>
> if_vlan:
> dev.hn.1.rxfilter: 20<PROMISC>
> dev.hn.1.hwassist: 17<CSUM_IP,CSUM_IP_UDP,CSUM_IP_TCP,CSUM_IP_TSO>
>
> ng_vlan:
> dev.hn.1.rxfilter: 9<DIRECT,BROADCAST>
> dev.hn.1.hwassist: 0
>
> All the other sysrc's either stay the same or seem to be counters.
> I can provide you with scripts to setup vlans and jails with both if_vlan
> and ng_vlan if that helps.
>
> Any help understanding what these sysrc's do, or on how I could get ng_vlan
> to work would be very appreciated.
>
> Best,
>
> Reshad
> _______________________________________________
> freebsd-net@freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"

-- 
Paul Thornton




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9bef042b-3697-325f-a98b-07f3c6a768f5>