Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 4 Jul 2020 11:59:47 -0700
From:      =?utf-8?Q?Ask_Bj=C3=B8rn_Hansen?= <ask@develooper.com>
To:        "net@freebsd.org" <net@FreeBSD.org>
Subject:   Bridge interface on VLAN not working
Message-ID:  <0C059F66-B37D-4F9C-9B04-E7D8E2F5EDE3@develooper.com>

next in thread | raw e-mail | index | archive | help
Hi everyone,

I had this working for months until a reboot either got things started =
up in a different order or cleared what I setup by hand (it=E2=80=99s a =
snowflake test/development system at home) and did whatever I=E2=80=99d =
actually configured.

I have a single trunk=E2=80=99ed (em) interface to the switch. The main =
network is untagged, and I have various tagged networks as well.  I was =
using the tagged networks in bhyve virtual machines.

(Some?) traffic doesn=E2=80=99t pass from the bridged tap interfaces (or =
from the bridge itself) to the vlan interface (em0.8 for example).  =
tcpdump shows lots of packets coming from the =E2=80=9Coutside=E2=80=9D =
and in, but for example if I do a ping from one of the tap interfaces =
then nothing shows up on the bridge interface (looking with tcpdump).

Another symptom is that if I move the =E2=80=9Chost IP=E2=80=9D from the =
em0.8 interface to the bridge interface that=E2=80=99s including em0.8 =
then I can no longer communicate with that IP from the rest of the =
network.

In the output below I can ping 192.168.53.42  from another system on =
VLAN 53 (outside this box) and I can ping 192.168.53.42  from another =
system on the bridge, but I can=E2=80=99t ping between the system =
outside this box and the VM on the bridge.

I=E2=80=99ve disabled pf everywhere.

As I mentioned, some traffic crosses but it seems like arp requests gets =
blocked somewhere?

I don=E2=80=99t think it=E2=80=99s the switch, because as long as I =
don=E2=80=99t use the bridge everything works fine. :-/

Any suggestions?  (or other debug output that=E2=80=99d be useful).


Ask



root@helgi:~ # ifconfig em0
em0: flags=3D8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric =
0 mtu 1500
	=
options=3D812099<RXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC,VLAN=
_HWFILTER>
	ether c0:3f:d5:6d:77:87
	inet 192.168.4.42 netmask 0xfffffc00 broadcast 192.168.7.255
	inet6 fe80::c23f:d5ff:fe6d:7787%em0 prefixlen 64 scopeid 0x1
	inet6 2601:647:4400:2f50:c23f:d5ff:fe6d:7787 prefixlen 64 =
autoconf
	media: Ethernet autoselect (1000baseT <full-duplex>)
	status: active
	nd6 options=3D23<PERFORMNUD,ACCEPT_RTADV,AUTO_LINKLOCAL>
root@helgi:~ # ifconfig em0.53
em0.53: flags=3D8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> =
metric 0 mtu 1500
	options=3D1<RXCSUM>
	ether c0:3f:d5:6d:77:87
	inet 192.168.53.42 netmask 0xffffff00 broadcast 192.168.53.255
	inet6 fe80::c23f:d5ff:fe6d:7787%em0.53 prefixlen 64 scopeid 0x4
	groups: vlan
	vlan: 53 vlanpcp: 0 parent interface: em0
	media: Ethernet autoselect (1000baseT <full-duplex>)
	status: active
	nd6 options=3D23<PERFORMNUD,ACCEPT_RTADV,AUTO_LINKLOCAL>
root@helgi:~ # ifconfig vm-dns
vm-dns: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 =
mtu 1500
	ether 66:28:db:a7:63:1b
	id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15
	maxage 20 holdcnt 6 proto rstp maxaddr 2000 timeout 1200
	root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0
	member: tap2 flags=3D143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
	        ifmaxaddr 0 port 10 priority 128 path cost 2000000
	member: em0.53 flags=3D143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
	        ifmaxaddr 0 port 4 priority 128 path cost 55
	groups: bridge vm-switch viid-b3bf6@
	nd6 options=3D1<PERFORMNUD>=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?0C059F66-B37D-4F9C-9B04-E7D8E2F5EDE3>