From owner-freebsd-net@FreeBSD.ORG Tue Apr 26 08:19:42 2005 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id ADC2116A4CE for ; Tue, 26 Apr 2005 08:19:42 +0000 (GMT) Received: from 62-15-211-171.inversas.jazztel.es (62-15-211-171.inversas.jazztel.es [62.15.211.171]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7819D43D2D for ; Tue, 26 Apr 2005 08:19:41 +0000 (GMT) (envelope-from josemi@freebsd.jazztel.es) Received: from redesjm.local (orion.redesjm.local [192.168.254.16]) j3Q8JeW2087086; Tue, 26 Apr 2005 10:19:40 +0200 (CEST) (envelope-from josemi@redesjm.local) Received: from localhost (localhost [[UNIX: localhost]]) by redesjm.local (8.13.3/8.13.3/Submit) id j3Q8JdNY025257; Tue, 26 Apr 2005 10:19:39 +0200 (CEST) (envelope-from josemi@redesjm.local) From: Jose M Rodriguez To: freebsd-net@freebsd.org Date: Tue, 26 Apr 2005 10:19:38 +0200 User-Agent: KMail/1.8 References: In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-2" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Message-Id: <200504261019.39275.josemi@redesjm.local> X-AntiVirus: checked by AntiVir Milter (version: 1.1.0-3; AVE: 6.30.0.7; VDF: 6.30.0.116; host: antares.redesjm.local) cc: Csaba Urban Subject: Re: VLAN Bridge with layer2 filtering X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Apr 2005 08:19:42 -0000 El Martes, 26 de Abril de 2005 09:56, Csaba Urban escribi=F3: > Hi, > > I have a number of users on a VLAN enabled switch - each users on his > own VLAN. They have fixed IP address sharing the same IP subnet and > gateway. > I want to grant them access to the internet throug a FreeBSD box > which prevents them from communicating with each other in Layer2 > and which also prevents them to use other user's IP or MAC. I don't > want to use static ARP so it seems that best solution is a VLAN > enabled filtering bridge - in each VLAN only one certain IP address > is allowed. > A litle OT. Can this setup be achieve using pppoe over the VLANS? I=20 don't have any experience using pppoe over vlans. =2D- josemi