From owner-freebsd-isp@FreeBSD.ORG  Fri Apr 22 12:20:44 2005
Return-Path: <owner-freebsd-isp@FreeBSD.ORG>
Delivered-To: freebsd-isp@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 4B59316A4CE
	for <freebsd-isp@freebsd.org>; Fri, 22 Apr 2005 12:20:44 +0000 (GMT)
Received: from fmx1.freemail.hu (fmx1.freemail.hu [195.228.242.221])
	by mx1.FreeBSD.org (Postfix) with SMTP id 221D643D5C
	for <freebsd-isp@freebsd.org>; Fri, 22 Apr 2005 12:20:41 +0000 (GMT)
	(envelope-from ucsaba@freemail.hu)
Received: (qmail 29886 invoked from network); 22 Apr 2005 14:20:37 +0200
Received: from fm4.freemail.hu (195.228.242.204)
  by fmx1.freemail.hu with SMTP; 22 Apr 2005 14:20:32 +0200
Received: (qmail 32600 invoked by uid 227048); 22 Apr 2005 14:20:23 +0200
Date: Fri, 22 Apr 2005 14:20:23 +0200 (CEST)
From: =?ISO-8859-2?Q?Urb=E1n_Csaba?= <ucsaba@freemail.hu>
To: freebsd-isp@freebsd.org
Message-ID: <freemail.20050322142023.32596@fm4.freemail.hu>
X-Originating-IP: [85.159.48.68]
X-HTTP-User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; CHARSET=ISO-8859-2
Subject: IP unnumbered VLANs
X-BeenThere: freebsd-isp@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Internet Services Providers <freebsd-isp.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-isp>
List-Post: <mailto:freebsd-isp@freebsd.org>
List-Help: <mailto:freebsd-isp-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Apr 2005 12:20:44 -0000

Hi,

I have a situation as follows:

       +--------+ dot1q +---------+
 -----| router |---------| VLAN    |vlan4
eth0| box A  |eth1    | switch  |-------------+
       +--------+           +---------+                 |
                                vlan2  | vlan3            |
                                     |    |                      |
                             +----+    |                      |
                             |            |                      |
                             |            |                      |       
                      +--------+   +--------+  +--------+ 
                       | client |    | client  |   | client |  
                       | box B |   | box C  |   | box D| 
                      +--------+   +--------+  +--------+ 


1. Users (client B, C, D) sould be on the same IP subnet but in different 
VLANs (let's say IP(B): 192.168.0.2, IP(C):192.168.0.3, IP
(D):192.168.0.4. Default GW (box A) is 192.168.0.1 for all.

2. Users should not be able to communicate with each other in Layer2

3. They should be able to use only those IP addresses that I assigned 
to them - but they can change their MACs so startic ARP won't work 
here

Did anybody try something like this - with success, of course :)

Thanks,

Csaba