From owner-freebsd-net@freebsd.org Mon Apr 23 16:16:25 2018 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D6984FA5C64 for ; Mon, 23 Apr 2018 16:16:24 +0000 (UTC) (envelope-from johnllyon@gmail.com) Received: from mail-wr0-x230.google.com (mail-wr0-x230.google.com [IPv6:2a00:1450:400c:c0c::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 408D383176; Mon, 23 Apr 2018 16:16:24 +0000 (UTC) (envelope-from johnllyon@gmail.com) Received: by mail-wr0-x230.google.com with SMTP id p18-v6so23704394wrm.1; Mon, 23 Apr 2018 09:16:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=OXTYrdLvv233LycTTDxp4uhjidqOJCwFdCDxJ6AHJhk=; b=T3jd2FV7zFnbOu0sWeaKRA1ohNPnkWgfCTX8gjdEvkePFuUJcPmDS8EOtImU9EWS6g dLr0KcaURQsrNgjyLjbNQ5IbSuNHsbvyzo+0cA33FR2XNp2Y8IxY41zj38Kat+r1BgcT O6zLrTgGmTR+DpxY2n4+HdcTPT3kV/vCURUIVH+Arz7VAaIBjAVBnJw2srEFye5NgRNl 9Za2UVQf5tCSprJhI5D214HOOLfvcbo/s6JJirF8lVEscN4ZmQZj07JQKjseg3AwGJz3 V+K32d2RCSyzI7//y03K8QFzVwgMtB8Yqs9PUhQm/qbFjxd01K++R4pWHfEE8o17ijmi 0AiA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=OXTYrdLvv233LycTTDxp4uhjidqOJCwFdCDxJ6AHJhk=; b=SvlpjlNAlTct0NPVcsUDybCqRhH7t+8rGXPDb44TYW4uGmqFUI5xiNlxVG+RjE+2On mgPNSEkMoR7C/mdiO4Lucw1gCeFbCi3VyVX9ygcEtPkjV0dMWxt/2AgVv+lnpQcLKY1X ZM4SUwsCNlobCVb4tohXAREVEsgHg5eI9n7yAG6a+sfbBnQH7uIKOWhvuLk3hgydUGXe eR42MwtQRY/D2Go581RKK8tTBFWrjlKdT/SRzL7NUURjfpiI3gfKSeVUB9gcWZw+SpOG xFLkur0rbWitZ1E/nBidu8U2gSKMAHvPiKExRN3v/SR9kZG02jzGq3EdVpjl8CSvFkI8 sdgg== X-Gm-Message-State: ALQs6tDIXB0eI6TCbfKbRAEYlCaNgifaBwCOn+ZW8G9Pk9YCNDz8Txpy pLVBqsFN9JzkE1fzqNnYzBNb7LujyxQLrxKypgR+6KML X-Google-Smtp-Source: AIpwx4//zbwGrn5H8ZP9bx0O6HYcRHzdM4Knz8HJPb50sO2yYeO6vVLPvnAlq5Ri0NjPoQXKdfp2v3hVWTq9Zyt29wA= X-Received: by 10.80.145.221 with SMTP id h29mr29165817eda.3.1524500182799; Mon, 23 Apr 2018 09:16:22 -0700 (PDT) MIME-Version: 1.0 Received: by 10.80.206.81 with HTTP; Mon, 23 Apr 2018 09:16:02 -0700 (PDT) In-Reply-To: <1bd8c52f-1e0a-9f29-ccc4-34dd54aad384@freebsd.org> References: <2e0525c8-2251-a5f5-45d1-fe44ebe318f7@freebsd.org> <4fee4ea6-9b35-afba-6d5d-24ecca3e28c6@freebsd.org> <3b8d46da-75e3-79f2-379c-b27a88e80733@freebsd.org> <47C0E33A-E815-4860-A25C-F29BBB8D6787@gmail.com> <1524372774786-0.post@n6.nabble.com> <1bd8c52f-1e0a-9f29-ccc4-34dd54aad384@freebsd.org> From: John Lyon Date: Mon, 23 Apr 2018 12:16:02 -0400 Message-ID: Subject: Re: Need Netgraph Help [fixed] To: Julian Elischer Cc: GPz1100a , freebsd-net@freebsd.org Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.25 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Apr 2018 16:16:25 -0000 That's interesting. Why did you insert ng_vlan "backwards". My though is that you would want to do something like this (because the whole point is you want to remove the VID=0 tag since FreeBSD won't bind to VID=0): ONT]----em0]lower---downstream_vlan0[VLAN]------downstream [eapfilter:]nomatch--------upper[em0... eapout | | | RG]------em1]lower---------------------- -------------------------------------------/ -------------------------------- John L. Lyon PGP Key Available At: https://www.dropbox.com/s/skmedtscs0tgex7/02150BFE.asc On Mon, Apr 23, 2018 at 5:55 AM, Julian Elischer wrote: > On 22/4/18 12:52 pm, GPz1100a wrote: > >> @John >> >> Did you ever get this fully figured out? I'm trying to do what I think is >> the same thing with my fiber internet connection - eliminate the need to >> use >> the isp provided gateway (or at least reduce its function). I'm running >> *opnsense*. This thread >> https://forum.pfsense.org/index.php?topic=111043.msg793292#msg793292 is >> what >> led me here. >> >> Three nics correspond to the following >> >> em0 - ONT (WAN) >> xl0 - 3com pci - isp provided residential gateway (RG) >> ue0 - usb nic - LAN >> >> Using Julian's code from Jan 06, 2018; 1:39pm, >> >> ngctl mkpeer em0: etf lower downstream >> ngctl name em0:lower waneapfilter >> ngctl connect waneapfilter: em0: nomatch upper >> >> ngctl mkpeer xl0: etf lower downstream >> ngctl name xl0:lower laneapfilter >> ngctl connect laneapfilter: xl0: nomatch upper >> >> * ngctl connect waneapfilter laneapfilter eapout eapout* >> >> ngctl msg waneapfilter: 'setfilter { matchhook="eapout" >> ethertype=0x888e }' >> ngctl msg laneapfilter: 'setfilter { matchhook="eapout" >> ethertype=0x888e }' >> >> When I get to the command in bold it comes back with this error: >> >> root@OPNsense:~ # ngctl connect waneapfilter laneapfilter eapout >> eapout >> ngctl: send msg: No such file or directory >> >> I'm not sure how to proceed from here. >> >> Thanks for any help you (or others) can offer. >> >> --J >> >> > I wish I had known the full picture before.. > then I could have added the required bits: > > So think you need this: > > ONT]----em0]lower---downstream[eapfilter:]nomatch----vlan0[ > VLAN]downstream----upper[em0... > eapout > | > | > | > RG]------em1]lower---------------/ > > ie. use an etf node on each interface. > > ngctl mkpeer igb0: etf lower downstream > ngctl name igb0:lower eapfilter > ngctl mkpeer igb0: vlan upper downstream > ngctl name igb0:upper vlanheader > ngctl msg vlanheader: addfilter '{ vlan=0 hook="vlan0" }' > ngctl connect vlanheader: eapfilter: vlan0 nomatch > ngctl connect eapfilter: igb1: eapout lower > ngctl msg waneapfilter: 'setfilter { matchhook="eapout" ethertype=0x888e }' > > note the vlan node is inserted "backwards".. > > > >> >> -- >> Sent from: http://freebsd.1045724.x6.nabble.com/freebsd-net-f4005075.html >> _______________________________________________ >> freebsd-net@freebsd.org mailing list >> https://lists.freebsd.org/mailman/listinfo/freebsd-net >> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" >> >> >