Re: em(4) VLAN + PROMISC still doesn't work with latest CVS version

From: Iasen Kostov (tbyte_at_OTEL.net)
Date: 12/08/04

  • Next message: Iasen Kostov: "Re: em(4) VLAN + PROMISC still doesn't work with latest CVS version"
    Date: Wed, 08 Dec 2004 04:48:12 +0200
    To: Iasen Kostov <tbyte@OTEL.net>
    
    

    Iasen Kostov wrote:

    > Iasen Kostov wrote:
    >
    >> Tony Ackerman wrote:
    >>
    >>> What is the purpose of putting em1 in promiscuous mode below? Is
    >>> the required or did you just notice the issue with this configuration?
    >>>
    >>> There was a change added some months ago in order to allow the
    >>> bridging of vlans. In order for vlan briding to work the interface
    >>> had to have vlan tagging/stripping disabled when promisc mode is
    >>> invoked (which is how bridge works). The side effect is that now
    >>> tcpdump which puts the interface in promisc mode by default will
    >>> in effect cripple the interface.
    >>>
    >>> However, if "tcpdump -p" does not put the interface in promisc mode
    >>> and it works just fine.
    >>>
    >>>
    >> What about bridge over VLAN ? If you can make a bridge over vlans
    >> without putting
    >> interfaces in promisc mode I won't have some of the problems - but I
    >> don't think it is possible ...
    >> More, if you forget to put -p after tcpdump (or trafshow) in ssh
    >> session ... BOOM.
    >> At least until sshd times out and drops the session and kills tcpdump
    >> but of course this is rather
    >> annoying :). And some traffic accounters go into background so they
    >> won't die with the
    >> ssh session making you say large amount of not so nice words before
    >> calling the support
    >> asking them to reboot the machine :).
    >>
    >>> On Tue, Dec 07, 2004 at 04:22:16PM +0200, Iasen Kostov wrote:
    >>>
    >>>
    >>>> Iasen Kostov wrote:
    >>>>
    >>>>
    >>>>
    >>>>> Robert Watson wrote:
    >>>>>
    >>>>>
    >>>>>
    >>>>>> On Sat, 27 Nov 2004, Kevin Day wrote:
    >>>>>>
    >>>>>>
    >>>>>>
    >>>>>>
    >>>>>>
    >>>>>>> I recently upgraded to 5.3 on a system, and manually upgraded
    >>>>>>> src/sys/dev/em/* to the latest RELENG_5 versions. (1.44.2.4 of
    >>>>>>> if_em.c)
    >>>>>>
    >>>>>>
    >>>>>> I'm able to reproduce problems using the below configuration is
    >>>>>> 6.x also,
    >>>>>> and am investigating. Thanks for the report, hope to get back to
    >>>>>> you
    >>>>>> shortly with something concrete.
    >>>>>>
    >>>>>> Robert N M Watson FreeBSD Core Team, TrustedBSD Projects
    >>>>>> robert@fledge.watson.org Principal Research Scientist,
    >>>>>> McAfee Research
    >>>>>>
    >>>>>>
    >>>>>>
    >>>>>>
    >>>>>>
    >>>>>>
    >>>>>>> While the VLAN side of things works better than the stock 5.3
    >>>>>>> version,
    >>>>>>> there still is this problem:
    >>>>>>>
    >>>>>>> ifconfig vlan1 create
    >>>>>>> ifconfig vlan1 vlan 1 vlandev em1 link0
    >>>>>>> ifconfig vlan2 create
    >>>>>>> ifconfig vlan2 vlan 2 vlandev em1 link0
    >>>>>>> ifconfig vlan3 create
    >>>>>>> ifconfig vlan3 vlan 3 vlandev em1 link0
    >>>>>>>
    >>>>>>> ifconfig vlan1 inet 192.aaa.bbb.129 netmask 255.255.255.0
    >>>>>>> ifconfig vlan2 inet 64.ccc.ddd.61 netmask 255.255.255.192
    >>>>>>> ifconfig vlan3 inet 64.eee.fff.61 netmask 255.255.255.192
    >>>>>>>
    >>>>>>> ifconfig em1 up
    >>>>>>> ifconfig em1 promisc
    >>>>>>>
    >>>>>>> If I do this, vlan1 and vlan3 work fine. Vlan2 can receive
    >>>>>>> packets, but anything sent out vlan2 doesn't seem to be heard by
    >>>>>>> any foreign hosts. Setting "ifconfig em1 -promisc" makes all
    >>>>>>> vlans work properly.
    >>>>>>>
    >>>>>>> This is better than the stock 5.3 version of em(4) where none of
    >>>>>>> the vlans worked, but something still isn't right.
    >>>>>>>
    >>>>>>> Is this a known problem still or am I just doing something wrong?
    >>>>>>>
    >>>>>>>
    >>>>>>>
    >>>>>>>
    >>>>>>>
    >>>>>>>
    >>>>>>
    >>>>>>
    >>>>> Saddly I can just confirm that :(
    >>>>>
    >>>>> regards
    >>>>>
    >>>>> _______________________________________________
    >>>>> freebsd-net@freebsd.org mailing list
    >>>>> http://lists.freebsd.org/mailman/listinfo/freebsd-net
    >>>>> To unsubscribe, send any mail to
    >>>>> "freebsd-net-unsubscribe@freebsd.org"
    >>>>>
    >>>>>
    >>>>
    >>>>
    >>>> Is there an update on this case or I should find a way to disable
    >>>> all hw "things" in the driver ?:) (because things are getting hot
    >>>> here :).
    >>>>
    >>>> regards
    >>>>
    >>>
    >>>
    >>>
    >>>
    >>>
    >>
    >> _______________________________________________
    >> freebsd-net@freebsd.org mailing list
    >> http://lists.freebsd.org/mailman/listinfo/freebsd-net
    >> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
    >>
    > Funny, it works when I load the module from loader.conf ... I mean
    > everything - bridge, tcpdump. Network adapter is changed too
    > but the model is the same. I realy didn't get it :(.
    >
    More fun it now works flawlessly ... wherever you load the if_em and I'm
    100% sure that it didn't work with old adapter.
    I don't know I hope it was some kind ot hardware problem.
    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"


  • Next message: Iasen Kostov: "Re: em(4) VLAN + PROMISC still doesn't work with latest CVS version"

    Relevant Pages

    • Re: Cisco 2811 with HWIC-4ESW
      ... Does anyone have the foggiest idea of how to get fa0/0 to share a vlan ... "Extending VLANs within Layer 3 switches" and seems to be close but it ... wasn't all that essential for me to have the other interface. ... bridge group, and they're together. ...
      (comp.dcom.sys.cisco)
    • !NEWSflash! ZOnaReGGae radishow 17/11 !Open Minded SeSSionS!
      ... This week's session of ZonaReGGae radioshow already online for download ... -World Jazzy Roots Dub Groove intro ... (fell free to also check our highlight post to "Upon the Bridge" - The ...
      (rec.music.reggae)
    • Re: 876W Wireless
      ... interface Dot11Radio0 ... encryption vlan 1 mode ciphers tkip ... did or didn't you get the bridge working? ... I have the same conf (authentication apart, I'm at the beginning) but it doesn't work ...
      (comp.dcom.sys.cisco)
    • Re: Cisco 2811 with HWIC-4ESW
      ... Does anyone have the foggiest idea of how to get fa0/0 to share a vlan with ... Then you create a bridge virtual interface for the router to use instead of the vlan interface that connects to the switch module. ... Join both the vlan interface from the switch and the physical interface from the ouside of the router into the bridge group, ...
      (comp.dcom.sys.cisco)
    • Re: CFR: bridge locking
      ... |> | If you get bridge to send/receive packets to/from vlan interfaces ... | ifconfig vlan0 200.220.254.190/26 ...
      (freebsd-net)