Re: Virtual Network Interfaces



On Thu, Nov 02, 2006 at 06:12:22PM +0100, 'Jeremie Le Hen' wrote:
Hi Raymond,

On Tue, Oct 31, 2006 at 11:10:47AM -0500, Raymond Wagner wrote:
Your other method is that I keep NAT on the internal interface as normal,
and then create VLANs, bridged to the external interface, to each computer
with an external IP. Those machines would communicate as normal on the
internal network, but use the VLAN interface for external access. I've not
used VLANs before, so I don't know exactly how they work. I know the
wrapper causes some overhead, and my switch drops packets >1500 bytes. Do I
have to lower the MTU on the internal network, or just the VLANs and
external? Also, will my ISP know not to send the larger packets?

802.1q (namely VLAN) adds a 4-bytes header which means your network
adapter must support a MTU of 1504 bytes. AFAIK, most of network
cards do this. I haven't heard of problems like this so far.

I've Cc'ed Andrew Thompson which has imported if_bridge(4) from
OpenBSD into FreeBSD. He will likely be able to answer your question
and tell whether it is possible to bridge two VLAN interfaces
(attached to a physical interface) with another physical interface.

That will work fine. The area where the bridge lacks is bridging vlan
trunks but you do not appear to be doing that.


Andrew
_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"



Relevant Pages

  • RE: ISA server configuration with multiple internals network.
    ... Have you configured all internal VLANs as internal network within ISA? ... the correct interface ID and the correct VLAN details? ... The external interface has the default gateway. ... 2---A trunk link is attached to a GiG interface to the ISA server, ...
    (microsoft.public.isa.enterprise)
  • Re: Cisco 2821 ISR config with Wifi
    ... (my intranet vlan is 10, and this uses very basic authentication, not ... bridge 10 protocol ieee ... interface FastEthernet0 ...
    (comp.dcom.sys.cisco)
  • Re: Cisco 2811 with HWIC-4ESW
    ... Does anyone have the foggiest idea of how to get fa0/0 to share a vlan ... "Extending VLANs within Layer 3 switches" and seems to be close but it ... wasn't all that essential for me to have the other interface. ... bridge group, and they're together. ...
    (comp.dcom.sys.cisco)
  • Cisco 877w: Fa0-3 Interfaces up but no traffic passes
    ... Data Vlan101 only, no voice vlan required, WPA ... output errors, 0 collisions, 0 interface resets ... switchport trunk native vlan 101 ... bridge-group 101 subscriber-loop-control ...
    (comp.dcom.sys.cisco)
  • Re: Need help adding device to new vlan
    ... The vlan 99 ... - If I assign an ip address to the vlan 199 interface, ... switchport trunk encapsulation dot1q ... switchport trunk allowed vlan 40,51,99,199,997,998 ...
    (comp.dcom.sys.cisco)