On Tue, Oct 06, 2020 at 03:23:36PM +0200, Kurt Kanzenbach wrote: > So you're saying private VLANs can be used but the user or the other > kernel modules shouldn't be allowed to use them to simplify the > implementation? Makes sense to me. It would be interesting to see if you could simply turn off VLAN awareness in standalone mode, and still use unique pvids per port. Then you would have no further restriction for VLAN-tagged traffic with unknown VLANs or with 8021q uppers having the same VLAN ID on multiple ports.