Re: Iptables and vlan interfaces

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Oct 03, 2005 at 11:16:06AM +0200, Henrik Nordstrom wrote:
> The virtual interfaces created by vconfig is true virtual 
> interfaces and can even have a different MAC address than the physical 
> interface if you like (defaults to use the same MAC however).

Gee, I didn't know that. How is the different MAC address set? Naively
with ip link set dev eth0.101 address <new-mac>? Does this work with
all drivers, will it give a performance impact (such as requiring the
phyiscal interface to run promisc)?

> These 
> virtual interfaces is named like physicalinterface.vlannumber (i.e. 
> eth0.45 for the VLAN with the .1q tag 45 on the eth0 physical connection).

I strongly recommend using ip link set dev old-name name new-name to
rename the interface to something less complicated. Having interfaces
named from usage (like unt0 for untrusted, per0 for perimeter network,
int0 for internal network and so on) brings new sense into the
--in-interface int+ notation of iptables.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux