On 2/6/2011 7:43 PM, Jonathan Tripathy wrote:
With ebtables, is it possible to filter via the VLAN interface (e.g.
eth0.3 for VLAN3) using the normal -i and -o parameters? I'd like to
filter via the interface rather than using the tag with --vlan-id if
possible
Yes it is.
(I am currently doing exactly that on a system with 30+ VLAN interfaces.)
It is my (mis)understanding that the --vlan-id is used to match traffic
to/from a specific tagged VLAN on the /raw/ interface. (I don't know
for sure b/c I never match on the raw interface. I always use the VLAN
sub-interface.)
Grant. . . .
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html