RE: build tagging bridge based on SRC/DST Mac

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

Something like that:

+-------------------+
|                   |
|  Host A Mac A     ++      +-------------+          +--------------------+
|                   +-----> |p1           |          |     Linux Box      |                Traffic from or to Host A
+-------------------+       |   stupid    |  Vlan 4  |                    +--eth1.131.4--+
                            |   Switch  p3+----------+eth0                |
+-------------------+       |             |          |                    +--eth1.132.4--+
|                   +-----> |p2           |          |                    |                Traffic from or to Host B
|  Host B Mac B     ++      +-------------+          +--------------------+
|                   |
+-------------------+

I can setup a bridge at the Linuxbox with all three interfaces and I could at ebtables to prevent that traffic from Mac B goes into eth1.131.4
But which rule should I install that prevents traffic from eth1.131.4 to go to eth1.132.4 ? Cos I only know the source IF...

Immo


This message has been classified Public by IMMO WETZEL on Montag, 5. März 2018 at 18:14:53.
-----Original Message-----
From: IMMO WETZEL 
Sent: Monday, March 05, 2018 5:26 PM
To: 'netfilter@xxxxxxxxxxxxxxx'
Subject: build tagging bridge based on SRC/DST Mac

Hi folks,

I do get traffic from a number of hosts ON IF a and have to deliver frames to them all of them are in the same vlan 4. I can not change this. 

Host A With Mac A 
Host B With Mac B
Host C With Mac C

I like to send all frames from SRC A to VLAN 104
I like to send all frames from SRC B to VLAN 204
I like to send all frames from SRC C to VLAN 304

And vice versa.

Is that theoretically possible  with ebtables ?

Something critical in case of broadcasts ? Especially in case of ARP, DHCP or  PPPoE ?

Mit freundlichen Grüßen / With kind regards

Immo Wetzel


This message has been classified Public by IMMO WETZEL on Montag, 5. März 2018 at 17:24:18.

--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux