Tested again and found bnd-entry with correct src+dst ip. But i wonder about etype=0101, i expect 8100 here as top most ethertype should be 802.1q/vlan Pppoe=>vlan=>dsa 00c22 BND IPv4 5T orig=192.168.0.21:33676->213.95.41.4:443 new=80.245.76.249:33676->213.95.41.4:443 eth=02:11:02:03:04:05->00:00:5e:00:01:02 etype=0101 vlan=140,0 ib1=214949a7 ib2=007ff020 I looked in mtk_foe_entry_set_vlan and it seems ethertype is not set,have not found position where 0x101 gets set. https://patchwork.ozlabs.org/project/netfilter-devel/patch/20210311003604.22199-22-pablo@xxxxxxxxxxxxx/ As it is not ETH_P_PPP_SES=0x8864 and not ETH_P_IP=0x0800, i guess it is calculated in mtk_foe_entry_set_dsa Am i on the right way? regards Frank
