Thread (11 messages) 11 messages, 3 authors, 2013-11-13

Re: VLAN filtering/VLAN aware bridge problems

From: Vlad Yasevich <hidden>
Date: 2013-11-13 14:49:22

On 11/13/2013 02:28 AM, Stefan Priebe - Profihost AG wrote:
Am 13.11.2013 00:25, schrieb Vlad Yasevich:
quoted
On 11/12/2013 04:31 PM, Stefan Priebe wrote:
quoted
sorry for the very late response.

Am 10.09.2013 16:11, schrieb Vlad Yasevich:
quoted
On 08/30/2013 11:01 AM, Stefan Priebe - Profihost AG wrote:
quoted
Yes
Can you apply this patch and see if this fixes your problem.
      http://patchwork.ozlabs.org/patch/273841/

In my attempts to reproduce your problem I didn't configuring filtering
on the upper bridge, but that is what could have been causing
your problem.  I'll attempt it and let you know.
Even with the complete patchset which was merged upstream it doesn't
work ;-(

What's wrong there and / or how can i debug?
Can you provide the filtering settings for both bridges you use?
I don't filter at all right now it's compiled in but not enabled - but i
have these problems since these patches were included.

It only start to work if i set the eth0 and eth1 (slaves of the bond) to
promisc mode. So the problem seems to be that the ethernet devices do
not accept the VLAN tagged packages.
That doesn't make much sense. If the filtering is not enabled, then
this code isn't in use.  It will not try to set any vlan filtering
so you should be running with essentially stock bridge.

Bridge sets promisc mode on all its ports, so your bond device should
be in promisc mode.  Bonding code sets different set of slaves into
promisc mode depending on the mode you use.  Which mode do you have
your bond configured in?
Does, dmesg tell you if devices have entered promisc mode?

-vlad
Stefan
quoted
Thanks
-vlad
quoted
Stefan
quoted
-vlad

quoted
Stefan

This mail was sent with my iPhone.

Am 30.08.2013 um 16:13 schrieb Vlad Yasevich [off-list ref]:
quoted
On 08/30/2013 03:24 AM, Stefan Priebe - Profihost AG wrote:
quoted
Am 29.08.2013 22:45, schrieb Vlad Yasevich:
quoted
On 08/29/2013 08:50 AM, Stefan Priebe - Profihost AG wrote:
quoted
quoted
The packets never reach the TAP device.

Here is an output of ip a l (vlan 3021):
Can you provide output of brctl show?
Sure:
# brctl show
bridge name     bridge id               STP enabled     interfaces
vmbr0           8000.00259084dea8       no              bond0
                                                          tap320i0
vmbr1           8000.00259084deaa       no              bond1
vmbr1v3021              8000.00259084deaa       no
tap320i1
                                                          vmbr1.3021
so let me see if I can understand this configuration.

           vmbr1v3021 (bridge)
            /          \
        tap320i1       vmbr1.3021 (vlan)
                           \
                           vmbr1 (bridge)
                              \
                             bond1
                                \
                              eth X


Is that right? Is this the setup that has the problem you are
describing?

Thanks
-vlad
quoted
quoted
On the off chance that you are actually trying to configure vlan
filtering, can you give this patch a try (net-2.6 tree):

Author: Toshiaki Makita [off-list ref]
Date:   Tue Aug 20 17:10:18 2013 +0900

      bridge: Use the correct bit length for bitmap functions in the
VLAN
code

I don't think it made it to stable yet.
I addd that patch and now the vlan stuff works at least on the host
node. But my tap devices still don't work.

I also tried to attach the tap device on top of a vlan attached to
bond1
but then gvrp does not work anymore. The kernel announces gvrp once
and
then does not answer the query packets from the switch.

Stefan
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help