peter/infix
1
0
Fork 0
mirror of https://github.com/kernelkit/infix.git synced 2026-07-29 20:23:01 +02:00
Code Issues Packages Projects Releases Wiki Activity

Extending VLAN Filtering Bridge documentation (PVID etc)

Browse Source 
Adding missing information
- that PVID should (typically) be set for ports associated untagged
- that the bridge should associated with VLAN to terminate the VLAN
  in the bridge
This commit is contained in:
Jon-Olov Vatn
2023-11-08 11:18:23 +01:00
committed by Joachim Wiberg
parent 6a9a6780fa
commit 349011dc2d
1 changed files with 13 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
doc/networking.md
+13 -2
View File
@@ -47,13 +47,16 @@ Here we add two ports to bridge `br0`: `eth0` and `eth1`.
#### VLAN Filtering Bridge
By default bridges in Linux do not filter based on VLAN tags. It can be enabled in Infix when creating a bridge by adding a port to a VLAN as a tagged or untagged member:
By default bridges in Linux do not filter based on VLAN tags. It can be enabled in Infix when creating a bridge by adding a port to a VLAN as a tagged or untagged member.
Use the port default VID (PVID) setting to control VLAN association for traffic ingressing a port untagged (default PVID: 1).
```
admin@example:/config/> edit interfaces interface br0
admin@example:/config/interfaces/interface/br0/> up
admin@example:/config/interfaces/> set interface eth0 bridge-port bridge br0
admin@example:/config/interfaces/> set interface eth0 bridge-port pvid 10
admin@example:/config/interfaces/> set interface eth1 bridge-port bridge br0
admin@example:/config/interfaces/> set interface eth1 bridge-port pvid 20
admin@example:/config/interfaces/> edit interface br0
admin@example:/config/interfaces/interface/br0/> set bridge vlans vlan 10 untagged eth0
admin@example:/config/interfaces/interface/br0/> set bridge vlans vlan 20 untagged eth1
@@ -63,6 +66,14 @@ This sets `eth0` as an untagged member of VLAN 10 and `eth1` as an
untagged member of VLAN 20. Switching between these ports is thus
prohibited.
To terminate a VLAN in the switch itself, either for switch management of for routing, the bridge must become a (tagged) member of the VLAN.
```
admin@example:/config/interfaces/interface/br0/> set bridge vlans vlan 10 tagged br0
admin@example:/config/interfaces/interface/br0/> set bridge vlans vlan 20 tagged br0
```
> To route or manage via, a VLAN interface needs to be created on top of the bridge, see section [VLAN Interfaces](#vlan-interfaces) below.
### VLAN Interfaces
Creating a VLAN can be done in many ways. This section assumes VLAN interfaces created atop another Linux interface. E.g., the VLAN interfaces created on top of the Ethernet interface or bridge in the picture below.
@@ -79,7 +90,7 @@ admin@example:/config/interfaces/interface/eth0.20/> set vlan lower-layer-if eth
admin@example:/config/interfaces/interface/eth0.20/> leave
```
The example below assumes bridge br0 is already created.
The example below assumes bridge br0 is already created, see [VLAN Filtering Bridge](#vlan-filtering-bridge).
```
admin@example:/> configure