ebtables not marking VLAN tagged packets
"Leigh Sharpe" <[email protected]> Tue, 29 Aug 2006 12:54:41 +1000
| Newsgroups | gmane.linux.network.bridge.ebtables.user |
|---|---|
| Message-ID | <H00000690009f391.1156820079.mail.pacificwireless.net.au@MHS> |
Hi All,
Not sure if this is a problem with ebtables or elsewhere.
I have a fairly simple ethernet bridge:
ifconfig eth0 down
brctl addbr br0
brctl addif br0 eth0
brctl addif br0 eth1
brctl stp br0 off
ifconfig eth0 0.0.0.0 up
ifconfig eth1 0.0.0.0 up
ifconfig br0 up
I am then using ebtables to mark packets:
ebtables -A FORWARD -s 00:10:A4:EC:65:E8 -j mark --set-mark 1
--mark-target ACCEPT
ebtables -A FORWARD -d 00:10:A4:EC:65:E8 -j mark --set-mark 1
--mark-target ACCEPT
And tc to act on the marks which ebtables puts on them:
tc qdisc add dev eth0 root handle 1:0 cbq bandwidth 100Mbit avpkt 1000
mpu 64
tc qdisc add dev eth1 root handle 1:0 cbq bandwidth 100Mbit avpkt 1000
mpu 64
tc class add dev eth0 parent 1:0 classid 1:1 cbq rate 128Kbit allot 1514
prio 1 avpkt 1000 bounded
tc class add dev eth1 parent 1:0 classid 1:1 cbq rate 128Kbit allot 1514
prio 1 avpkt 1000 bounded
tc filter add dev eth0 parent 1:0 protocol ip handle 1 fw flowid 1:1
tc filter add dev eth1 parent 1:0 protocol ip handle 1 fw flowid 1:1
This all works just fine.
However, when I connect eth0 and eth1 to a VLAN switch, and all packets
entering them have a VLAN tag, I am no longer seeing the effects of the
rate limit set by tc.
using --log on ebtables, I can see the packets being logged, but they
don't appear to be marked.
I'm using ebtables-2.0.8-rc2 compiled from source.
I have seen a few mentions of needing connection tracking to keep track
of larger packets with VLAN tags, but I am assuming that these only
applied to earlier versions of ebtables.
Do I need bridge-nf as well, or is it already integrated into v2.0.8?
Any other ideas?
Regards,
Leigh
Leigh Sharpe
Network Systems Engineer
Pacific Wireless
Ph +61 3 9584 8966
Mob 0408 009 502
email [email protected]
web www.pacificwireless.com.au
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Ebtables-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ebtables-user