Re: ebtables not marking VLAN tagged packets

Leigh Sharpe wrote:
> Hi All,
> Not sure if this is a problem with ebtables or elsewhere.
> I have a fairly simple ethernet bridge:
>  
> ifconfig eth0 down
> brctl addbr br0
> brctl addif br0 eth0
> brctl addif br0 eth1
> brctl stp br0 off
> ifconfig eth0 0.0.0.0 up
> ifconfig eth1 0.0.0.0 up
> ifconfig br0 up
>  
> I am then using ebtables to mark packets:
> ebtables -A FORWARD -s 00:10:A4:EC:65:E8 -j mark --set-mark 1 
> --mark-target ACCEPT
> ebtables -A FORWARD -d 00:10:A4:EC:65:E8 -j mark --set-mark 1 
> --mark-target ACCEPT
> And tc to act on the marks which ebtables puts on them:
> tc qdisc add dev eth0 root handle 1:0 cbq bandwidth 100Mbit avpkt 1000 
> mpu 64
> tc qdisc add dev eth1 root handle 1:0 cbq bandwidth 100Mbit avpkt 1000 
> mpu 64
> tc class add dev eth0 parent 1:0 classid 1:1 cbq rate 128Kbit allot 
> 1514 prio 1 avpkt 1000 bounded
> tc class add dev eth1 parent 1:0 classid 1:1 cbq rate 128Kbit allot 
> 1514 prio 1 avpkt 1000 bounded
> tc filter add dev eth0 parent 1:0 protocol ip handle 1 fw flowid 1:1
> tc filter add dev eth1 parent 1:0 protocol ip handle 1 fw flowid 1:1
>  
>  
> This all works just fine.
> However, when I connect eth0 and eth1 to a VLAN switch, and all 
> packets entering them have a VLAN tag, I am no longer seeing the 
> effects of the rate limit set by tc.
> using --log on ebtables, I can see the packets being logged, but they 
> don't appear to be marked.
> I'm using ebtables-2.0.8-rc2 compiled from source.
> I have seen a few mentions of needing connection tracking to keep 
> track of larger packets with VLAN tags, but I am assuming that these 
> only applied to earlier versions of ebtables.
> Do I need bridge-nf as well, or is it already integrated into v2.0.8?
> Any other ideas?
>
Kernel version and config? Do you have VLAN support builtin in the kernel?
> t/lists/listinfo/ebtables-user


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642