Re: Configuration with STP

Op ma, 25-06-2007 te 16:05 +1000, schreef Marc:
> Hi,
> 
> I have been trying a number of things for the past couple of days
> without success and was wondering if there is someone who may be able
> to help me.
> 
> First my testing scenario:
> "My pc" --- switch === bridge1 & bridge2 === switch --- "network" 
> 
> Everything is working fine, including STP. The idea is to set the
> policy for ebtables to DROP everything, except for what should be
> allowed through. The point that I am having difficulty with is the STP
> traffic. I basically want to allow all BPDUs to flow between the two
> bridges in order for STP to remain working. 
> 
> The latest example of how I am trying to achieve is, looks like this:
> 
> ebtables -A INPUT -s BGA -j ACCEPT
> ebtables -A FORWARD -s BGA -j ACCEPT
> ebtables -A OUTPUT -s BGA -j ACCEPT
> 
> This is configured on both bridges. Once enabled, I find that the
> bridges no longer see eachother and both start operating as
> independent bridges. 

Are you trying to forward these messages? A bridge isn't supposed to
forward these bpdu messages. You can check this with the rule counters
to see how many packets matched these BGA source address rules in each
chain. With your rules the bridge should still cooperate with generating
BPDU packets though, I think. Try logging the traffic that passes your
bridge when your stp stuff is working to see if you missed something.

cheers,
Bart



-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/