Re: Configuration with STP

Bart,

I have noticed that everything indeed works fine as long as the ebtables
rules are loaded into the 'root' bridge. As soon as I load these rules on
the second bridge, the second bridge then no longer sees the 'root' bridge
and starts forwarding packets.

Do you have any idea why the same set of rules on the second bridge would
prevent it from communicating with the 'root' bridge?

Regards, /|/|arc.

On 6/26/07, Bart De Schuymer <[email protected]> wrote:
>
> Op ma, 25-06-2007 te 16:05 +1000, schreef Marc:
> > Hi,
> >
> > I have been trying a number of things for the past couple of days
> > without success and was wondering if there is someone who may be able
> > to help me.
> >
> > First my testing scenario:
> > "My pc" --- switch === bridge1 & bridge2 === switch --- "network"
> >
> > Everything is working fine, including STP. The idea is to set the
> > policy for ebtables to DROP everything, except for what should be
> > allowed through. The point that I am having difficulty with is the STP
> > traffic. I basically want to allow all BPDUs to flow between the two
> > bridges in order for STP to remain working.
> >
> > The latest example of how I am trying to achieve is, looks like this:
> >
> > ebtables -A INPUT -s BGA -j ACCEPT
> > ebtables -A FORWARD -s BGA -j ACCEPT
> > ebtables -A OUTPUT -s BGA -j ACCEPT
> >
> > This is configured on both bridges. Once enabled, I find that the
> > bridges no longer see eachother and both start operating as
> > independent bridges.
>
> Are you trying to forward these messages? A bridge isn't supposed to
> forward these bpdu messages. You can check this with the rule counters
> to see how many packets matched these BGA source address rules in each
> chain. With your rules the bridge should still cooperate with generating
> BPDU packets though, I think. Try logging the traffic that passes your
> bridge when your stp stuff is working to see if you missed something.
>
> cheers,
> Bart
>
>
>

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/

_______________________________________________
Ebtables-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ebtables-user