Re: Log VLANs without interfaces.
Asher Awelan <[email protected]> Tue, 16 Nov 2010 08:45:52 +0000
| Newsgroups | gmane.linux.network.bridge.ebtables.user |
|---|---|
| Message-ID | <[email protected]> |
Grant, I'd be very interested in knowing if it is possible, even if it was only one way. Any idea of a way forward? On 15 Nov 2010, at 17:22, ebtables-user-request-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org wrote: > Send Ebtables-user mailing list submissions to > [email protected] > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.sourceforge.net/lists/listinfo/ebtables-user > or, via email, send a message with subject or body 'help' to > ebtables-user-request-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org > > You can reach the person managing the list at > ebtables-user-owner-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Ebtables-user digest..." > > > Today's Topics: > > 1. ebtables + ipset (sadas sadas) > 2. brouter basic question . (ratheesh k) > 3. Re: brouter basic question . (Grant Taylor) > 4. Adding ebtables entry from kernel module (Parthiv Shah) > 5. mailing-list password (laugello) > 6. Log VLANs without interfaces. (Asher Awelan) > 7. Re: Log VLANs without interfaces. (Oscar N) > 8. Re: Log VLANs without interfaces. (Grant Taylor) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 10 Dec 2009 13:54:58 +0200 (EET) > From: sadas sadas <[email protected]> > Subject: [Ebtables-user] ebtables + ipset > To: [email protected] > Message-ID: > <1464883024.48563.1260446107468.JavaMail.apache-3EDEqE+l8H8Y52N63ZI0lg@public.gmane.org> > Content-Type: text/plain; charset="utf-8" > > Hi, > > > > I'm having a problem with ebtables. When I try to configure ebtables rules to work with ipset the following error occurs. > I enter > ebtables -A FORWARD --ip-dst > ipset > -j ACCEPT > And the following error occur "Problem with the IP address 'ipset'." > It seems that ebtables checks the input string for for numbers. > Are you planning to support ipset in next release? > > > > ----------------------------------------------------------------- > ????? ???????? ?????? ?? Vesti.bg! > http://www.vesti.bg > -------------- next part -------------- > An HTML attachment was scrubbed... > > ------------------------------ > > Message: 2 > Date: Tue, 30 Mar 2010 17:38:12 +0530 > From: ratheesh k <[email protected]> > Subject: [Ebtables-user] brouter basic question . > To: [email protected] > Message-ID: > <cfeab66d1003300508r105bf129y2ea3b509953c9a11-JsoAwUIsXosN+BqQ9rBEUg@public.gmane.org> > Content-Type: text/plain; charset=ISO-8859-1 > > Hi , > > i have a rule > > ebtables -t broute -A BROUTING -j ACCEPT . > > So packet wont traverse any other chain ? ( Prerouting , Input , > Forward , Postrouting ) ??? > > > Thanks, > Ratheesh. > > > > ------------------------------ > > Message: 3 > Date: Tue, 30 Mar 2010 12:31:33 -0500 > From: Grant Taylor <[email protected]> > Subject: Re: [Ebtables-user] brouter basic question . > To: Mail List - EBTables <[email protected]> > Message-ID: <4BB23575.1030108-Ar0DOhTQTaM+ywdDsXnpEV6hYfS7NtTn@public.gmane.org> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > On 03/30/10 07:08, ratheesh k wrote: >> So packet wont traverse any other chain ? ( Prerouting , Input , >> Forward , Postrouting ) ??? > > Are you referring to other EBTables chains or IPTables chains? > > If memory serves, "ACCEPTing" in the BROUTING chain causes frames to be > (layer 2) bridged. Conversely "REJECTing" causes frames to be (layer 3) > routed. > > > > Grant. . . . > > > > ------------------------------ > > Message: 4 > Date: Fri, 16 Apr 2010 18:11:03 +0530 > From: "Parthiv Shah" <[email protected]> > Subject: [Ebtables-user] Adding ebtables entry from kernel module > To: <[email protected]> > Message-ID: <8D53A0FEE4D94D71AB2A526E92A8C5D5@PARTHIVLAPTOP> > Content-Type: text/plain; charset="us-ascii" > > Hi, > > I am new to using ebtables and my requirements is to do L2 NATing of clients > connected on the bridge, through WiFi interface. > > As a proof of concept, I am able to add following rules in ebtables and have > the functionality that I want. (this is for one client connected on bridge) > > 1. ebtables -t nat -A POSTROUTING -o ath0 -j snat --to-src > 00:03:7F:12:06:90 --snat-arp --snat-target ACCEPT > > 2. ebtables -t nat -A PREROUTING -p 0x0800 -i ath0 --ip-dst 192.168.40.239 > -j dnat --to-dst 08:00:46:6A:A4:AC --dnat-target ACCEPT > 3. ebtables -t nat -A PREROUTING -p 0x0806 -i ath0 --arp-ip-dst > 192.168.40.239 -j dnat --to-dst 08:00:46:6A:A4:AC --dnat-target ACCEPT > > With above rules, client PC (192.168.40.239) is able to ping gateway > (through WiFi - WAN interface) and it's packets are properly NATed. Now > practically, there will be many clients connected on the bridge and run time > they will join and leave the bridge port. So now I need to add/delete these > rules (specifically 2 and 3) for each client as and when they join / leave. > I was thinking of modifying the ebtables rules from the kernel itself (at > the time of dhcp / arp / ip packet flow for any new client). > > How can I add / delete the above rules (2 and 3), from the kernel module? > Basically I don't want to use ebtables user space tool to add/delete rules > in ebtables, neither I want to extend ebtables. I just want to be able to > create / delete ebtables rule entries from kernel space. > > Any help on this will be appreciated. > > Thanks, > Parthiv > > > > -------------- next part -------------- > An HTML attachment was scrubbed... > > ------------------------------ > > Message: 5 > Date: Fri, 22 Oct 2010 11:01:26 +0200 > From: laugello <[email protected]> > Subject: [Ebtables-user] mailing-list password > To: [email protected] > Message-ID: <[email protected]> > Content-Type: text/plain; charset=ISO-8859-15; format=flowed > > Hello > Sorry of the o-topic > I forgot password of the mailing-list How I can recover it > tanks > Luigi > > -- > Augello Luigi > Amministratore di Sistema Poli didattici di Agrigento, Caltanissetta e > Trapani > Universit? degli Studi di Palermo > tel 093420928 > VoIP 09123865802 > > > > > ------------------------------ > > Message: 6 > Date: Mon, 15 Nov 2010 10:47:31 +0000 > From: Asher Awelan <[email protected]> > Subject: [Ebtables-user] Log VLANs without interfaces. > To: [email protected] > Message-ID: <7B021863-0FB7-4199-A855-1B2A57950652-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> > Content-Type: text/plain; charset=us-ascii > > SCENARIO: > I have inherited a hospitality solution which uses 802.11q tagging on it's switched network for the purpose of room identification, i.e. one port per room. > My current handling of this is working but not stable and is memory heavy. > Currently I have the 250 (I know!) VLANs on eth1.x as interfaces and have bridged them on br0. > I am using ebtables to log which mac addresses are using which vlan tag and then doing some cron processing to charge data use to the rooms. > However, this is pretty intensive on the network/ifconfig management. > > QUESTION: > Is there a way to broute the vlans to the eth1 interface and not have to create every interface and register every vlan... or perhaps strip the vlan id (after logging of course)... > > Further clarification can be given of course. > I know this is a ridiculous scenario, however these are my parameters within which to work. > > Thank you kindly, > > > ------------------------------ > > Message: 7 > Date: Mon, 15 Nov 2010 14:11:28 +0100 > From: Oscar N <[email protected]> > Subject: Re: [Ebtables-user] Log VLANs without interfaces. > To: <[email protected]> > Message-ID: <848662e82c3ef7fb0184429ba8843cd5@localhost> > Content-Type: text/plain; charset=UTF-8 > > Hi! > > We did this a couple of years ago due to shitty switches that didn't even > had the possibility to filter out packets from rouge DHCP servers. > What we did was using a central database and scripts on the linux boxes > instead that handled all the hard work of setting up/removing interfaces. > Worked very well and we also incorporated multiple routing tables and per > user packet shaping. Maybe that would be another approach to solve the > problem. > > /Regards Oscar > > On Mon, 15 Nov 2010 10:47:31 +0000, Asher Awelan <[email protected]> > wrote: >> SCENARIO: >> I have inherited a hospitality solution which uses 802.11q tagging on > it's >> switched network for the purpose of room identification, i.e. one port > per >> room. >> My current handling of this is working but not stable and is memory > heavy. >> Currently I have the 250 (I know!) VLANs on eth1.x as interfaces and > have >> bridged them on br0. >> I am using ebtables to log which mac addresses are using which vlan tag >> and then doing some cron processing to charge data use to the rooms. >> However, this is pretty intensive on the network/ifconfig management. >> >> QUESTION: >> Is there a way to broute the vlans to the eth1 interface and not have to >> create every interface and register every vlan... or perhaps strip the > vlan >> id (after logging of course)... >> >> Further clarification can be given of course. >> I know this is a ridiculous scenario, however these are my parameters >> within which to work. >> >> Thank you kindly, >> > ------------------------------------------------------------------------------ >> Centralized Desktop Delivery: Dell and VMware Reference Architecture >> Simplifying enterprise desktop deployment and management using >> Dell EqualLogic storage and VMware View: A highly scalable, end-to-end >> client virtualization framework. Read more! >> http://p.sf.net/sfu/dell-eql-dev2dev >> _______________________________________________ >> Ebtables-user mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/ebtables-user > > > > ------------------------------ > > Message: 8 > Date: Mon, 15 Nov 2010 10:41:11 -0600 > From: Grant Taylor <[email protected]> > Subject: Re: [Ebtables-user] Log VLANs without interfaces. > To: Mail List - EBTables <[email protected]> > Message-ID: <4CE162A7.1050204-Ar0DOhTQTaM+ywdDsXnpEV6hYfS7NtTn@public.gmane.org> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > On 11/15/10 04:47, Asher Awelan wrote: >> QUESTION: >> Is there a way to broute the vlans to the eth1 interface and not have >> to create every interface and register every vlan... or perhaps strip >> the vlan id (after logging of course)... > > It /might/ be possible to strip the VLAN tags and send the traffic on > it's way with out the need for all the vlan interfaces. But, I don't > know that it will be possible (at least as easily) to re-tag the > returning traffic. > > Something you might consider doing is moving the (un)tagging / trunking > in to a user space application that can dynamically add and remove the > VLAN tags with out needing kernel support or vlan interfaces. - I'm > just typing raw theories out my (you know what) and would have to give > this quite a bit more thought. > > > > Grant. . . . > > > > ------------------------------ > > ------------------------------------------------------------------------------ > Centralized Desktop Delivery: Dell and VMware Reference Architecture > Simplifying enterprise desktop deployment and management using > Dell EqualLogic storage and VMware View: A highly scalable, end-to-end > client virtualization framework. Read more! > http://p.sf.net/sfu/dell-eql-dev2dev > > ------------------------------ > > _______________________________________________ > Ebtables-user mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/ebtables-user > > > End of Ebtables-user Digest, Vol 24, Issue 1 > ******************************************** ------------------------------------------------------------------------------ Beautiful is writing same markup. Internet Explorer 9 supports standards for HTML5, CSS3, SVG 1.1, ECMAScript5, and DOM L2 & L3. Spend less time writing and rewriting code and more time creating great experiences on the web. Be a part of the beta today http://p.sf.net/sfu/msIE9-sfdev2dev