[FUG-BR] vlan sobre bridge

[Luiz Gustavo S. Costa]

Salve lista,

Eu estou tentando implementar uma bridge para redundância de interface
(usando spanning tree) só que estou esbarrando na barreira de
implementar vlan sobre bridge.

ao tentar fazer testes, tive o seguinte diagnostico:

# ifconfig bridge0 create
# ifconfig bridge0 addm le1 addm le2 (usei bridge normal por causa que
é um teste)
# ifconfig brigde0 up
# ifconfig vlan10 create
# ifconfig vlan10 vlan 10 vlandev bridge0
ifconfig: SIOCSETVLAN: Protocol not supported

Então é isso mesmo ? bridge não suporta vlan :( ....

Eu encontrei isso no man do bridge (# man bridge):

The packets destined to the bridging host will be seen by the filter on
     the interface with the MAC address equal to the packet's destination MAC.
     There are situations when some of the bridge members are sharing the same
     MAC address (for example the vlan(4) interfaces: they are currenly shar-
     ing the MAC address of the parent physical interface).  It is not possi-
     ble to distinguish between these interfaces using their MAC address,
     excluding the case when the packet's destination MAC address is equal to
     the MAC address of the interface on which the packet was entered to the
     system.  In this case the filter will see the incoming packet on this
     interface.  In all other cases the interface seen by the packet filter is
     chosen from the list of bridge members with the same MAC address and the
     result strongly depends on the member addition sequence and the actual
     implementation of if_bridge.  It is not recommended to rely on the order
     chosen by the current if_bridge implementation: it can be changed in the
     future.

Mas e no caso de usar stp (spanning tree) não cairia nesse caso, pois
somente uma interface estaria em uso....

Eu encontrei esse site:
http://blogs.freebsdish.org/thompsa/2007/06/14/bridging-a-vlan-trunk/

mas não tive muito avanço até agora....

estou pensando em usar a interface lagg0 para solucionar isso (nos
testes funcionou com vlan) no modo failover.

O que acham ????

Obrigado.

-- 
Luiz Gustavo Costa

mundoUnix - Consultoria em Software Livre
http://www.mundounix.com.br
ICQ: 2890831 / MSN: gustavo.bsd em gmail.com