[ previous ] [ next ] [ threads ]
 From:  "Bostjan Hojkar" <bostjan dot hojkar at fov dot uni dash mb dot si>
 To:  <m0n0wall at lists dot m0n0 dot ch>
 Subject:  Fw: [m0n0wall] Trouble with VLANs and Bridging
 Date:  Fri, 27 Jan 2006 15:07:53 +0100
To copy my answer to the list and to have it archived with usefull links:

Some talk about why L2 pakets can't be filtered with L3 filters (like ipfw):




Regards, Bostjan

----- Original Message ----- 
From: "Bostjan Hojkar" <bostjan dot hojkar at fov dot uni dash mb dot si>
To: "Kyle Schultz" <Kyle dot Schultz at ColoState dot EDU>
Sent: Friday, January 27, 2006 7:23 AM
Subject: Re: [m0n0wall] Trouble with VLANs and Bridging

>>     I am attempting to create a filtering bridge that sits
>> between two switches that are connected with a tagged VLAN. However, the 
>> bridge stops working just by creating the VLAN on either interface, 
>> without even assigning the VLAN to any interface.
>> Can anyone confirm for me that bridging does work over/with a VLAN?
> You probably want layer 3 filtering (IP) - that's what m0n0wall can do  - 
> but switch traffic via same VLAN is layer 2 (MAC). I don't think you'll be 
> getting anywhere with your kind of setup.
> You could do routing between VLANs with m0n0, but it was explained before 
> on this list as a bad design, since switches can do this faster.
> Regards, Bostjan