On 09/13/2015 12:49 PM, Nathan Neulinger wrote:
> It seems like running 'vconfig add IFACE 0' and using IFACE.0 would do this,
> but it
> doesn't actually seem to work that way.
>
> If I capture on IFACE directly, I'd expect to get all traffic, including the
> tagged frames
> (with the tag intact). Looking to be able to bridge/capture/etc. and
> specifically only
> receive the untagged frames that haven't already been pulled out into a vlan
> specific
> interface.
>
> Is there any way to accomplish this without using ebtables or other similar
> hacks?
If you are dealing with a hw interface, any interface that supports vlan
filtering will by default receive only untagged frames. Only when you put
into promiscuous mode, will you receive all frames.
With bridge, you could configure your vlans adjacent to you bridge:
vlan0...N bridge
| |
+-- eth0 --+
This way, configured vlan traffic will go to vlan devices, while all other
traffic will got bridge. You can even limit this "all other traffic"
further, by turning on vlan filtering on the bridge which will allow
you to run eth0 in non-promiscuous mode thus enforcing HW vlan filters.
-vlad
>
> -- Nathan
>
> ------------------------------------------------------------
> Nathan Neulinger nn...@neulinger.org
> Neulinger Consulting (573) 612-1412
> --
> To unsubscribe from this list: send the line "unsubscribe netdev" in
> the body of a message to majord...@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majord...@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
