Right now, I'm trying a new cloud provider which facilitates private networking, this is a feature on which you can run multiple vlan's. Because the platform that we are going to build is a linux/windows platform and it has multiple env's we are going to separate them with a vlan construction. Until this point it is pretty basic.
The best way to use vlan tagging under windows is the "realtek ethernet diagnostic tool", in combination with the realtek 8139 card and it gives you the possibility to create a vlan interface.
The interface is coming up the right way I configure it, but now the fun starts. Another machine in the same vlan (10) receives netbios, arp and other UDP communication. I have noticed this with a simple tcpdump command:
19:32:44.247964 IP 10.0.10.30.netbios-ns > 10.0.10.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST 19:32:44.248057 IP 10.0.10.30.netbios-ns > 10.0.10.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST 19:32:44.310334 IP 10.0.10.30.netbios-ns > 10.0.10.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST 19:32:44.509278 IP6 fe80::a1dd:64c9:ae27:5659.60116 > ff02::1:3.hostmon: UDP, length 24 19:32:44.509955 IP 10.0.10.30.63646 > 126.96.36.199.hostmon: UDP, length 24 19:32:44.606923 IP6 fe80::a1dd:64c9:ae27:5659.60116 > ff02::1:3.hostmon: UDP, length 24
If I disable the windows firewall completely by stopping the service or adding the interface to the private group and allow everything, nothing happens. I used wireshark on the windows machine to see if my ICMP packages are accepted by the server but that isn't noticed in wireshark.
Another odd thing is that if I ping from the windows machine to the linux machine, the first timeout given is from the local IP and the other 3 timeouts are given from the external address (default GW). So it looks like windows can't handle the interface for package other then UDP.
Right now this question isn't really answered and keeps a problem that nobody solved or documented yet. So I would like to solve this with your help and create a detailed weblog post so everybody has a provide.
I hope some one can help me out, my goal is to have multiple vlan interfaces in Windows 2008R2 each with their own vlan tag.