Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I would like to establish the setup shown below. The image is taken from ( and explains how to set this up on a brocade device.

I would like to use an ubuntu server to do the routing. Right now, the switch and the server/router are connected with a trunk and the server uses the vlan package, kernel module and (inner) subnets for routing. I would like that:

  1. no IP addresses get lost in the subnetting (outer subnet is /26, inner subnets are /28)
  2. I don't want the rigorous subdivision of my outer subnet. I want to assign a VLAN to any IP in the outer subnet.

How do I need to configure my interfaces? What is the "ubuntu" translation of "ip follow ve"?


enter image description here

share|improve this question

I'm guessing that you're trying to accomplish the isolation of hosts in the three VLAN's from one another but not from the Linux gateway while allocating addresses from a single common block.

If this is the case, then I'd suggest putting each of the VLAN interfaces on the Linux box into a common bridge and using ebtables to limit L2 access on each subinterface to only the gateway. The Ubuntu documentation goes into plenty of detail about both setting up the VLAN interfaces as well as the bridging.

So - assume you have eth0.2, eth0.3 and eth0.4 corresponding to VLAN's 2, 3 and 4 Create br0, assign it and add the three subinterfaces. Set up ebtables ACL's on br0 to permit traffic from any MAC address to br0's MAC, from br0's MAC to anything and then explicitly block all other traffic. You may want to apply ACL's directly on the subinterfaces to allow for greater customization.

share|improve this answer

I'm using CentOS 6.3 but for Ubuntu you will need to do a few changes. All the interface configurations go in a single file in the case of Ubuntu.

This link may be useful:

share|improve this answer
While this link may answer the question, it is better to include the essential parts of the answer here and provide the link for reference. Link-only answers can become invalid if the linked page changes. – Michael Hampton Nov 26 '12 at 22:08

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.