I have a really specific question for a trunk-testing environment. I have this network setup:
+------------+ +------------+ | | +-----+ | | | eth0 +----+ br0 +----+ eth0 | | | +-+---+ | | | Guest1 | | | Guest2 | | | +-----+ | | | eth1 +----+ br1 +----+ eth1 | | | +---+-+ | | +------------+ | | +------------+ +-+-+--+ | Host | +------+
The KVM host serves two bridge for the guest machines (/etc/network/interfaces):
auto br0 iface br0 inet manual bridge_ports none bridge_fd 0 bridge_stp off auto br1 iface br1 inet manual bridge_ports none bridge_fd 0 bridge_stp off
The guest machines connect to the switches with this configuration:
# Actual interfaces allow-hotplug eth0 eth1 iface eth0 inet manual iface eth1 inet manual # Internet facing network auto eth0.100 eth1.100 iface eth0.100 inet manual iface eth1.100 inet manual auto bond0 iface bond0 inet manual bond_mode active-backup bond_miimon 200 bond_downdelay 200 bond_updelay 200 # Something I found to make the active secondary slave listening post-up echo 1 > /sys/devices/virtual/net/bond0/bonding/all_slaves_active slaves eth0.100 eth1.100 auto bond0.1 address 10.110.0.10x netmask 255.255.0.0 # Please don't ask why the three vlan is needed. # The bonding works only if these three are defined :\
Now my problem is the following:
The default primary slave is the eth0.100 interface on both guest. If I shut down the primary slave with the following command
$ ip link set eth0.100 down
The link goes down according to "ip link", the bond changes the primary slave, yet packets are accepted on the inactive interface. (I found it out by running "tshark -i eth1.100" and only the ping-reply messages were shown.)
If I close down the interface on the host machine, the whole communication stops between the guests. Even the bond does not recognize the change.
- I have no IPTables/EBTables rule to block packages on this interface
- I know the broadcast mode would help with all my problems, although I think it makes the communication between the two guests bloated. I'd rather not use that option.
- Why doesn't "ip link set ... down" close down the link?
- Is it possible, that meddling with all_slaves_active somehow interferes with the interface status?
- Is there any option I might slipped over, which makes the active-backup aware of the interface change?
- (And why do I need the three VLAN to make the bonding work?)
Any reply is appreciated.