Questions tagged [vlan]
Group of hosts with a common set of requirements connected as if on the same broadcast domain despite physical location
1,217
questions
0
votes
1
answer
47
views
Linux: bridge vs. vlan vs. tcpdump
I have a Proxmox host with kernel 5.15.19-2-pve.
It has a bond0 interface made from eth2 and eth3, which receives vlan tagged traffic.
I created a vmbr666 bridge that shows looks like this:
# /etc/...
- 641
0
votes
0
answers
3
views
OpenSwan GW not routing VLAN traffic through tunnel
I do have a tunnel configured using OpenSwan on a side and libreswan on the other.
The issue seems to be on the openswan side, where I do have 2 subnets, one for the main interface, the other is on a ...
- 1
0
votes
0
answers
27
views
Is VLAN "running/managed" on a computer accessable from outside [closed]
VLAN
I(VLAN newbie) am trying to separate and managing information technology systems in a business environment network and I thought that VLAN was handled by the router.
I found that I can create a ...
- 149
0
votes
0
answers
17
views
How to block non vlan traffic for an ip address on linux
I have a vlan created on a Linux vm and assigned ip address to it.I would like to block all incoming traffic to the IP address that is not coming from the same vlan I would still like to able to send ...
- 1
0
votes
0
answers
20
views
Migrating DHCP clients to new subnet using DHCP superscope?
I am migrating our dynamically addressed DHCP clients to a new subnet due to requirements coming from the higher ups. I am thinking of doing it like so:
1. Create new scope on DHCP server (Server 2019 ...
- 1
0
votes
0
answers
52
views
Cannot connect macvlan to the internet
When I tried to connect macvlan to the internet and it was not successful.
I used namespace to accomplish that. I also checked the comments on this question - How to connect macvlan to the internet?
I ...
- 1
0
votes
1
answer
69
views
802.1q multicast blocked by Cisco router
We are using Cisco Catalyst 1000 switch (C100-16P-2G-L to be precise) and having a trouble of passing tagged multicast from one its port to another.
We would like to pass it as it is (tagged), I ...
- 155
0
votes
0
answers
41
views
Configured routing tables not used by virtual interfaces (vlan)
I need PC1 to be able to communicate with PC2 through two vlan (configured on two virtual interface). Each of them having a gateway configured to communicate with a different subnet.
Here is the ...
- 11
0
votes
1
answer
43
views
Routing different subnets on a switch
My setup:
I have a layer 2 managed 7-port Ethernet switch (KSZ9897). The switch features dot1Q (VLAN) and dot1X (ACL). ACL is advertised to be able to filter on layer 3 (IP) and 4 (TCP/UDP).
Is it ...
- 21
1
vote
1
answer
46
views
Increasing MTU size
Why would increasing the VLAN MTU size cause things to break?
We have a customer who wants 2000 byte packets for some reason, so I increased all the physical links to 9216, which didn't cause any ...
- 93
0
votes
1
answer
29
views
Trunking between two Cisco 3750s to another desktop switch
So I'm trying to scrape all the memory I have from college where we used Cisco almost a decade ago, but I haven't touched them since then. I'm trying to clean up our internal network a little bit ...
0
votes
0
answers
24
views
Captive Portal Redirection with Bridged VLAN Setup
Background
I have configured OpenWRT in the Bridge Mode.
I push the packets from L2 to L3 using net.bridge.bridge-nf-call-iptables=1
Untagged Packets Scenario
In the case of untagged packets, this ...
0
votes
2
answers
29
views
Do routers need to have assigne IP from given VLAN to foward VLAN packages?
(sorry for my basic question but I had noone to ask)
Does routers/smart-switches that foward/pass vlan packets inside same network need to have assign IP from that given VLAN that they foward packets (...
0
votes
0
answers
155
views
DNSMASQ DHCP with Multiple VLANS --- How to identify the originating VLAN?
I'm curious as to what best practice would be when serving DHCP to multiple VLANs from a single DNSMASQ instance.
(The DNSMASQ server is a KVM guest.)
Do I:
A: Create a virtual NIC on the DNSMASQ ...
- 724
1
vote
1
answer
41
views
Am I still limited to gigabit speed if the file transfer is happening between same VLAN on the same physical ethernet port and same host machine?
Consider the following:
Gigabit Switch port16 configured to have native network of VLAN10 (192.168.10.x) and tagged VLAN20 (192.168.20.x) and VLAN30. This port is plugged into proxmox machine.
Proxmox ...
- 113
0
votes
1
answer
63
views
Routing Issue: Cannot reach target server from local network
1. my setup:
I've got an optical fibre ZTE router from my ISP for internet and telephone.
My old analog phone is connected directly to the router using the dedicated phone port on my router.
(For ...
0
votes
0
answers
26
views
Policy Based Routing, why do I need another default route?
Using this tutorial I set up a server which receives a tagged VLAN trunk. I distribute the individual VLANs to various bridges for different purposes e.g., virtual machines. The following configures ...
- 271
0
votes
1
answer
62
views
freeradius and openldap : vlan attribution working with radtest but not with wpa_supplicant
Both of my services freeradius and openldap are on the same server. The schema Freeradius is loaded into openldap.
I configured the radiusProfileDN of a user to link to a group. In this group, I have ...
- 11
1
vote
1
answer
50
views
How to configure NetBSD to accept vlan tagged packets
I am trying to set up a NetBSD install with a static ip that is on a vlan. The router is set up to only allow other vlans to access this vlan, but not the other way around. So the NetBSD install ...
- 11
0
votes
0
answers
38
views
PfSense: VLAN configuation
I have some problem in making VLAN working.
My configuration is pretty simple: I have an esx host where I have created a port group for VLAN10. On that host I have pfsense and a windows VM .
PfSense ...
1
vote
1
answer
54
views
2 Remote Sites, 2 Different Subnets, with interconnectivity. How to create a single subnet for servers at both locations?
Current Environment:
We currently have 2 remote sites, both with their own LAN subnet and servers hosted at each site. Currently each site is using 1 subnet for the clients and servers. Both sites are ...
- 285
0
votes
0
answers
209
views
How to create VLAN in ZTE ZXHN H298A Router
I have a router / modem called ZTE ZXHN H298A V1.0 TTN.19T4_210317.
I'm sharing my network with neighbours but I want to capsule my network and/or the guests network to protect my local network. So I ...
0
votes
1
answer
52
views
No Access to Cisco ESA from different VLAN
I am in the process to migrate to separate Vlans from a single 10.1.0.0/16 subnet on VLAN1
In the existing /16 subnet is our Cisco Mail Security (ESA).
In a new Vlan Segment for clients (10.101.10.0/...
- 73
1
vote
1
answer
38
views
Tips for managing safe and insecure PC mixes [closed]
There are two buildings connected by an optical fiber, each with 3-10 PCs but in a mix of PCs used in a business context and some in homes.
Unfortunately, when the network was designed years ago, no ...
- 23
1
vote
1
answer
27
views
vlan routing redirected by remote change?
We are replacing a Juniper EX4200 stack with a new EX3400 stack. During the migration, we setup a bridge link between the two so that things that hadn't migrated yet could talk to things that had. ...
- 93
1
vote
0
answers
240
views
Filtering traffic by MAC address with nftables
TL;DR: when spoofing MAC addresses, how can I make sure the real addresses won't be leaked to the rest of the network using nftables ?
Context
For network security training purposes I am currently ...
- 457
1
vote
0
answers
213
views
Multiple vlans on same interface in the same subnet
In a device application we use the following VLAN network setup:
In the device we have an internal network for internal devices and an external network for the customer / customer network. All devices ...
- 11
1
vote
1
answer
76
views
NAT Packet goes out on wrong Gateway
I've two interfaces, let's say eth0 and eth0.4000 as vlan.
Both have a default-gateway.
Everything works as expected when a process listens on the interface directly.
But not for hostPort bindings of ...
- 133
0
votes
2
answers
84
views
Gateway with multiple VLAN IPs on one NIC
I would like to separate several hosts from the local network and put them behind a firewall. I would like to use VLANs to "physically" separate them instead of using just different subnets. ...
- 97
0
votes
1
answer
43
views
How to switch linux interface to trunk-only mode?
I'm trying to configure linux interface into trunk-only mode, that means 'accept only vlan-tagged traffic', and most importantly, ignore all untagged traffic.
I'm pretty successful at having tagged ...
- 226
1
vote
1
answer
389
views
How can I MASQUERADE between vlan bridges
I have created two VLAN bridges in openwrt based system which has single physical interface.
*) eth0->lan->br-lan
*) br-lan->br-lan.2(VLAN INTF)->br-vlan2(BRIDGE INTF)
*) br-lan->br-lan....
- 11
0
votes
0
answers
195
views
Issues with VLANs on Linux. Can ping hosts in other VLAN
When I configure an ip address on a vlan interface from another vlan subnet, I can reach that other vlan subnet. But it should not be reachable.
For example:
On the switch, the port is configured as ...
- 1
0
votes
0
answers
22
views
vconfig rem disturbs adding VLAN IP to UBUNTU
after removing a VLAN IP by using "vconfig rem ...", adding a VLAN IP and related sub-VLAN IPs is not working correctly. in other words, intended VLAN is added but after a while it is not ...
0
votes
0
answers
239
views
Pfsense : using the server to resolve hostnames as ip in local vlans
I made a network with 3 machines, one is a pfsense server that manage a captive portal, a dns, dhcp server and firewall rules, it is in a trunk network. The second pc is a server hosting some services ...
0
votes
1
answer
57
views
Unable to access webserver on internal network either via domain or ip address
I am currently trying to set up a FortiGate 40F firewall. But somehow I am unable to get access to the server from the same network going via the external IP or domain.
I got a VLAN set as 10.0.4.x ...
0
votes
1
answer
74
views
Mix Switch Managed and Unmanaged. What happen?
I would like to ask your opinion on this scenario.
There is a switch "A" is of the Managed type, on its ports the TAG VLAN # 100 is assigned.
Switch "B" is connected to one of ...
- 23
1
vote
1
answer
274
views
802.1q vlan naming in Debian 10
Upgrading router and facing problem VLAN interfaces does not go up (error "Unknown interface" if perform 'ifup vlanxxx') if vlans are defined in following manner:
auto vlanxxx
iface vlanxxx ...
- 121
0
votes
0
answers
231
views
PFsense High-Availability - issues with sync of VLAN interface
So I am trying to build a firewall with a primary and secondary, High-Availability structure. I have configured each of these 2 VirtualBox VMs in GNS3 to connect to each other (for a SYNC) interface, ...
0
votes
1
answer
137
views
Windows Server 2016 DHCP Issue (Reserved IPs, Static & DHCP)
I've got a problem thats driving me nuts now.
I've got my DHCP server set up to provide addresses over a number of different VLANs.
On the main Processing VLAN the lease time is set to 15 mins, after ...
0
votes
0
answers
59
views
DHCPv6 with ISC
I am building a network and I got stuck while setting up the DHCPv6 Server with isc. I was looking in internet for any documentations, but wasn't able to find anything. I created 2 test vlans - Vlan5 ...
- 1
0
votes
0
answers
28
views
When using port monitoring for packet capture, capture machine gets messed up IPv6 addresses
I'm using the "port monitoring" aka "port mirroring" feature of a managed switch to do Wireshark packet captures of network traffic. The traffic I'm monitoring is on a separate sub-...
- 690
1
vote
1
answer
31
views
VLAN Inner Talking
I kinda forgot about CISCO in general, it had been quite a while since I last touched packet tracer. Now I'm on the PRE-deployment phase of a network at work. Long story short.
-I made 2 VLAN on CISCO ...
- 11
0
votes
0
answers
65
views
I Setup A VLAN. Now what?
I have setup a VLAN (I think), and can't figure out how to use it. A basic description of my setup is:
EdgeRouter PoE5:
eth0 is PPPoE WAN interface to DSL modem in bridge mode
eth1 is unused with its ...
- 1
0
votes
1
answer
329
views
Having one ESXI VM serve DHCP addresses for two VLANs?
In our office, I want to create two different networks. Depending on which LAN socket a cable is plugged in, I want the device to receive an IP in a different subnet.
I have a server running VMWare ...
- 171
0
votes
0
answers
24
views
How do i translate the same configuration from this TPLINK router config to OPNsense
So I'm trying to connect to PPPOE but they had this config to do which i don't know how to translate to OPNsense
The initial configuration:(click on the link to see it)
https://user-images....
0
votes
2
answers
81
views
Can I segment my network based on two different criteria?
I work at a school with several campuses and I would like to segment my network with VLANs. So, phones on one vlan, printers on another, etc. I was thinking it would be nice to segment by campus, as ...
0
votes
0
answers
203
views
Cisco Access point. Freeradius. Dynamic VLAN assignment. DHCP fail to obtain address
I have a configuration from topic.
Two VLAN 102 and 110.
dot11 ssid test1
vlan 110
authentication open eap wifi_login
authentication network-eap wifi_login
authentication key-management ...
- 103
0
votes
1
answer
143
views
iSCSI separation from Ethernet via VLAN
I've set up a small cluster of a few servers along with a SAN. The servers are running Ubuntu 20.04 LTS.
Using instructions provided by the vendor (I can't find where I read it before), they ...
- 168
1
vote
0
answers
345
views
How to configure a hypervisor such that a KVM/QEMU virtual machine can reach hosts connected to the same trunk bridge?
1 Problem
My goal is that all LAN traffic is routed through a virtual machine (VM) acting as a router and firewall. Other VMs on the same hypervisor should also be routed through the firewall VM. See ...
- 11
0
votes
0
answers
242
views
Why does the order of network connections in my client machine's /etc/network/interfaces matter to my router?
I have a virtual machine running Debian 11, and it needs to connect to two VLANs. From within the building on the local network, I can access it fine through both IPs, but when I'm outside the network ...
