Changes between Version 3 and Version 4 of TipAndDoc/Linux/OpenWRT/vlan

Timestamp:

May 1, 2013 1:14:02 AM (11 years ago)

Author:

mitty

Comment:

--

TipAndDoc/Linux/OpenWRT/vlan

@@ -494 +494 @@
                                                         eth1
 }}}
+
+ == Bridging eth1 to VLAN network ==
+ * 基本的なコンセプトは wiki:TipAndDoc/network/vlan#BridgingVLAN の概念図を参照
+ 
+ * AG300H:/etc/config/network
+{{{
+config interface 'lan'
+        option ifname 'eth0.0'
+        option proto 'static'
+        option netmask '255.255.255.0'
+        option ipaddr '192.168.0.1'
+
+config interface 'onu'
+        option ifname 'eth0.2 eth1'
+        option type 'bridge'
+        option proto 'none'
+        option auto '1'
+
+config interface 'wan'
+        option ifname 'br-onu'
+        option proto 'pppoe'
+
+config switch
+        option name 'eth0'
+        option reset '1'
+        option enable_vlan '1'
+
+config switch_vlan
+        option device 'eth0'
+        option vlan '0'
+        option ports '0 1 2 3 4'
+
+config switch_vlan
+        option device 'eth0'
+        option vlan '2'
+        option ports '0t 1t 2t 3t 4t'
+}}}
+ * 以下の様なネットワークになる[[br]][[Image(br-onu-vlan-2.png,33%)]]
+  * [前述の通り、NAPTによってPPPoEに抜けるには{{{eth0}}}ではなく{{{eth0.0}}}を指定する点に注意
+  * mitty@AG300H:~$ ifconfig
+{{{
+br-onu    Link encap:Ethernet  HWaddr 00:24:XX:YY:ZZ:74
+
+eth0      Link encap:Ethernet  HWaddr 00:24:XX:YY:ZZ:74
+
+eth0.0    Link encap:Ethernet  HWaddr 00:24:XX:YY:ZZ:74
+          inet addr:192.168.0.1  Bcast:192.168.0.255  Mask:255.255.255.0
+
+eth0.2    Link encap:Ethernet  HWaddr 00:24:XX:YY:ZZ:74
+
+eth1      Link encap:Ethernet  HWaddr 00:24:XX:YY:ZZ:76
+
+pppoe-wan Link encap:Point-to-Point Protocol
+          inet addr:114.159.64.161  P-t-P:118.23.8.36  Mask:255.255.255.255
+}}}
+  * mitty@AG300H:~$ brctl show
+{{{
+bridge name     bridge id               STP enabled     interfaces
+br-onu          8000.0024xxyyzz74       no              eth0.2
+                                                        eth1
+}}}
+  * mitty@vlan-node:~$ ifconfig
+{{{
+eth0      Link encap:Ethernet  HWaddr 00:16:3e:c9:70:da
+          inet addr:192.168.0.166  Bcast:192.168.0.255  Mask:255.255.255.0
+
+eth0.2    Link encap:Ethernet  HWaddr 00:16:3e:c9:70:da
+          inet6 addr: 2408:211:c083:6a00:a9b0:b00:786e:d38/64 Scope:Global
+          inet6 addr: 2408:211:c083:6a00:216:3eff:fec9:70da/64 Scope:Global
+}}}
+
+ === check connection with untagged packet ==
+ * mitty@vlan-node:~$ ping 8.8.8.8 -c 2
+{{{
+PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
+64 bytes from 8.8.8.8: icmp_req=1 ttl=55 time=9.06 ms
+64 bytes from 8.8.8.8: icmp_req=2 ttl=55 time=8.42 ms
+
+--- 8.8.8.8 ping statistics ---
+2 packets transmitted, 2 received, 0% packet loss, time 1001ms
+rtt min/avg/max/mdev = 8.424/8.742/9.060/0.318 ms
+}}}
+
+ * mitty@vlan-node:~$ sudo tcpdump -e -n -i eth0 icmp or icmp6
+{{{
+00:08:01.470667 00:16:3e:c9:70:da > 00:24:xx:yy:zz:74, ethertype IPv4 (0x0800), length 98: 192.168.0.166 > 8.8.8.8: ICMP echo request, id 543, seq 1, length 64
+00:08:01.479684 00:24:xx:yy:zz:74 > 00:16:3e:c9:70:da, ethertype IPv4 (0x0800), length 98: 8.8.8.8 > 192.168.0.166: ICMP echo reply, id 543, seq 1, length 64
+00:08:02.471963 00:16:3e:c9:70:da > 00:24:xx:yy:zz:74, ethertype IPv4 (0x0800), length 98: 192.168.0.166 > 8.8.8.8: ICMP echo request, id 543, seq 2, length 64
+00:08:02.480355 00:24:xx:yy:zz:74 > 00:16:3e:c9:70:da, ethertype IPv4 (0x0800), length 98: 8.8.8.8 > 192.168.0.166: ICMP echo reply, id 543, seq 2, length 64
+}}}
+
+ * mitty@AG300H:~$ sudo tcpdump -e -n -i eth0 icmp or icmp6
+{{{
+00:08:01.470621 00:16:3e:c9:70:da > 00:24:xx:yy:zz:74, ethertype IPv4 (0x0800), length 98: 192.168.0.166 > 8.8.8.8: ICMP echo request, id 543, seq 1, length 64
+00:08:01.479326 00:24:xx:yy:zz:74 > 00:16:3e:c9:70:da, ethertype IPv4 (0x0800), length 98: 8.8.8.8 > 192.168.0.166: ICMP echo reply, id 543, seq 1, length 64
+00:08:02.471803 00:16:3e:c9:70:da > 00:24:xx:yy:zz:74, ethertype IPv4 (0x0800), length 98: 192.168.0.166 > 8.8.8.8: ICMP echo request, id 543, seq 2, length 64
+00:08:02.479991 00:24:xx:yy:zz:74 > 00:16:3e:c9:70:da, ethertype IPv4 (0x0800), length 98: 8.8.8.8 > 192.168.0.166: ICMP echo reply, id 543, seq 2, length 64
+}}}
+
+ === check connection with tagged packet ===
+ * mitty@vlan-node:~$ ping6 flets-east.jp -c 2
+{{{
+PING flets-east.jp(2404:1a8:ff06::1) 56 data bytes
+64 bytes from 2404:1a8:ff06::1: icmp_seq=1 ttl=57 time=4.42 ms
+64 bytes from 2404:1a8:ff06::1: icmp_seq=2 ttl=57 time=4.79 ms
+
+--- flets-east.jp ping statistics ---
+2 packets transmitted, 2 received, 0% packet loss, time 1001ms
+rtt min/avg/max/mdev = 4.425/4.611/4.798/0.198 ms
+}}}
+
+ * mitty@AG300H:~$ sudo tcpdump -e -n -i eth0 icmp or icmp6
+{{{
+00:12:11.795479 00:16:3e:c9:70:da > 00:12:e2:70:52:04, ethertype 802.1Q (0x8100), length 122: vlan 2, p 0, ethertype IPv6, 2408:211:c083:6a00:a9b0:b00:786e:d38 > 2404:1a8:ff06::1: ICMP6, echo request, seq 1, length 64
+00:12:11.799675 00:12:e2:70:52:04 > 00:16:3e:c9:70:da, ethertype 802.1Q (0x8100), length 122: vlan 2, p 0, ethertype IPv6, 2404:1a8:ff06::1 > 2408:211:c083:6a00:a9b0:b00:786e:d38: ICMP6, echo reply, seq 1, length 64
+00:12:12.797123 00:16:3e:c9:70:da > 00:12:e2:70:52:04, ethertype 802.1Q (0x8100), length 122: vlan 2, p 0, ethertype IPv6, 2408:211:c083:6a00:a9b0:b00:786e:d38 > 2404:1a8:ff06::1: ICMP6, echo request, seq 2, length 64
+00:12:12.801717 00:12:e2:70:52:04 > 00:16:3e:c9:70:da, ethertype 802.1Q (0x8100), length 122: vlan 2, p 0, ethertype IPv6, 2404:1a8:ff06::1 > 2408:211:c083:6a00:a9b0:b00:786e:d38: ICMP6, echo reply, seq 2, length 64
+}}}
+
+ * mitty@vlan-node:~$ sudo tcpdump -e -n -i eth0 icmp or icmp6
+{{{
+00:12:11.793550 00:16:3e:c9:70:da > 00:12:e2:70:52:04, ethertype 802.1Q (0x8100), length 122: vlan 2, p 0, ethertype IPv6, 2408:211:c083:6a00:a9b0:b00:786e:d38 > 2404:1a8:ff06::1: ICMP6, echo request, seq 1, length 64
+00:12:11.797929 00:12:e2:70:52:04 > 00:16:3e:c9:70:da, ethertype 802.1Q (0x8100), length 122: vlan 2, p 0, ethertype IPv6, 2404:1a8:ff06::1 > 2408:211:c083:6a00:a9b0:b00:786e:d38: ICMP6, echo reply, seq 1, length 64
+00:12:12.795197 00:16:3e:c9:70:da > 00:12:e2:70:52:04, ethertype 802.1Q (0x8100), length 122: vlan 2, p 0, ethertype IPv6, 2408:211:c083:6a00:a9b0:b00:786e:d38 > 2404:1a8:ff06::1: ICMP6, echo request, seq 2, length 64
+00:12:12.799942 00:12:e2:70:52:04 > 00:16:3e:c9:70:da, ethertype 802.1Q (0x8100), length 122: vlan 2, p 0, ethertype IPv6, 2404:1a8:ff06::1 > 2408:211:c083:6a00:a9b0:b00:786e:d38: ICMP6, echo reply, seq 2, length 64
+}}}
+
+ * 期待通り、VLANを通してONU側のNTT NGN網へ抜けている