Re: Bridging a vlan trunk with a gif tunnel?

2018-04-01 Thread Eugene Grosbein
02.04.2018 4:10, Hauke Fath wrote: >> or switch to newer vxlan(4). > > That wouldn't work with the switches, would it, like vlans? vxlan is not instead of vlans, it is instead of gifs vxlan is designed to pass trunks over routed network forming its own tunnel. Just read its manual page. >>> and

Re: crash with ipfw nat on mips32

2018-04-01 Thread Adrian Chadd
hi, We figured it out today - gcc + no-arch-specific builtin bug. :-) cognet and I are sorting through that stuff at the moment and should land a fix in -HEAD soon. Thanks! -adrian On 28 March 2018 at 02:20, Andrey V. Elsukov wrote: > On 23.03.2018 20:07, Adrian Chadd wrote: >> Hi! >> >>

Re: Bridging a vlan trunk with a gif tunnel?

2018-04-01 Thread Hauke Fath
On Sun, 1 Apr 2018 22:58:36 +0700, Eugene Grosbein wrote: > 01.04.2018 21:42, Hauke Fath wrote: > >> I am trying to network a remote site with a main site through a bridged >> gif tunnel, and it doesn't work for me. > > gif(4) supports only untagged frames when added to a bridge. Well, as I sa

Problem reports for freebsd-net@FreeBSD.org that need special attention

2018-04-01 Thread bugzilla-noreply
To view an individual PR, use: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=(Bug Id). The following is a listing of current problems submitted by FreeBSD users, which need special attention. These represent problem reports covering all versions including experimental development code and ob

[Bug 195197] [netinet6] ipv6 prefix not renewed when managed by userspace daemon with pltime and vltime

2018-04-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=195197 --- Comment #7 from guy...@gmail.com --- It fixes the example but there is another scenario that still panics. # set static ula so can access host even if router is down ifconfig vtnet0 inet6 fdXX:: eui64 # enable accept_rtadv to learn glo

Re: [netgraph] ng_bpf filter large list of IP addresses

2018-04-01 Thread Eugene Grosbein
31.03.2018 20:46, Reshad Patuck wrote: ​ > Please let me know what I am doing wrong with the ngctl config file and > if there is another way, maybe something more direct to load a binary bpf > filter directly into ng_bpf. There is also netgraph(3) - Netgraph User Library. You can use it within y

Re: [netgraph] ng_bpf filter large list of IP addresses

2018-04-01 Thread Eugene Grosbein
01.04.2018 23:19, Reshad Patuck wrote: > Yes I do remove the \" and replace it with just " in the file I use with the > `ngctl -f` command. > ​ > Here is the link to the file and everything that I am using to setup the BPF > program. > ​ > https://paste.ee/p/BHOoG > ​ > It contains the following

Re: [netgraph] ng_bpf filter large list of IP addresses

2018-04-01 Thread Reshad Patuck
Hi Eugene, ​ Yes I do remove the \" and replace it with just " in the file I use with the `ngctl -f` command. ​ Here is the link to the file and everything that I am using to setup the BPF program. ​ https://paste.ee/p/BHOoG ​ It contains the following: - ngtl-command -> the ngctl command which r

Re: Bridging a vlan trunk with a gif tunnel?

2018-04-01 Thread Eugene Grosbein
01.04.2018 21:42, Hauke Fath wrote: > I am trying to network a remote site with a main site through a bridged > gif tunnel, and it doesn't work for me. gif(4) supports only untagged frames when added to a bridge. You need to create gif-per-vlan or switch to newer vxlan(4). > In the past, I hav

Re: Bridging a vlan trunk with a gif tunnel?

2018-04-01 Thread Hauke Fath
On Sun, 1 Apr 2018 16:42:09 +0200, Hauke Fath wrote: > In short, the main router vlan interfaces do not see traffic coming to > their trunk via gif and bridge, nor can they send traffic that way. In the light of , I have r

Re: Bridging a vlan trunk with a gif tunnel?

2018-04-01 Thread Hauke Fath
On Sun, 1 Apr 2018 16:42:09 +0200, Hauke Fath wrote: > The main site runs a filtering router (freebsd 11, pf) to connect a > dozen subnets via vlans over an ix(4) trunk. The router serves dhcp to > several of those subnets. The trunk is bridged to the gif tunnel > interface: FTR: %ifconfig bri

Bridging a vlan trunk with a gif tunnel?

2018-04-01 Thread Hauke Fath
Hi, I am trying to network a remote site with a main site through a bridged gif tunnel, and it doesn't work for me. The if_bridge(4) man page sounds deceptively easy. Browsing the web, what came up didn't help; sounded

Re: [netgraph] ng_bpf filter large list of IP addresses

2018-04-01 Thread Eugene Grosbein
01.04.2018 15:36, Reshad Patuck пишет: > Hi Eugene, > ​ > Thanks for your quick reply. > ​ > The issue that I am facing is for a list of 250 IP addresses, I can generate > a bpf filter that works when I specify it on the command line. > ``` > # ngctl msg em1-bpf: setprogram { thisHook=\"in\" ifMat

Re: [netgraph] ng_bpf filter large list of IP addresses

2018-04-01 Thread Reshad Patuck
Hi Eugene, ​ Thanks for your quick reply. ​ The issue that I am facing is for a list of 250 IP addresses, I can generate a bpf filter that works when I specify it on the command line. ``` # ngctl msg em1-bpf: setprogram { thisHook=\"in\" ifMatch=\"out\" bpf_prog_len=258 bpf_prog=[ { code=40 jt=0