Bridging VLANs
-
My issue is on a XG-7100. I have some network components right aside the Firewall and also the WAN-router but the rest of the network is linked through optical. I would like to trunk all VLANs I have on the switch ports also through the IX1 to link the optical fiber.
My first idea was to add interface ix1 as a port on the switch which is naturally not possible as the ports are linked to ix2 and ix3 through a LAGG.
Then the next idea is to make new interfaces for the optical fiber and then bridge the corresponding VLANs. So far so good I can then receive an IP from the corresponding VLANs when setting up the switch ports accordingly. I also bridged and trunked the LAN which works great.
BUT: when I try to access Internet on a VLAN (all firewall rules open any on both interfaces + the bridge interface) I realize I have no Internet access (which I have on the LAN and the OF_LAN). When checking the firewall rules, I realise that even if I am on a VLAN, the request is processed by the rule on the bridge_LAN interface (yeah, I also changed the tunables: net.link.bridge.pfil_bridge=1 and net.link.bridge.pfil_member=0) and is passed (for example a ping 8.8.8.8) but no response is received.
Of course if I can make my trunk another way than using bridges I would be glad but now I really don't have any idea on how to solve this.