Bridging VLANs in hardware switch for ATT fiber authenication (built in switches on SG-3100 and others)
-
The hardware switch on the LAN ports in the SG-3100 (and possibly other Netgate switches) is the Marvell 88E6141. This switch supports all VLAN VIDs (including hardware tagging of VID 0 even thorugh the PGSense gui won't allow it). It also has a TCAM to do line speed packet inspection for redirection of 802.1X frames and rewriting VLAN tags.
The entire requiremnt for redirecton of 802.1X to a modem port and rewriting frames with VID 0, PCP 1 can be done in swicch hardware with no software overhead.
I would like to work on making this work.
Is there a way to override the GUI to set up VLAN 0?
Is there a way to read and write the switch clause 22 registers so a register configuration can be transfered? The TCAM registers are mailboxed and also require waiting for a busy bit to clear.