• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Problem with 2nd vlan on lagg dot1q vlan interface

Scheduled Pinned Locked Moved 2.0-RC Snapshot Feedback and Problems - RETIRED
6 Posts 3 Posters 3.7k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • V
    Vk2hmc
    last edited by May 25, 2011, 7:33 PM May 25, 2011, 7:20 PM

    This is a supposedly standard configuration. I am using a lagg etherchannel to trunk 2 vlans.

    Been trying to track down a problem with one of the vlans.

    I have spent many many hours on this and it won’t work.

    I think I better ask for help!

    pfsense ips:
    vlan160 192.168.160.2/24
    vlan120 172.16.120.2/29

    Cisco svi ips:
    vlan160 192.168.160.1/24
    vlan120 172.16.120.1/29

    pfsense end of lacp dot1q link:

    arp table:
    ? (192.168.160.2) at 00:0d:60:f3:15:cc on lagg0_vlan160 permanent [vlan]
    ? (172.16.120.1) at 00:0d:65:c8:78:7f on lagg0_vlan120 expires in 227 seconds [vlan]
    pfsense (172.16.120.2) at 00:0d:60:f3:15:cc on lagg0_vlan120 permanent [vlan]

    ifconfig:
    bge0: flags=8943 <up,broadcast,running,promisc,simplex,multicast>metric 0 mtu 1500
           options=8009b <rxcsum,txcsum,vlan_mtu,vlan_hwtagging,vlan_hwcsum,linkstate>ether 00:0d:60:f3:15:cc
           inet6 fe80::20d:60ff:fef3:15cc%bge0 prefixlen 64 scopeid 0x5
           nd6 options=3 <performnud,accept_rtadv>media: Ethernet autoselect (1000baseT <full-duplex>)
           status: active
    bge1: flags=8943 <up,broadcast,running,promisc,simplex,multicast>metric 0 mtu 1500
           options=8009b <rxcsum,txcsum,vlan_mtu,vlan_hwtagging,vlan_hwcsum,linkstate>ether 00:0d:60:f3:15:cc
           inet6 fe80::20d:60ff:fef3:15cd%bge1 prefixlen 64 scopeid 0x6
           nd6 options=3 <performnud,accept_rtadv>media: Ethernet autoselect (1000baseT <full-duplex>)
           status: active
    lagg0: flags=8943 <up,broadcast,running,promisc,simplex,multicast>metric 0 mtu 1500
           options=8009b <rxcsum,txcsum,vlan_mtu,vlan_hwtagging,vlan_hwcsum,linkstate>ether 00:0d:60:f3:15:cc
           inet6 fe80::20d:60ff:fef3:15cc%lagg0 prefixlen 64 scopeid 0xb
           nd6 options=3 <performnud,accept_rtadv>media: Ethernet autoselect
           status: active
           laggproto lacp
           laggport: bge1 flags=1c <active,collecting,distributing>laggport: bge0 flags=1c <active,collecting,distributing>lagg0_vlan120: flags=8943 <up,broadcast,running,promisc,simplex,multicast>metric 0 mtu 1500
           options=3 <rxcsum,txcsum>ether 00:0d:60:f3:15:cc
           inet6 fe80::230:6eff:fe46:a9dc%lagg0_vlan120 prefixlen 64 scopeid 0xc
           inet 172.16.120.2 netmask 0xfffffff8 broadcast 172.16.120.7
           nd6 options=3 <performnud,accept_rtadv>media: Ethernet autoselect
           status: active
           vlan: 120 parent interface: lagg0
    lagg0_vlan160: flags=108843 <up,broadcast,running,simplex,multicast,ipfw_filter>metric 0 mtu 1500
           options=3 <rxcsum,txcsum>ether 00:0d:60:f3:15:cc
           inet6 fe80::230:6eff:fe46:a9dc%lagg0_vlan160 prefixlen 64 scopeid 0xd
           inet 192.168.160.2 netmask 0xffffff00 broadcast 192.168.160.255
           nd6 options=3 <performnud,accept_rtadv>media: Ethernet autoselect
           status: active
           vlan: 160 parent interface: lagg0

    Switch end of dot1q lacp:
    sh arp
    Protocol  Address          Age (min)  Hardware Addr   Type   Interface
    Internet  172.16.120.1            -   000d.65c8.787f  ARPA   Vlan120
    Internet  172.16.120.2            5   000d.60f3.15cc  ARPA   Vlan120
    Internet  192.168.160.1           -   000d.65c8.787f  ARPA   Vlan160

    c4506(config-if)#do sh  int po45
    Port-channel45 is up, line protocol is up (connected)
     Hardware is EtherChannel, address is 000d.ed0a.ac2c (bia 000d.ed0a.ac2c)
     MTU 1500 bytes, BW 2000000 Kbit, DLY 10 usec,
        reliability 255/255, txload 1/255, rxload 1/255
     Encapsulation ARPA, loopback not set
     Keepalive set (10 sec)
     Full-duplex, 1000Mb/s, media type is N/A
     input flow-control is on, output flow-control is unsupported
     Members in this channel: Gi2/45 Gi2/46
     ARP type: ARPA, ARP Timeout 04:00:00
     Last input never, output never, output hang never
     Last clearing of "show interface" counters never
     Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 0
     Queueing strategy: fifo
     Output queue: 0/40 (size/max)
     5 minute input rate 1695000 bits/sec, 158 packets/sec
     5 minute output rate 60000 bits/sec, 87 packets/sec
        47514206 packets input, 31299672513 bytes, 0 no buffer
        Received 48757 broadcasts (20806 multicasts)
        0 runts, 0 giants, 0 throttles
        0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
        0 input packets with dribble condition detected
        42130817 packets output, 28239898431 bytes, 0 underruns
        0 output errors, 0 collisions, 0 interface resets
        0 babbles, 0 late collision, 0 deferred
        0 lost carrier, 0 no carrier
        0 output buffer failures, 0 output buffers swapped out

    interface Port-channel45
    switchport
    switchport trunk encapsulation dot1q
    switchport trunk native vlan 666
    switchport mode trunk
    switchport nonegotiate
    spanning-tree portfast trunk
    !
    interface GigabitEthernet2/45
    switchport trunk encapsulation dot1q
    switchport trunk native vlan 666
    switchport mode trunk
    switchport nonegotiate
    channel-protocol lacp
    channel-group 45 mode passive
    !
    interface GigabitEthernet2/46
    switchport trunk encapsulation dot1q
    switchport trunk native vlan 666
    switchport mode trunk
    switchport nonegotiate
    channel-protocol lacp
    channel-group 45 mode passive
    end

    sh etherchannel 45 de
    Group state = L2
    Ports: 2   Maxports = 8
    Port-channels: 1 Max Port-channels = 1
    Protocol:   LACP
    Minimum Links: 0
                   Ports in the group:
                   β€“-----------------
    Port: Gi2/45

    Port state    = Up Mstr Assoc In-Bndl
    Channel group = 45          Mode = Passive         Gcchange = -
    Port-channel  = Po45        GC   =   -             Pseudo port-channel = Po45
    Port index    = 0           Load = 0x00            Protocol =   LACP

    Flags:  S - Device is sending Slow LACPDUs   F - Device is sending fast LACPDUs.
           A - Device is in active mode.        P - Device is in passive mode.

    Local information:
                               LACP port     Admin     Oper    Port        Port
    Port      Flags   State     Priority      Key       Key     Number      State
    Gi2/45    SP      bndl      32768         0x2D      0x2D    0x31        0x3C

    Partner's information:

    LACP port                        Admin  Oper   Port    Port
    Port      Flags   Priority  Dev ID          Age    key    Key    Number  State
    Gi2/45    SA      32768     000d.60f3.15cc  20s    0x0    0x170  0x5     0x3D

    Age of the port in the current state: 0d:00h:00m:48s

    Port: Gi2/46

    Port state    = Up Mstr Assoc In-Bndl
    Channel group = 45          Mode = Passive         Gcchange = -
    Port-channel  = Po45        GC   =   -             Pseudo port-channel = Po45
    Port index    = 1           Load = 0x00            Protocol =   LACP

    Flags:  S - Device is sending Slow LACPDUs   F - Device is sending fast LACPDUs.
           A - Device is in active mode.        P - Device is in passive mode.

    Local information:
                               LACP port     Admin     Oper    Port        Port
    Port      Flags   State     Priority      Key       Key     Number      State
    Gi2/46    SP      bndl      32768         0x2D      0x2D    0x32        0x3C

    Partner's information:

    LACP port                        Admin  Oper   Port    Port
    Port      Flags   Priority  Dev ID          Age    key    Key    Number  State
    Gi2/46    SA      32768     000d.60f3.15cc  19s    0x0    0x170  0x6     0x3D

    Age of the port in the current state: 0d:00h:00m:47s

    Port-channels in the group:
                   ---------------------------

    Port-channel: Po45    (Primary Aggregator)


    Age of the Port-channel   = 4d:01h:54m:18s
    Logical slot/port   = 11/45          Number of ports = 2
    Port state          = Port-channel Ag-Inuse
    Protocol            =   LACP
    Port security       = Disabled

    Ports in the Port-channel:

    Index   Load   Port     EC state        No of bits
    ------+------+------+------------------+-----------
     0     00     Gi2/45   Passive            0
     1     00     Gi2/46   Passive            0

    Time since last port bundled:    0d:00h:00m:50s    Gi2/46
    Time since last port Un-bundled: 0d:00h:03m:39s    Gi2/46

    #sh vlan brief

    VLAN Name                             Status    Ports


    120  pfsense (internet)               active
    160  external                         active    
    666  untagged-traffic                 active

    #sh ip route
    Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
          D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
          N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
          E1 - OSPF external type 1, E2 - OSPF external type 2
          i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
          ia - IS-IS inter area, * - candidate default, U - per-user static route
          o - ODR, P - periodic downloaded static route

    Gateway of last resort is 172.16.120.2 to network 0.0.0.0

    C    192.168.160.0/24 is directly connected, Vlan160
        172.16.0.0/29 is subnetted, 1 subnets
    C       172.16.120.0 is directly connected, Vlan120
    S*   0.0.0.0/0 [1/0] via 172.16.120.2

    Can't ping either of the 129.168.160.0 interfaces across the trunk yet both the 172.16.160.0/29 links function as expected.

    It looks like vlan 160 is not being trunked on lagg0 even though it all looks correct (except the arp tables).
    I have now reached the end of my world and entering uncharted territory.

    any ideas if configure error or possible bug?

    2.0-RC2 (i386)
    built on Tue May 24 18:59:38 EDT 2011

    Mark</performnud,accept_rtadv></rxcsum,txcsum></up,broadcast,running,simplex,multicast,ipfw_filter></performnud,accept_rtadv></rxcsum,txcsum></up,broadcast,running,promisc,simplex,multicast></active,collecting,distributing></active,collecting,distributing></performnud,accept_rtadv></rxcsum,txcsum,vlan_mtu,vlan_hwtagging,vlan_hwcsum,linkstate></up,broadcast,running,promisc,simplex,multicast></full-duplex></performnud,accept_rtadv></rxcsum,txcsum,vlan_mtu,vlan_hwtagging,vlan_hwcsum,linkstate></up,broadcast,running,promisc,simplex,multicast></full-duplex></performnud,accept_rtadv></rxcsum,txcsum,vlan_mtu,vlan_hwtagging,vlan_hwcsum,linkstate></up,broadcast,running,promisc,simplex,multicast>

    1 Reply Last reply Reply Quote 0
    • C
      cmb
      last edited by May 25, 2011, 11:54 PM

      tcpdump on lagg0 with -e, make sure you're getting traffic tagged correctly. If not, it's a switch config issue.

      1 Reply Last reply Reply Quote 0
      • V
        Vk2hmc
        last edited by May 26, 2011, 7:35 AM May 26, 2011, 6:51 AM

        tcpdump -e -i lagg0 -G15

        yes I can see bootp/dhcp and arp traffic, and ipv6 traffic, thats a bit odd isn't it?

        Using SVI and access lists I have had to route everything down lagg_vlan120 to pfsense until I get the 2nd vlan working.

        tcpdump -e -i lagg0 vlan 160
        tcpdump: WARNING: lagg0: no IPv4 address assigned
        tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
        listening on lagg0, link-type EN10MB (Ethernet), capture size 96 bytes
        17:30:14.953683 70:1a:04πŸ‡©πŸ‡ͺ01:78 (oui Unknown) > 33:33:00:00:00:0c (oui Unknown), ethertype 802.1Q (0x8100), length 212: vlan 160, p 0, ethertype IPv6, fe80::51f7:693c:2380:cdb5.65113 > ff02::c.1900: UDP, length 146
        17:30:14.956316 70:1a:04πŸ‡©πŸ‡ͺ01:78 (oui Unknown) > 33:33:ff:60:91:a8 (oui Unknown), ethertype 802.1Q (0x8100), length 90: vlan 160, p 0, ethertype IPv6, fe80::51f7:693c:2380:cdb5 > ff02::1:ff60:91a8: ICMP6, neighbor solicitation, who has fe80::d452:5831:f560:91a8, length 32
        17:30:15.184303 00:23:4d:ae:f9:0a (oui Unknown) > 33:33:00:00:00:0c (oui Unknown), ethertype 802.1Q (0x8100), length 212: vlan 160, p 0, ethertype IPv6, fe80::d452:5831:f560:91a8.55059 > ff02::c.1900: UDP, length 146
        17:30:15.724600 00:23:4d:ae:f9:0a (oui Unknown) > Broadcast, ethertype 802.1Q (0x8100), length 254: vlan 160, p 0, ethertype IPv4, Miya-PC.non-stop.com.au.netbios-dgm > 192.168.160.255.netbios-dgm: NBT UDP PACKET(138)
        17:30:15.855039 70:1a:04πŸ‡©πŸ‡ͺ01:78 (oui Unknown) > 33:33:ff:60:91:a8 (oui Unknown), ethertype 802.1Q (0x8100), length 90: vlan 160, p 0, ethertype IPv6, fe80::51f7:693c:2380:cdb5 > ff02::1:ff60:91a8: ICMP6, neighbor solicitation, who has fe80::d452:5831:f560:91a8, length 32
        17:30:16.855254 70:1a:04πŸ‡©πŸ‡ͺ01:78 (oui Unknown) > 33:33:ff:60:91:a8 (oui Unknown), ethertype 802.1Q (0x8100), length 90: vlan 160, p 0, ethertype IPv6, fe80::51f7:693c:2380:cdb5 > ff02::1:ff60:91a8: ICMP6, neighbor solicitation, who has fe80::d452:5831:f560:91a8, length 32
        17:30:17.954656 70:1a:04πŸ‡©πŸ‡ͺ01:78 (oui Unknown) > 33:33:00:00:00:0c (oui Unknown), ethertype 802.1Q (0x8100), length 212: vlan 160, p 0, ethertype IPv6, fe80::51f7:693c:2380:cdb5.65113 > ff02::c.1900: UDP, length 146
        17:30:18.184423 00:23:4d:ae:f9:0a (oui Unknown) > 33:33:00:00:00:0c (oui Unknown), ethertype 802.1Q (0x8100), length 212: vlan 160, p 0, ethertype IPv6, fe80::d452:5831:f560:91a8.55059 > ff02::c.1900: UDP, length 146
        17:30:20.751020 00:17:08:50:16:70 (oui Unknown) > Broadcast, ethertype 802.1Q (0x8100), length 359: vlan 160, p 0, ethertype IPv4, vlan160.non-stop.com.au.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:17:08:50:16:70 (oui Unknown), length 313
        17:30:20.955044 70:1a:04πŸ‡©πŸ‡ͺ01:78 (oui Unknown) > 33:33:00:00:00:0c (oui Unknown), ethertype 802.1Q (0x8100), length 212: vlan 160, p 0, ethertype IPv6, fe80::51f7:693c:2380:cdb5.65113 > ff02::c.1900: UDP, length 146
        17:30:22.185326 00:23:4d:ae:f9:0a (oui Unknown) > 33:33:00:00:00:0c (oui Unknown), ethertype 802.1Q (0x8100), length 212: vlan 160, p 0, ethertype IPv6, fe80::d452:5831:f560:91a8.55059 > ff02::c.1900: UDP, length 146
        17:30:22.187515 00:23:4d:ae:f9:0a (oui Unknown) > 33:33:ff:80:cd:b5 (oui Unknown), ethertype 802.1Q (0x8100), length 90: vlan 160, p 0, ethertype IPv6, fe80::d452:5831:f560:91a8 > ff02::1:ff80:cdb5: ICMP6, neighbor solicitation, who has fe80::51f7:693c:2380:cdb5, length 32
        17:30:22.733767 00:23:4d:ae:f9:0a (oui Unknown) > 33:33:ff:80:cd:b5 (oui Unknown), ethertype 802.1Q (0x8100), length 90: vlan 160, p 0, ethertype IPv6, fe80::d452:5831:f560:91a8 > ff02::1:ff80:cdb5: ICMP6, neighbor solicitation, who has fe80::51f7:693c:2380:cdb5, length 32
        17:30:23.733979 00:23:4d:ae:f9:0a (oui Unknown) > 33:33:ff:80:cd:b5 (oui Unknown), ethertype 802.1Q (0x8100), length 90: vlan 160, p 0, ethertype IPv6, fe80::d452:5831:f560:91a8 > ff02::1:ff80:cdb5: ICMP6, neighbor solicitation, who has fe80::51f7:693c:2380:cdb5, length 32
        17:30:23.747248 00:17:08:50:16:70 (oui Unknown) > Broadcast, ethertype 802.1Q (0x8100), length 359: vlan 160, p 0, ethertype IPv4, vlan160.non-stop.com.au.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:17:08:50:16:70 (oui Unknown), length 313
        17:30:24.955630 70:1a:04πŸ‡©πŸ‡ͺ01:78 (oui Unknown) > 33:33:00:00:00:0c (oui Unknown), ethertype 802.1Q (0x8100), length 212: vlan 160, p 0, ethertype IPv6, fe80::51f7:693c:2380:cdb5.65113 > ff02::c.1900: UDP, length 146
        17:30:24.957029 70:1a:04πŸ‡©πŸ‡ͺ01:78 (oui Unknown) > 33:33:ff:60:91:a8 (oui Unknown), ethertype 802.1Q (0x8100), length 90: vlan 160, p 0, ethertype IPv6, fe80::51f7:693c:2380:cdb5 > ff02::1:ff60:91a8: ICMP6, neighbor solicitation, who has fe80::d452:5831:f560:91a8, length 32
        17:30:25.185255 00:23:4d:ae:f9:0a (oui Unknown) > 33:33:00:00:00:0c (oui Unknown), ethertype 802.1Q (0x8100), length 212: vlan 160, p 0, ethertype IPv6, fe80::d452:5831:f560:91a8.55059 > ff02::c.1900: UDP, length 146
        17:30:26.355313 70:1a:04πŸ‡©πŸ‡ͺ01:78 (oui Unknown) > 33:33:ff:60:91:a8 (oui Unknown), ethertype 802.1Q (0x8100), length 90: vlan 160, p 0, ethertype IPv6, fe80::51f7:693c:2380:cdb5 > ff02::1:ff60:91a8: ICMP6, neighbor solicitation, who has fe80::d452:5831:f560:91a8, length 32
        17:30:27.355360 70:1a:04πŸ‡©πŸ‡ͺ01:78 (oui Unknown) > 33:33:ff:60:91:a8 (oui Unknown), ethertype 802.1Q (0x8100), length 90: vlan 160, p 0, ethertype IPv6, fe80::51f7:693c:2380:cdb5 > ff02::1:ff60:91a8: ICMP6, neighbor solicitation, who has fe80::d452:5831:f560:91a8, length 32
        17:30:27.955850 70:1a:04πŸ‡©πŸ‡ͺ01:78 (oui Unknown) > 33:33:00:00:00:0c (oui Unknown), ethertype 802.1Q (0x8100), length 212: vlan 160, p 0, ethertype IPv6, fe80::51f7:693c:2380:cdb5.65113 > ff02::c.1900: UDP, length 146
        17:30:28.184886 00:23:4d:ae:f9:0a (oui Unknown) > 33:33:00:00:00:0c (oui Unknown), ethertype 802.1Q (0x8100), length 212: vlan 160, p 0, ethertype IPv6, fe80::d452:5831:f560:91a8.55059 > ff02::c.1900: UDP, length 146
        ^C
        22 packets captured
        2700 packets received by filter
        0 packets dropped by kernel

        17:34:18.260155 00:23:4d:ae:f9:0a (oui Unknown) > 33:33:00:00:00:0c (oui Unknown), ethertype 802.1Q (0x8100), length 212: vlan 160, p 0, ethertype IPv6, fe80::d452:5831:f560:91a8.55059 > ff02::c.1900: UDP, length 146
        17:34:18.759256 00:17:08:50:16:70 (oui Unknown) > Broadcast, ethertype 802.1Q (0x8100), length 359: vlan 160, p 0, ethertype IPv4, vlan160.non-stop.com.au.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:17:08:50:16:70 (oui Unknown), length 313
        17:34:21.220921 70:1a:04πŸ‡©πŸ‡ͺ01:78 (oui Unknown) > 33:33:00:00:00:0c (oui Unknown), ethertype 802.1Q (0x8100), length 212: vlan 160, p 0, ethertype IPv6, fe80::51f7:693c:2380:cdb5.65113 > ff02::c.1900: UDP, length 146
        17:34:22.261472 00:23:4d:ae:f9:0a (oui Unknown) > 33:33:00:00:00:0c (oui Unknown), ethertype 802.1Q (0x8100), length 212: vlan 160, p 0, ethertype IPv6, fe80::d452:5831:f560:91a8.55059 > ff02::c.1900: UDP, length 146
        17:34:22.263368 00:23:4d:ae:f9:0a (oui Unknown) > 33:33:ff:80:cd:b5 (oui Unknown), ethertype 802.1Q (0x8100), length 90: vlan 160, p 0, ethertype IPv6, fe80::d452:5831:f560:91a8 > ff02::1:ff80:cdb5: ICMP6, neighbor solicitation, who has fe80::51f7:693c:2380:cdb5, length 32

        17:17:12.060268 00:0d:60:f3:15:cc (oui Unknown) > 00:0d:65:c8:78:7f (oui Unknown), ethertype 802.1Q (0x8100), length 58: vlan 120, p 0, ethertype IPv4, (tos 0x0, ttl 51, id 22879, offset 0, flags [DF], proto TCP (6), length 40, bad cksum 0 (->3e1a)!)
            mail.ycwua.org.34491 > 192.168.5.77.36912: Flags [.], cksum 0xa326 (correct), ack 95, win 92, length 0
        17:17:12.060744 00:0d:65:c8:78:7f (oui Unknown) > 00:0d:60:f3:15:cc (oui Unknown), ethertype 802.1Q (0x8100), length 134: vlan 120, p 0, ethertype IPv4, (tos 0x0, ttl 63, id 4198, offset 0, flags [DF], proto TCP (6), length 116)
            192.168.5.77.36912 > mail.ycwua.org.34491: Flags [P.], ack 520, win 64207, length 76
        17:17:12.065563 70:1a:04πŸ‡©πŸ‡ͺ01:78 (oui Unknown) > 33:33:00:00:00:16 (oui Unknown), ethertype 802.1Q (0x8100), length 94: vlan 160, p 0, ethertype IPv6, (hlim 1, next-header Options (0) payload length: 36) fe80::51f7:693c:2380:cdb5 > ff02::16: HBH (rtalert: 0x0000) (padn)[icmp6 sum ok] ICMP6, multicast listener report v2, length 28, 1 group record(s) [gaddr ff02::1:3 to_in, 0 source(s)]
        17:17:12.067744 00:0d:60:f3:15:cc (oui Unknown) > 00:0d:65:c8:78:7f (oui Unknown), ethertype 802.1Q (0x8100), length 58: vlan 120, p 0, ethertype IPv4, (tos 0x0, ttl 43, id 24146, offset 0, flags [DF], proto TCP (6), length 40, bad cksum 0 (->13bf)!)
            ool-ad036ac6.dyn.optonline.net.51006 > 192.168.5.77.23206: Flags [.], cksum 0x33a7 (correct), ack 1235279, win 65535, length 0
        .
        .
        .
        17:17:15.827760 70:1a:04πŸ‡©πŸ‡ͺ01:78 (oui Unknown) > 33:33:ff:60:91:a8 (oui Unknown), ethertype 802.1Q (0x8100), length 90: vlan 160, p 0, ethertype IPv6, (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::51f7:693c:2380:cdb5 > ff02::1:ff60:91a8: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::d452:5831:f560:91a8
                  source link-address option (1), length 8 (1): 70:1a:04πŸ‡©πŸ‡ͺ01:78
        17:17:15.832500 00:0d:60:f3:15:cc (oui Unknown) > 00:0d:65:c8:78:7f (oui Unknown), ethertype 802.1Q (0x8100), length 66: vlan 120, p 0, ethertype IPv4, (tos 0x0, ttl 115, id 1958, offset 0, flags [none], proto UDP (17), length 48, bad cksum 0 (->e28e)!)
            111.Red-83-36-68.dynamicIP.rima-tde.net.52592 > 192.168.5.77.36912: UDP, length 20

        1 Reply Last reply Reply Quote 0
        • E
          eri--
          last edited by May 26, 2011, 8:42 AM

          You are sure that you have allowed traffic with firewall ruleS?

          1 Reply Last reply Reply Quote 0
          • V
            Vk2hmc
            last edited by May 28, 2011, 2:22 AM May 27, 2011, 9:52 AM

            Thanks for your reply, I have firewall rules for both interfaces, pass all for each relevant network.

            update

            I switched the interface from the lagg trunk to a standard switchport access interface and all works as expected.

            The only other difference on the new interface is a intel driver (dc).

            So that is, No Tagging, No LACP, it works.

            Will introduce the do1q next and see how it goes.

            Many thanks,
            mark

            1 Reply Last reply Reply Quote 0
            • V
              Vk2hmc
              last edited by May 29, 2011, 8:31 AM

              Well, that was a interesting ride, changed opt1 back to the lagg_vlan160 and it all worked.

              I did, however learn heaps so its not a waste of time, aye :)

              1 Reply Last reply Reply Quote 0
              2 out of 6
              • First post
                2/6
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                This community forum collects and processes your personal information.
                consent.not_received