Re: VLAN Konfig

[Michael Tremer <michael.tremer@ipfire.org>]

[-- Attachment #1: Type: text/plain, Size: 6861 bytes --]

Hi,

you will have to grant access to every host on the blue network in the
WUI. Please go to Firewall -> Blue Access and do that over there.

-Michael

On Sun, 2013-07-21 at 22:35 +0200, Thomas Berthel wrote:
> Hi,
> 
> nobody any idea?
> 
> good night, Thomas
> 
> On 07/02/2013 12:14 AM, Thomas Berthel wrote:
> > Hi Michael,
> > 
> >> Please run /etc/init.d/network-vlans start
> > thanks. beginner error :-)
> > 
> > Here my document for vlan:
> > 
> > I configure my fire with the setup modus and change from green+red to
> > green+red+organge+blue
> > 
> > I setting up the network-ip's for blue & orange, then i became by the
> > end from the setup a message: orange device cant configure not devivce
> > found or so. Because it does not let me finish the setupmode i have
> > cloesed the console-connection.
> > 
> > I check my /var/ipfire/ethernet/settings and all information from my
> > change in the setup-menu was written there.
> > 
> > for example one snipp:
> > 
> > BLUE_ADDRESS=192.168.2.1
> > BLUE_NETMASK=255.255.255.0
> > BLUE_NETADDRESS=192.168.2.0
> > BLUE_BROADCAST=192.168.2.255
> > 
> > but, no MAC-Address and no DEV was in there.
> > 
> > The ifconfig says nothing to blue or orange. Okay then the next step.
> > I configure my /var/ipfire/ethernet/vlans as follows:
> > 
> > BLUE_PARENT_DEV=green0
> > BLUE_VLAN_ID=300
> > BLUE_MAC_ADDRESS=00:22:4D:84:A5:30
> > ORANGE_PARENT_DEV=green0
> > ORANGE_VLAN_ID=400
> > ORANGE_MAC_ADDRESS=00:22:4D:84:A5:40
> > 
> > Without "" for _PARENT_DEV="device1" and the _MAC_ADDRESS="11:22:33:..."
> > 
> > Then i do /etc/init.d/network-vlan start, this was my messages-output:
> > 
> > /etc/init.d/network-vlans start
> > + CONFIG_FILE=/var/ipfire/ethernet/vlans
> > + '[' -e /var/ipfire/ethernet/vlans ']'
> > ++ /usr/local/bin/readhash /var/ipfire/ethernet/vlans
> > + eval BLUE_PARENT_DEV=green0 BLUE_VLAN_ID=300
> > BLUE_MAC_ADDRESS=00:22:4D:84:A5:30 ORANGE_PARENT_DEV=green0
> > ORANGE_VLAN_ID=400 ORANGE_MAC_ADDRESS=00:22:4D:84:A5:40
> > ++ BLUE_PARENT_DEV=green0
> > ++ BLUE_VLAN_ID=300
> > ++ BLUE_MAC_ADDRESS=00:22:4D:84:A5:30
> > ++ ORANGE_PARENT_DEV=green0
> > ++ ORANGE_VLAN_ID=400
> > ++ ORANGE_MAC_ADDRESS=00:22:4D:84:A5:40
> > + action=start
> > + for interface in green0 blue0 orange0
> > + case "${interface}" in
> > + PARENT_DEV=
> > + VLAN_ID=
> > + MAC_ADDRESS=
> > + case "${action}" in
> > + '[' -z '' ']'
> > + continue
> > + for interface in green0 blue0 orange0
> > + case "${interface}" in
> > + PARENT_DEV=green0
> > + VLAN_ID=300
> > + MAC_ADDRESS=00:22:4D:84:A5:30
> > + case "${action}" in
> > + '[' -z green0 ']'
> > + '[' -d /sys/class/net/blue0 ']'
> > + '[' '!' -d /sys/class/net/green0 ']'
> > + '[' -z 300 ']'
> > + echo 'Creating VLAN interface blue0...'
> > Creating VLAN interface blue0...
> > + vconfig add green0 300
> > Added VLAN with VID == 300 to IF -:green0:-
> > + ip link set green0.300 name blue0
> > + '[' -n 00:22:4D:84:A5:30 ']'
> > + ip link set blue0 address 00:22:4D:84:A5:30
> > + ip link set green0 up
> > + for interface in green0 blue0 orange0
> > + case "${interface}" in
> > + PARENT_DEV=green0
> > + VLAN_ID=400
> > + MAC_ADDRESS=00:22:4D:84:A5:40
> > + case "${action}" in
> > + '[' -z green0 ']'
> > + '[' -d /sys/class/net/orange0 ']'
> > + '[' '!' -d /sys/class/net/green0 ']'
> > + '[' -z 400 ']'
> > + echo 'Creating VLAN interface orange0...'
> > Creating VLAN interface orange0...
> > + vconfig add green0 400
> > Added VLAN with VID == 400 to IF -:green0:-
> > + ip link set green0.400 name orange0
> > + '[' -n 00:22:4D:84:A5:40 ']'
> > + ip link set orange0 address 00:22:4D:84:A5:40
> > + ip link set green0 up
> > 
> > Yeah! The finale countdown ;-)
> > 
> > So, i checket my ifconfig and only the device with no IP was displayed:
> > 
> > blue0     Link encap:Ethernet  HWaddr 00:22:4D:84:A5:30
> >           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
> >           RX packets:0 errors:0 dropped:0 overruns:0 frame:0
> >           TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
> >           collisions:0 txqueuelen:0
> >           RX bytes: (0 Kb)  TX bytes: (0 Kb)
> > 
> > WTF? okay. I configure my /var/ipfire/ethernet/settings once again as
> > described here:
> > 
> > BLUE_DEV=blue0
> > BLUE_MACADDR=00:22:4d:84:a5:30
> > BLUE_DESCRIPTION='"pci: Intel Corporation 82574L Gigabit Network
> > Connection"'
> > BLUE_DRIVER=e1000e
> > BLUE_ADDRESS=192.168.2.1
> > BLUE_NETMASK=255.255.255.0
> > BLUE_NETADDRESS=192.168.2.0
> > BLUE_BROADCAST=192.168.2.255
> > 
> > Next step - reboot firewall! then the result from ifconfig said:
> > 
> > blue0     Link encap:Ethernet  HWaddr 00:22:4D:84:A5:30
> > 	  inet addr:192.168.2.1  Bcast:192.168.2.255  Mask:255.255.255.0
> >           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
> >           RX packets:0 errors:0 dropped:0 overruns:0 frame:0
> >           TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
> >           collisions:0 txqueuelen:0
> >           RX bytes: (0 Kb)  TX bytes: (0 Kb)
> > 
> > BUT - my firewall droped my DNS and HTTP requests. I tried to change the
> > rules with the firewall-mode from 1 to 0 and in the WUI by mode 1 to set
> > rules for wireless to allow this connections. Without success!
> > 
> > for example:
> > Jul  1 21:23:10 ipfw kernel: DROP_WirelessinputIN=blue0 OUT=
> > MAC=00:22:4d:84:a5:30:7c:61:93:16:2f:82:08:00 SRC=192.168.2.10
> > DST=192.168.2.1 LEN=69 TOS=0x00 PREC=0x00 TTL=64 ID=25514 DF PROTO=UDP
> > SPT=1083 DPT=53 LEN=4
> > 
> > Any idea?
> > 
> > BG, Thomas
> > 
> > Am 01.07.2013 11:53, schrieb Michael Tremer:
> >> On Sun, 2013-06-30 at 15:37 +0200, Thomas Berthel wrote:
> >>> Hi @ all,
> >>>
> >>> i have checked the /etc/init.d/network-vlans Script and become following
> >>> messages: Invalid action
> >>>
> >>> The dubug output says:
> >>>
> >>> (/var/ipfire/ethernet):/etc/init.d/network-vlans
> >>> + CONFIG_FILE=/var/ipfire/ethernet/vlans
> >>> + '[' -e /var/ipfire/ethernet/vlans ']'
> >>> ++ /usr/local/bin/readhash /var/ipfire/ethernet/vlans
> >>> + eval '#GREEN_VLAN_ID=20' BLUE_VLAN_ID=300 ORANGE_VLAN_ID=400
> >>> + action=
> >>> + for interface in green0 blue0 orange0
> >>> + case "${interface}" in
> >>> + PARENT_DEV=
> >>> + VLAN_ID=
> >>> + MAC_ADDRESS=
> >>> + case "${action}" in
> >>> + echo 'Invalid action: '
> >>> Invalid action:
> >>> + exit 1
> >>
> >> Please run /etc/init.d/network-vlans start or /etc/init.d/network-vlans
> >> to start and stop the virtual interfaces.
> >>
> >> -Michael
> >>
> > 
> > _______________________________________________
> > Documentation mailing list
> > Documentation(a)lists.ipfire.org
> > http://lists.ipfire.org/mailman/listinfo/documentation
> > 
> 
> _______________________________________________
> Documentation mailing list
> Documentation(a)lists.ipfire.org
> http://lists.ipfire.org/mailman/listinfo/documentation