Re: VLAN Konfig

[Thomas Berthel <t.berthel@gmx.net>]

[-- Attachment #1: Type: text/plain, Size: 6095 bytes --]

Hi,

nobody any idea?

good night, Thomas

On 07/02/2013 12:14 AM, Thomas Berthel wrote:
> Hi Michael,
> 
>> Please run /etc/init.d/network-vlans start
> thanks. beginner error :-)
> 
> Here my document for vlan:
> 
> I configure my fire with the setup modus and change from green+red to
> green+red+organge+blue
> 
> I setting up the network-ip's for blue & orange, then i became by the
> end from the setup a message: orange device cant configure not devivce
> found or so. Because it does not let me finish the setupmode i have
> cloesed the console-connection.
> 
> I check my /var/ipfire/ethernet/settings and all information from my
> change in the setup-menu was written there.
> 
> for example one snipp:
> 
> BLUE_ADDRESS=192.168.2.1
> BLUE_NETMASK=255.255.255.0
> BLUE_NETADDRESS=192.168.2.0
> BLUE_BROADCAST=192.168.2.255
> 
> but, no MAC-Address and no DEV was in there.
> 
> The ifconfig says nothing to blue or orange. Okay then the next step.
> I configure my /var/ipfire/ethernet/vlans as follows:
> 
> BLUE_PARENT_DEV=green0
> BLUE_VLAN_ID=300
> BLUE_MAC_ADDRESS=00:22:4D:84:A5:30
> ORANGE_PARENT_DEV=green0
> ORANGE_VLAN_ID=400
> ORANGE_MAC_ADDRESS=00:22:4D:84:A5:40
> 
> Without "" for _PARENT_DEV="device1" and the _MAC_ADDRESS="11:22:33:..."
> 
> Then i do /etc/init.d/network-vlan start, this was my messages-output:
> 
> /etc/init.d/network-vlans start
> + CONFIG_FILE=/var/ipfire/ethernet/vlans
> + '[' -e /var/ipfire/ethernet/vlans ']'
> ++ /usr/local/bin/readhash /var/ipfire/ethernet/vlans
> + eval BLUE_PARENT_DEV=green0 BLUE_VLAN_ID=300
> BLUE_MAC_ADDRESS=00:22:4D:84:A5:30 ORANGE_PARENT_DEV=green0
> ORANGE_VLAN_ID=400 ORANGE_MAC_ADDRESS=00:22:4D:84:A5:40
> ++ BLUE_PARENT_DEV=green0
> ++ BLUE_VLAN_ID=300
> ++ BLUE_MAC_ADDRESS=00:22:4D:84:A5:30
> ++ ORANGE_PARENT_DEV=green0
> ++ ORANGE_VLAN_ID=400
> ++ ORANGE_MAC_ADDRESS=00:22:4D:84:A5:40
> + action=start
> + for interface in green0 blue0 orange0
> + case "${interface}" in
> + PARENT_DEV=
> + VLAN_ID=
> + MAC_ADDRESS=
> + case "${action}" in
> + '[' -z '' ']'
> + continue
> + for interface in green0 blue0 orange0
> + case "${interface}" in
> + PARENT_DEV=green0
> + VLAN_ID=300
> + MAC_ADDRESS=00:22:4D:84:A5:30
> + case "${action}" in
> + '[' -z green0 ']'
> + '[' -d /sys/class/net/blue0 ']'
> + '[' '!' -d /sys/class/net/green0 ']'
> + '[' -z 300 ']'
> + echo 'Creating VLAN interface blue0...'
> Creating VLAN interface blue0...
> + vconfig add green0 300
> Added VLAN with VID == 300 to IF -:green0:-
> + ip link set green0.300 name blue0
> + '[' -n 00:22:4D:84:A5:30 ']'
> + ip link set blue0 address 00:22:4D:84:A5:30
> + ip link set green0 up
> + for interface in green0 blue0 orange0
> + case "${interface}" in
> + PARENT_DEV=green0
> + VLAN_ID=400
> + MAC_ADDRESS=00:22:4D:84:A5:40
> + case "${action}" in
> + '[' -z green0 ']'
> + '[' -d /sys/class/net/orange0 ']'
> + '[' '!' -d /sys/class/net/green0 ']'
> + '[' -z 400 ']'
> + echo 'Creating VLAN interface orange0...'
> Creating VLAN interface orange0...
> + vconfig add green0 400
> Added VLAN with VID == 400 to IF -:green0:-
> + ip link set green0.400 name orange0
> + '[' -n 00:22:4D:84:A5:40 ']'
> + ip link set orange0 address 00:22:4D:84:A5:40
> + ip link set green0 up
> 
> Yeah! The finale countdown ;-)
> 
> So, i checket my ifconfig and only the device with no IP was displayed:
> 
> blue0     Link encap:Ethernet  HWaddr 00:22:4D:84:A5:30
>           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>           RX packets:0 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:0 txqueuelen:0
>           RX bytes: (0 Kb)  TX bytes: (0 Kb)
> 
> WTF? okay. I configure my /var/ipfire/ethernet/settings once again as
> described here:
> 
> BLUE_DEV=blue0
> BLUE_MACADDR=00:22:4d:84:a5:30
> BLUE_DESCRIPTION='"pci: Intel Corporation 82574L Gigabit Network
> Connection"'
> BLUE_DRIVER=e1000e
> BLUE_ADDRESS=192.168.2.1
> BLUE_NETMASK=255.255.255.0
> BLUE_NETADDRESS=192.168.2.0
> BLUE_BROADCAST=192.168.2.255
> 
> Next step - reboot firewall! then the result from ifconfig said:
> 
> blue0     Link encap:Ethernet  HWaddr 00:22:4D:84:A5:30
> 	  inet addr:192.168.2.1  Bcast:192.168.2.255  Mask:255.255.255.0
>           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>           RX packets:0 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:0 txqueuelen:0
>           RX bytes: (0 Kb)  TX bytes: (0 Kb)
> 
> BUT - my firewall droped my DNS and HTTP requests. I tried to change the
> rules with the firewall-mode from 1 to 0 and in the WUI by mode 1 to set
> rules for wireless to allow this connections. Without success!
> 
> for example:
> Jul  1 21:23:10 ipfw kernel: DROP_WirelessinputIN=blue0 OUT=
> MAC=00:22:4d:84:a5:30:7c:61:93:16:2f:82:08:00 SRC=192.168.2.10
> DST=192.168.2.1 LEN=69 TOS=0x00 PREC=0x00 TTL=64 ID=25514 DF PROTO=UDP
> SPT=1083 DPT=53 LEN=4
> 
> Any idea?
> 
> BG, Thomas
> 
> Am 01.07.2013 11:53, schrieb Michael Tremer:
>> On Sun, 2013-06-30 at 15:37 +0200, Thomas Berthel wrote:
>>> Hi @ all,
>>>
>>> i have checked the /etc/init.d/network-vlans Script and become following
>>> messages: Invalid action
>>>
>>> The dubug output says:
>>>
>>> (/var/ipfire/ethernet):/etc/init.d/network-vlans
>>> + CONFIG_FILE=/var/ipfire/ethernet/vlans
>>> + '[' -e /var/ipfire/ethernet/vlans ']'
>>> ++ /usr/local/bin/readhash /var/ipfire/ethernet/vlans
>>> + eval '#GREEN_VLAN_ID=20' BLUE_VLAN_ID=300 ORANGE_VLAN_ID=400
>>> + action=
>>> + for interface in green0 blue0 orange0
>>> + case "${interface}" in
>>> + PARENT_DEV=
>>> + VLAN_ID=
>>> + MAC_ADDRESS=
>>> + case "${action}" in
>>> + echo 'Invalid action: '
>>> Invalid action:
>>> + exit 1
>>
>> Please run /etc/init.d/network-vlans start or /etc/init.d/network-vlans
>> to start and stop the virtual interfaces.
>>
>> -Michael
>>
> 
> _______________________________________________
> Documentation mailing list
> Documentation(a)lists.ipfire.org
> http://lists.ipfire.org/mailman/listinfo/documentation
>