Re: VLAN Konfig

[Thomas Berthel <t.berthel@gmx.net>]

[-- Attachment #1: Type: text/plain, Size: 7450 bytes --]

Hi Michael,

thats it! :) A long way for me. But, its done.
I write my documentation new. It is so easy,  	
if you know what you're doing ;-)

One question to Firewall Mode 2. I would take a new enable rule for
outgoing Port.

I set on Wireless (blue) as defination with port XYZ he dont work - When
I put the ruleset on green works. Is this normal?

greetings, Thomas

Am 22.07.2013 10:37, schrieb Michael Tremer:
> Hi,
> 
> you will have to grant access to every host on the blue network in the
> WUI. Please go to Firewall -> Blue Access and do that over there.
> 
> -Michael
> 
> On Sun, 2013-07-21 at 22:35 +0200, Thomas Berthel wrote:
>> Hi,
>>
>> nobody any idea?
>>
>> good night, Thomas
>>
>> On 07/02/2013 12:14 AM, Thomas Berthel wrote:
>>> Hi Michael,
>>>
>>>> Please run /etc/init.d/network-vlans start
>>> thanks. beginner error :-)
>>>
>>> Here my document for vlan:
>>>
>>> I configure my fire with the setup modus and change from green+red to
>>> green+red+organge+blue
>>>
>>> I setting up the network-ip's for blue & orange, then i became by the
>>> end from the setup a message: orange device cant configure not devivce
>>> found or so. Because it does not let me finish the setupmode i have
>>> cloesed the console-connection.
>>>
>>> I check my /var/ipfire/ethernet/settings and all information from my
>>> change in the setup-menu was written there.
>>>
>>> for example one snipp:
>>>
>>> BLUE_ADDRESS=192.168.2.1
>>> BLUE_NETMASK=255.255.255.0
>>> BLUE_NETADDRESS=192.168.2.0
>>> BLUE_BROADCAST=192.168.2.255
>>>
>>> but, no MAC-Address and no DEV was in there.
>>>
>>> The ifconfig says nothing to blue or orange. Okay then the next step.
>>> I configure my /var/ipfire/ethernet/vlans as follows:
>>>
>>> BLUE_PARENT_DEV=green0
>>> BLUE_VLAN_ID=300
>>> BLUE_MAC_ADDRESS=00:22:4D:84:A5:30
>>> ORANGE_PARENT_DEV=green0
>>> ORANGE_VLAN_ID=400
>>> ORANGE_MAC_ADDRESS=00:22:4D:84:A5:40
>>>
>>> Without "" for _PARENT_DEV="device1" and the _MAC_ADDRESS="11:22:33:..."
>>>
>>> Then i do /etc/init.d/network-vlan start, this was my messages-output:
>>>
>>> /etc/init.d/network-vlans start
>>> + CONFIG_FILE=/var/ipfire/ethernet/vlans
>>> + '[' -e /var/ipfire/ethernet/vlans ']'
>>> ++ /usr/local/bin/readhash /var/ipfire/ethernet/vlans
>>> + eval BLUE_PARENT_DEV=green0 BLUE_VLAN_ID=300
>>> BLUE_MAC_ADDRESS=00:22:4D:84:A5:30 ORANGE_PARENT_DEV=green0
>>> ORANGE_VLAN_ID=400 ORANGE_MAC_ADDRESS=00:22:4D:84:A5:40
>>> ++ BLUE_PARENT_DEV=green0
>>> ++ BLUE_VLAN_ID=300
>>> ++ BLUE_MAC_ADDRESS=00:22:4D:84:A5:30
>>> ++ ORANGE_PARENT_DEV=green0
>>> ++ ORANGE_VLAN_ID=400
>>> ++ ORANGE_MAC_ADDRESS=00:22:4D:84:A5:40
>>> + action=start
>>> + for interface in green0 blue0 orange0
>>> + case "${interface}" in
>>> + PARENT_DEV=
>>> + VLAN_ID=
>>> + MAC_ADDRESS=
>>> + case "${action}" in
>>> + '[' -z '' ']'
>>> + continue
>>> + for interface in green0 blue0 orange0
>>> + case "${interface}" in
>>> + PARENT_DEV=green0
>>> + VLAN_ID=300
>>> + MAC_ADDRESS=00:22:4D:84:A5:30
>>> + case "${action}" in
>>> + '[' -z green0 ']'
>>> + '[' -d /sys/class/net/blue0 ']'
>>> + '[' '!' -d /sys/class/net/green0 ']'
>>> + '[' -z 300 ']'
>>> + echo 'Creating VLAN interface blue0...'
>>> Creating VLAN interface blue0...
>>> + vconfig add green0 300
>>> Added VLAN with VID == 300 to IF -:green0:-
>>> + ip link set green0.300 name blue0
>>> + '[' -n 00:22:4D:84:A5:30 ']'
>>> + ip link set blue0 address 00:22:4D:84:A5:30
>>> + ip link set green0 up
>>> + for interface in green0 blue0 orange0
>>> + case "${interface}" in
>>> + PARENT_DEV=green0
>>> + VLAN_ID=400
>>> + MAC_ADDRESS=00:22:4D:84:A5:40
>>> + case "${action}" in
>>> + '[' -z green0 ']'
>>> + '[' -d /sys/class/net/orange0 ']'
>>> + '[' '!' -d /sys/class/net/green0 ']'
>>> + '[' -z 400 ']'
>>> + echo 'Creating VLAN interface orange0...'
>>> Creating VLAN interface orange0...
>>> + vconfig add green0 400
>>> Added VLAN with VID == 400 to IF -:green0:-
>>> + ip link set green0.400 name orange0
>>> + '[' -n 00:22:4D:84:A5:40 ']'
>>> + ip link set orange0 address 00:22:4D:84:A5:40
>>> + ip link set green0 up
>>>
>>> Yeah! The finale countdown ;-)
>>>
>>> So, i checket my ifconfig and only the device with no IP was displayed:
>>>
>>> blue0     Link encap:Ethernet  HWaddr 00:22:4D:84:A5:30
>>>           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>>>           RX packets:0 errors:0 dropped:0 overruns:0 frame:0
>>>           TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
>>>           collisions:0 txqueuelen:0
>>>           RX bytes: (0 Kb)  TX bytes: (0 Kb)
>>>
>>> WTF? okay. I configure my /var/ipfire/ethernet/settings once again as
>>> described here:
>>>
>>> BLUE_DEV=blue0
>>> BLUE_MACADDR=00:22:4d:84:a5:30
>>> BLUE_DESCRIPTION='"pci: Intel Corporation 82574L Gigabit Network
>>> Connection"'
>>> BLUE_DRIVER=e1000e
>>> BLUE_ADDRESS=192.168.2.1
>>> BLUE_NETMASK=255.255.255.0
>>> BLUE_NETADDRESS=192.168.2.0
>>> BLUE_BROADCAST=192.168.2.255
>>>
>>> Next step - reboot firewall! then the result from ifconfig said:
>>>
>>> blue0     Link encap:Ethernet  HWaddr 00:22:4D:84:A5:30
>>> 	  inet addr:192.168.2.1  Bcast:192.168.2.255  Mask:255.255.255.0
>>>           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>>>           RX packets:0 errors:0 dropped:0 overruns:0 frame:0
>>>           TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
>>>           collisions:0 txqueuelen:0
>>>           RX bytes: (0 Kb)  TX bytes: (0 Kb)
>>>
>>> BUT - my firewall droped my DNS and HTTP requests. I tried to change the
>>> rules with the firewall-mode from 1 to 0 and in the WUI by mode 1 to set
>>> rules for wireless to allow this connections. Without success!
>>>
>>> for example:
>>> Jul  1 21:23:10 ipfw kernel: DROP_WirelessinputIN=blue0 OUT=
>>> MAC=00:22:4d:84:a5:30:7c:61:93:16:2f:82:08:00 SRC=192.168.2.10
>>> DST=192.168.2.1 LEN=69 TOS=0x00 PREC=0x00 TTL=64 ID=25514 DF PROTO=UDP
>>> SPT=1083 DPT=53 LEN=4
>>>
>>> Any idea?
>>>
>>> BG, Thomas
>>>
>>> Am 01.07.2013 11:53, schrieb Michael Tremer:
>>>> On Sun, 2013-06-30 at 15:37 +0200, Thomas Berthel wrote:
>>>>> Hi @ all,
>>>>>
>>>>> i have checked the /etc/init.d/network-vlans Script and become following
>>>>> messages: Invalid action
>>>>>
>>>>> The dubug output says:
>>>>>
>>>>> (/var/ipfire/ethernet):/etc/init.d/network-vlans
>>>>> + CONFIG_FILE=/var/ipfire/ethernet/vlans
>>>>> + '[' -e /var/ipfire/ethernet/vlans ']'
>>>>> ++ /usr/local/bin/readhash /var/ipfire/ethernet/vlans
>>>>> + eval '#GREEN_VLAN_ID=20' BLUE_VLAN_ID=300 ORANGE_VLAN_ID=400
>>>>> + action=
>>>>> + for interface in green0 blue0 orange0
>>>>> + case "${interface}" in
>>>>> + PARENT_DEV=
>>>>> + VLAN_ID=
>>>>> + MAC_ADDRESS=
>>>>> + case "${action}" in
>>>>> + echo 'Invalid action: '
>>>>> Invalid action:
>>>>> + exit 1
>>>>
>>>> Please run /etc/init.d/network-vlans start or /etc/init.d/network-vlans
>>>> to start and stop the virtual interfaces.
>>>>
>>>> -Michael
>>>>
>>>
>>> _______________________________________________
>>> Documentation mailing list
>>> Documentation(a)lists.ipfire.org
>>> http://lists.ipfire.org/mailman/listinfo/documentation
>>>
>>
>> _______________________________________________
>> Documentation mailing list
>> Documentation(a)lists.ipfire.org
>> http://lists.ipfire.org/mailman/listinfo/documentation
> 
> _______________________________________________
> Documentation mailing list
> Documentation(a)lists.ipfire.org
> http://lists.ipfire.org/mailman/listinfo/documentation
>