Hi Michael,
Please run /etc/init.d/network-vlans start
thanks. beginner error :-)
Here my document for vlan:
I configure my fire with the setup modus and change from green+red to green+red+organge+blue
I setting up the network-ip's for blue & orange, then i became by the end from the setup a message: orange device cant configure not devivce found or so. Because it does not let me finish the setupmode i have cloesed the console-connection.
I check my /var/ipfire/ethernet/settings and all information from my change in the setup-menu was written there.
for example one snipp:
BLUE_ADDRESS=192.168.2.1 BLUE_NETMASK=255.255.255.0 BLUE_NETADDRESS=192.168.2.0 BLUE_BROADCAST=192.168.2.255
but, no MAC-Address and no DEV was in there.
The ifconfig says nothing to blue or orange. Okay then the next step. I configure my /var/ipfire/ethernet/vlans as follows:
BLUE_PARENT_DEV=green0 BLUE_VLAN_ID=300 BLUE_MAC_ADDRESS=00:22:4D:84:A5:30 ORANGE_PARENT_DEV=green0 ORANGE_VLAN_ID=400 ORANGE_MAC_ADDRESS=00:22:4D:84:A5:40
Without "" for _PARENT_DEV="device1" and the _MAC_ADDRESS="11:22:33:..."
Then i do /etc/init.d/network-vlan start, this was my messages-output:
/etc/init.d/network-vlans start + CONFIG_FILE=/var/ipfire/ethernet/vlans + '[' -e /var/ipfire/ethernet/vlans ']' ++ /usr/local/bin/readhash /var/ipfire/ethernet/vlans + eval BLUE_PARENT_DEV=green0 BLUE_VLAN_ID=300 BLUE_MAC_ADDRESS=00:22:4D:84:A5:30 ORANGE_PARENT_DEV=green0 ORANGE_VLAN_ID=400 ORANGE_MAC_ADDRESS=00:22:4D:84:A5:40 ++ BLUE_PARENT_DEV=green0 ++ BLUE_VLAN_ID=300 ++ BLUE_MAC_ADDRESS=00:22:4D:84:A5:30 ++ ORANGE_PARENT_DEV=green0 ++ ORANGE_VLAN_ID=400 ++ ORANGE_MAC_ADDRESS=00:22:4D:84:A5:40 + action=start + for interface in green0 blue0 orange0 + case "${interface}" in + PARENT_DEV= + VLAN_ID= + MAC_ADDRESS= + case "${action}" in + '[' -z '' ']' + continue + for interface in green0 blue0 orange0 + case "${interface}" in + PARENT_DEV=green0 + VLAN_ID=300 + MAC_ADDRESS=00:22:4D:84:A5:30 + case "${action}" in + '[' -z green0 ']' + '[' -d /sys/class/net/blue0 ']' + '[' '!' -d /sys/class/net/green0 ']' + '[' -z 300 ']' + echo 'Creating VLAN interface blue0...' Creating VLAN interface blue0... + vconfig add green0 300 Added VLAN with VID == 300 to IF -:green0:- + ip link set green0.300 name blue0 + '[' -n 00:22:4D:84:A5:30 ']' + ip link set blue0 address 00:22:4D:84:A5:30 + ip link set green0 up + for interface in green0 blue0 orange0 + case "${interface}" in + PARENT_DEV=green0 + VLAN_ID=400 + MAC_ADDRESS=00:22:4D:84:A5:40 + case "${action}" in + '[' -z green0 ']' + '[' -d /sys/class/net/orange0 ']' + '[' '!' -d /sys/class/net/green0 ']' + '[' -z 400 ']' + echo 'Creating VLAN interface orange0...' Creating VLAN interface orange0... + vconfig add green0 400 Added VLAN with VID == 400 to IF -:green0:- + ip link set green0.400 name orange0 + '[' -n 00:22:4D:84:A5:40 ']' + ip link set orange0 address 00:22:4D:84:A5:40 + ip link set green0 up
Yeah! The finale countdown ;-)
So, i checket my ifconfig and only the device with no IP was displayed:
blue0 Link encap:Ethernet HWaddr 00:22:4D:84:A5:30 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes: (0 Kb) TX bytes: (0 Kb)
WTF? okay. I configure my /var/ipfire/ethernet/settings once again as described here:
BLUE_DEV=blue0 BLUE_MACADDR=00:22:4d:84:a5:30 BLUE_DESCRIPTION='"pci: Intel Corporation 82574L Gigabit Network Connection"' BLUE_DRIVER=e1000e BLUE_ADDRESS=192.168.2.1 BLUE_NETMASK=255.255.255.0 BLUE_NETADDRESS=192.168.2.0 BLUE_BROADCAST=192.168.2.255
Next step - reboot firewall! then the result from ifconfig said:
blue0 Link encap:Ethernet HWaddr 00:22:4D:84:A5:30 inet addr:192.168.2.1 Bcast:192.168.2.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes: (0 Kb) TX bytes: (0 Kb)
BUT - my firewall droped my DNS and HTTP requests. I tried to change the rules with the firewall-mode from 1 to 0 and in the WUI by mode 1 to set rules for wireless to allow this connections. Without success!
for example: Jul 1 21:23:10 ipfw kernel: DROP_WirelessinputIN=blue0 OUT= MAC=00:22:4d:84:a5:30:7c:61:93:16:2f:82:08:00 SRC=192.168.2.10 DST=192.168.2.1 LEN=69 TOS=0x00 PREC=0x00 TTL=64 ID=25514 DF PROTO=UDP SPT=1083 DPT=53 LEN=4
Any idea?
BG, Thomas
Am 01.07.2013 11:53, schrieb Michael Tremer:
On Sun, 2013-06-30 at 15:37 +0200, Thomas Berthel wrote:
Hi @ all,
i have checked the /etc/init.d/network-vlans Script and become following messages: Invalid action
The dubug output says:
(/var/ipfire/ethernet):/etc/init.d/network-vlans
- CONFIG_FILE=/var/ipfire/ethernet/vlans
- '[' -e /var/ipfire/ethernet/vlans ']'
++ /usr/local/bin/readhash /var/ipfire/ethernet/vlans
- eval '#GREEN_VLAN_ID=20' BLUE_VLAN_ID=300 ORANGE_VLAN_ID=400
- action=
- for interface in green0 blue0 orange0
- case "${interface}" in
- PARENT_DEV=
- VLAN_ID=
- MAC_ADDRESS=
- case "${action}" in
- echo 'Invalid action: '
Invalid action:
- exit 1
Please run /etc/init.d/network-vlans start or /etc/init.d/network-vlans to start and stop the virtual interfaces.
-Michael