On Fri, Mar 22, 2013 at 4:14 PM, mailing lists <listas.correo@yahoo.es> wrote:

Hello list,

I have a network configuration like this:

HVM domU [eth0:10.180.245.100] -> [tap2.0] br1 [eth0.214] -> dom0 [eth0:192.168.0.39]

dom0 is a xen host with a typical bridge (br0), but now I need to add several domU machines with vlan tagging whilst dom0 remains untagged. So a new bridge (br1) is used to add vlan tags to this domU, the resulting bridge configuration is:

dom0:~ # brctl show

bridge name bridge id STP enabled interfaces br0 8000.0026b9fc5688 no eth0 br1 8000.0026b9fc5688 no eth0.214 tap2.0

the problem is that for traffic sent from any domU, the ARP-REPLY is returned to the wrong bridge. A simple test with ping to 10.180.245.97 show the wrong path for replies:

dom0 frame seen in tap2.0: 12:36:08.490622 00:16:3e:32:16:d6 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Ethernet (len 6), IPv4 (len 4), Request who-has 10.180.245.97 tell 10.180.245.100, length 28

dom0 frame seen in br1:

12:36:51.498916 00:16:3e:32:16:d6 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Ethernet (len 6), IPv4 (len 4), Request who-has 10.180.245.97 tell 10.180.245.100, length 28

dom0 frame seen in eth0.214 12:37:23.504996 00:16:3e:32:16:d6 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Ethernet (len 6), IPv4 (len 4), Request who-has 10.180.245.97 tell 10.180.245.100, length 28

dom0 frame seen in eth0, now with vlan tagging and the corresponding reply 12:38:03.512530 00:16:3e:32:16:d6 > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100), length 46: vlan 214, p 0, ethertype ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.180.245.97 tell 10.180.245.100, length 28 12:38:03.513126 00:0b:fc:fe:1b:02 > 00:16:3e:32:16:d6, ethertype 802.1Q (0x8100), length 64: vlan 214, p 0, ethertype ARP, Ethernet (len 6), IPv4 (len 4), Reply 10.180.245.97 is-at 00:0b:fc:fe:1b:02, length 46

dom0 frame appears in br0 and not in br1 12:39:52.533341 00:0b:fc:fe:1b:02 > 00:16:3e:32:16:d6, ethertype 802.1Q (0x8100), length 64: vlan 214, p 0, ethertype ARP, Ethernet (len 6), IPv4 (len 4), Reply 10.180.245.97 is-at 00:0b:fc:fe:1b:02, length 46

anyone knows how to get replies to br1 instead of br0?

Yo may be interested in this article, which seems to explain what happens here: http://www.rackspace.com/blog/vms-vlans-and-bridges-oh-my-part-2/ -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org