Marc Chanove wrote:
> Hi !
> 
> We have configure 2 VLAN on a switch (one for a future private network and an
> other for the DMZ).
> For the moment, addresses in the both VLAN are in the same address domain.
> I try to bridge them, but an interface is always entering and staying in
> blocking state.
> The configuration is as follow :
>       On the switch port 23 belongs to VLAN1 and port 20 to VLAN2.
>       On the linux box (debian) 2 NIC. File /etc/network/inferfaces :
>               auto br0
>               iface br0 inet static
>                 address X.Y.Z.T
>                 netmask 255.255.255.0
>                 broadcast X.Y.Z.255
>                 gateway X.Y.Z.U
>                 bridge_ports all
>       When I bring up br0 interface :
> Jun 27 08:41:14 pollux kernel: device eth0 entered promiscuous mode
> Jun 27 08:41:14 pollux kernel: eth0: Setting promiscuous mode.
> Jun 27 08:41:14 pollux last message repeated 4 times
> Jun 27 08:41:14 pollux kernel: device eth1 entered promiscuous mode
> Jun 27 08:41:14 pollux kernel: eth1: Setting promiscuous mode.
> Jun 27 08:41:14 pollux last message repeated 4 times
> Jun 27 08:41:14 pollux kernel: br0: port 2(eth1) entering listening state
> Jun 27 08:41:14 pollux kernel: br0: port 1(eth0) entering listening state
> Jun 27 08:41:15 pollux kernel: br0: port 2(eth1) entering blocking state
> Jun 27 08:41:29 pollux kernel: br0: port 1(eth0) entering learning state
> Jun 27 08:41:44 pollux kernel: br0: port 1(eth0) entering forwarding state
> 
>       I don't understand why eth1 is in blocking state. Any suggestion ?
> 
>       Thanks a lot.

Do you have such a configuration?

                         +------+
                  -------|switch|--------
      --------  /        +------+        \   --------
     |        |/                          \ |        |
     |  LAN1  |                             |  LAN2  |
     |        |\                          / |        |
      --------  \        +------+        /   --------
                  -------|bridge|--------
                         +------+

If so then it's clear: you have a loop and - if the switch doesn't do STP -
the bridge sees packets on the originating LAN and an the other because
packages are forwarded by the switch!

-- 
----------------------------------------------------
Reinhard Schwillinsky        Tel.: ++43/1/205 255/210
Maxxio technologies GmbH     Fax.: ++43/1/205 255/900
Prinz Eugen Strasse 8        A-1040 Vienna/Austria

_______________________________________________
Bridge mailing list
[EMAIL PROTECTED]
http://www.math.leidenuniv.nl/mailman/listinfo/bridge

Reply via email to