On Tue, Mar 01, 2016 at 09:59:02AM +0100, i3D.net - Martijn Schmidt wrote: > The MLX platform is not a layer2 switch by default, so there are two > ways to solve this problem: > > a) Use a VLL-local to bridge VLAN 999 from the firewall, through the > MLX, to the ICX2. Then the MLX does not even learn the MAC addresses of > the packets which are passing through. > > b) Perform a "no route-only" on all the interfaces which are involved in > layer2 switching.
There is already no route-only set on the interfaces in question (I forgot to mention that). The device is acting as switch & router. Otherwise, the internal VLAN would not be switched with transparent-hw-flooding set as well. I see that the switching does not work until transparent-hw-flooding is set. I wonder if this is related to the same mac address showing up in two different VLANs or some kind of loop detection. If transparent-hw-flooding is set, the device just floods all the traffic without analyzing it. Best regards, Franz Georg Köhler _______________________________________________ foundry-nsp mailing list [email protected] http://puck.nether.net/mailman/listinfo/foundry-nsp
