Correction. State of eth1.x makes no difference.
Corrected version below.
From: Taylor, Neal E
Sent: Friday, July 13, 2012 11:08 AM
To: '[email protected]'
Cc: Anand, Swapna A; Pavelka, Tomas; Quach, Minh T
Subject: VLAN Packet reverb.
Gentlefolk,
As a new person to the list I have checked the archive and didn't locate an
answer.
We're Using VLANs to isolate traffic to VMs with a router/firewall-like process
to switch VLAN IDs to complete allowed communication. Only the router/firewall
instance of zLinux is grated trunked, promiscuous access to the vswitch. On the
router/firewall we start see 18 (usually) copies of packets.
Other nodes on the vswitch see normal traffic.
Any suggestions on what we've mis-configured or what data to gather next?
Neal Taylor
Principal Software Engineer
CA Technologies, Inc.
[root@vnphost ~]# vmcp q lan vnptest acc
VSWITCH SYSTEM VNPTEST Type: QDIO Connected: 3 Maxconn: INFINITE
PERSISTENT RESTRICTED ETHERNET Accounting: OFF
USERBASED
VLAN Aware Default VLAN: 0001 Default Porttype: Access GVRP: Disabled
Native VLAN: 0001 VLAN Counters: OFF
MAC address: 02-00-C2-00-00-14 MAC Protection: Unspecified
State: Defined
IPTimeout: 5 QueueStorage: 8
Isolation Status: OFF
Authorized userids:
VNPAPP1 Porttype: Access VLAN: 0002
VNPAPP2 Porttype: Access VLAN: 0003
VNPHOST Porttype: Trunk VLAN: 0002-0003
[root@vnphost tmp]# ifconfig -a
br0 Link encap:Ethernet HWaddr 02:00:C2:00:00:1B
inet6 addr: fe80::c2ff:fe00:1b/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:6 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:468 (468.0 b)
eth0 Link encap:Ethernet HWaddr 02:00:C2:00:00:1C
inet addr:141.202.162.61 Bcast:141.202.162.255 Mask:255.255.255.0
inet6 addr: fe80::200:c200:1800:1c/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:12518 errors:0 dropped:0 overruns:0 frame:0
TX packets:10681 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:4093811 (3.9 MiB) TX bytes:1588807 (1.5 MiB)
eth1 Link encap:Ethernet HWaddr 02:00:C2:00:00:1B
inet addr:10.55.255.3 Bcast:10.55.255.255 Mask:255.255.255.0
inet6 addr: fe80::c2ff:fe00:1b/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:5166 errors:0 dropped:0 overruns:0 frame:0
TX packets:4644 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:419062 (409.2 KiB) TX bytes:379468 (370.5 KiB)
eth1.2 Link encap:Ethernet HWaddr 02:00:C2:00:00:1B
inet6 addr: fe80::c2ff:fe00:1b/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:12 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:984 (984.0 b)
eth1.3 Link encap:Ethernet HWaddr 02:00:C2:00:00:1B
inet6 addr: fe80::c2ff:fe00:1b/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:12 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:984 (984.0 b)
eth1.4 Link encap:Ethernet HWaddr 02:00:C2:00:00:1B
inet6 addr: fe80::c2ff:fe00:1b/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:6 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:492 (492.0 b)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
>From a "tcpdum -i eth1". This shows traffic between two other nodes, but 18
>copies of it:
12:19:12.089413 IP 10.55.255.1 > 10.55.255.2: ICMP echo request, id 3334, seq
1, length 64
12:19:12.089444 IP 10.55.255.1 > 10.55.255.2: ICMP echo request, id 3334, seq
1, length 64
12:19:12.089449 IP 10.55.255.1 > 10.55.255.2: ICMP echo request, id 3334, seq
1, length 64
12:19:12.089455 IP 10.55.255.1 > 10.55.255.2: ICMP echo request, id 3334, seq
1, length 64
12:19:12.089460 IP 10.55.255.1 > 10.55.255.2: ICMP echo request, id 3334, seq
1, length 64
12:19:12.089465 IP 10.55.255.1 > 10.55.255.2: ICMP echo request, id 3334, seq
1, length 64
12:19:12.089470 IP 10.55.255.1 > 10.55.255.2: ICMP echo request, id 3334, seq
1, length 64
12:19:12.089475 IP 10.55.255.1 > 10.55.255.2: ICMP echo request, id 3334, seq
1, length 64
12:19:12.089480 IP 10.55.255.1 > 10.55.255.2: ICMP echo request, id 3334, seq
1, length 64
12:19:12.089485 IP 10.55.255.1 > 10.55.255.2: ICMP echo request, id 3334, seq
1, length 64
12:19:12.089490 IP 10.55.255.1 > 10.55.255.2: ICMP echo request, id 3334, seq
1, length 64
12:19:12.089495 IP 10.55.255.1 > 10.55.255.2: ICMP echo request, id 3334, seq
1, length 64
12:19:12.089500 IP 10.55.255.1 > 10.55.255.2: ICMP echo request, id 3334, seq
1, length 64
12:19:12.089505 IP 10.55.255.1 > 10.55.255.2: ICMP echo request, id 3334, seq
1, length 64
12:19:12.089510 IP 10.55.255.1 > 10.55.255.2: ICMP echo request, id 3334, seq
1, length 64
12:19:12.089515 IP 10.55.255.1 > 10.55.255.2: ICMP echo request, id 3334, seq
1, length 64
12:19:12.089520 IP 10.55.255.1 > 10.55.255.2: ICMP echo request, id 3334, seq
1, length 64
12:19:12.089525 IP 10.55.255.1 > 10.55.255.2: ICMP echo request, id 3334, seq
1, length 64
----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
----------------------------------------------------------------------
For more information on Linux on System z, visit
http://wiki.linuxvm.org/