Continuing the thread on horbe becoming virtual... I've got vlans working... The tricks were
1) set the MTU to 1496 on both the firewall's vlan0 interface and eth0 and eth0.4 on newhorse 2) set /proc/net/core/ipv4/eth*/rp_filter to 0 instead of 1, (sort-of a promiscuous mode) 3) run "tcpdump -i vlan0 &" on the freeBSD firewall. I have no idea WTF this is changing that suddenly allows data to move, but it works. Any enlightenment welcome! Now, newhorse has these interfaces: eth0 10.28.200.2/16 <-- my home lan eth0.4 192.168.200.2/24 <-- vlan interface, default route etc. I can't down eth0 without downing eth0.4 as well. I was going to set eth0 to use some unused network, like 192.168.201.x/24 Can you see any problems with that? If nothing else goes wrong I'll look at migrating old horse to newhorse next weekend.
