Hello!

I have a server acting as a router and firewall running 4.6-stable 
from Apr 24 with an Intel quad port NIC.

In short I have problems with traffic going to or from the
server itself via a vlan interface. It works fine via em0 which
is the uplink to the ISP and doesn't use any vlan and also
traffic passing through the server is ok. 

It doesn't matter whether PF is enabled or disabled, the problem
still appears.

em0 at pci5 dev 0 function 0 "Intel PRO/1000 QP (82576)" rev 0x01: apic 0 int 
11 (irq 5), address 00:1b:21:63:74:d8
em1 at pci5 dev 0 function 1 "Intel PRO/1000 QP (82576)" rev 0x01: apic 0 int 
12 (irq 10), address 00:1b:21:63:74:d9

# cat /etc/hostname.em0 
inet X.X.X.X 255.255.255.252 NONE

# cat /etc/hostname.em1 
up
# cat /etc/hostname.vlan30 
inet 10.46.196.1 255.255.255.0 NONE vlan 30 vlandev em1

em1 is connected to a port in a switch, vlan 30 is tagged on
that port, the switch has IP 10.46.196.8 

I can ping 10.46.196.8 but I cannot ssh to it, the ssh attempt
hangs at: debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP and then I
get a connection closed.

I thought this was MTU related somehow because pings work with
small packets, actually ping -s 1472 10.46.196.8 works but
anything larger than that doesnt.

MTU for vlan30 and em1 is 1500 and I guess 1472 makes sense
since 1500 - 20(ip) - 8(icmp) = 1472.

I really have no clue what's going on here and any help would be
very much appreciated.

Regards

/marcus

Reply via email to