Hello! I have a server acting as a router and firewall running 4.6-stable from Apr 24 with an Intel quad port NIC.
In short I have problems with traffic going to or from the server itself via a vlan interface. It works fine via em0 which is the uplink to the ISP and doesn't use any vlan and also traffic passing through the server is ok. It doesn't matter whether PF is enabled or disabled, the problem still appears. em0 at pci5 dev 0 function 0 "Intel PRO/1000 QP (82576)" rev 0x01: apic 0 int 11 (irq 5), address 00:1b:21:63:74:d8 em1 at pci5 dev 0 function 1 "Intel PRO/1000 QP (82576)" rev 0x01: apic 0 int 12 (irq 10), address 00:1b:21:63:74:d9 # cat /etc/hostname.em0 inet X.X.X.X 255.255.255.252 NONE # cat /etc/hostname.em1 up # cat /etc/hostname.vlan30 inet 10.46.196.1 255.255.255.0 NONE vlan 30 vlandev em1 em1 is connected to a port in a switch, vlan 30 is tagged on that port, the switch has IP 10.46.196.8 I can ping 10.46.196.8 but I cannot ssh to it, the ssh attempt hangs at: debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP and then I get a connection closed. I thought this was MTU related somehow because pings work with small packets, actually ping -s 1472 10.46.196.8 works but anything larger than that doesnt. MTU for vlan30 and em1 is 1500 and I guess 1472 makes sense since 1500 - 20(ip) - 8(icmp) = 1472. I really have no clue what's going on here and any help would be very much appreciated. Regards /marcus

