Re: firewall virtualization using tagging?
On 2011-05-23, Oeschger Patrick patrick.oesch...@bluewin.ch wrote: the first experiments were using routing domain coupled with different vlans but vlans are limited to 4k+ no, you can stack them. svlan(4) does QinQ with the 802.1AD standard ethertype (0x88a8).
Re: firewall virtualization using tagging?
stacking (802.11ah/QinQ) is ok for most situations, however it would be nice to have a SAP style construct (service access port), which essentially is a logical customer interface - most switch/router vendors have such as thing. On 24 May 2011 11:56, Stuart Henderson s...@spacehopper.org wrote: On 2011-05-23, Oeschger Patrick patrick.oesch...@bluewin.ch wrote: the first experiments were using routing domain coupled with different vlans but vlans are limited to 4k+ no, you can stack them. svlan(4) does QinQ with the 802.1AD standard ethertype (0x88a8).
Re: firewall virtualization using tagging?
On Tue, 24 May 2011 12:33:55 +1200 Joel Wiramu Pauling j...@aenertia.net wrote: stacking (802.11ah/QinQ) is ok for most situations, however it would be nice to have a SAP style construct (service access port), which essentially is a logical customer interface - most switch/router vendors have such as thing. Tags are local to the physical port. So i guess they work like that. ifconfig vlan1 vlan 234 vlandev em2 ifconfig vlan24123 vlan 234 vlandev em3