Re: firewall virtualization using tagging?

2011-05-23 Thread Stuart Henderson
On 2011-05-23, Oeschger Patrick patrick.oesch...@bluewin.ch wrote:
 the first experiments were using routing domain coupled with different vlans
 but vlans are limited to 4k+

no, you can stack them. svlan(4) does QinQ with the 802.1AD standard
ethertype (0x88a8).



Re: firewall virtualization using tagging?

2011-05-23 Thread Joel Wiramu Pauling
stacking (802.11ah/QinQ) is ok for most situations, however it would be nice
to have a SAP style construct (service access port), which essentially is a
logical customer interface - most switch/router vendors have such as thing.


On 24 May 2011 11:56, Stuart Henderson s...@spacehopper.org wrote:

 On 2011-05-23, Oeschger Patrick patrick.oesch...@bluewin.ch wrote:
  the first experiments were using routing domain coupled with different
 vlans
  but vlans are limited to 4k+

 no, you can stack them. svlan(4) does QinQ with the 802.1AD standard
 ethertype (0x88a8).



Re: firewall virtualization using tagging?

2011-05-23 Thread Martin Hein
On Tue, 24 May 2011 12:33:55 +1200
Joel Wiramu Pauling j...@aenertia.net wrote:
 stacking (802.11ah/QinQ) is ok for most situations, however it would
 be nice to have a SAP style construct (service access port), which
 essentially is a logical customer interface - most switch/router
 vendors have such as thing.

Tags are local to the physical port. So i guess they work like that.

ifconfig vlan1 vlan 234 vlandev em2
ifconfig vlan24123 vlan 234 vlandev em3