mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
c5af8bf92a
pfsense/etc
History
Scott Ullrich c5af8bf92a multiple vlans + spoofmac result in unexpected behaviour 
Ticket #1514

Introduction
I have an acceptable workaround, so the problem is not urgent, but before i fiogured out the workaround, is was severely impacting performance (3 interfaces not operating). I am a network specialist and I am available to assist wherever possible. If the issue si considered seriousenough for a fix, I can assist in more detailed pinpointing using tcpdumps on test-platforms.

Symptoms
If a interface is using vlan tagging for virtual interfaces and also the untagged interface is using MAC address spoofing, communication fails on the tagged vlans.

Description
On interface rl1 is untagged the WAN connection. This requires a spoofed MAC address, eg using <spoofmac>00:03:6b:f7:3b:3f</spoofmac>. On interface rl1 is also a vlan/tagged interface, eg vlan0 using rl1 and vlan tag 5. The tagged interface vlan0 expects to use the original MAC address of the interface rl0. But the issue is that interface rl0 is only processing incoming packets with destination mac address spoof_mac_rl1.

Workarounds (no code change required)
acceptable configure the <spoofmac>00:03:6b:f7:3b:3f</spoofmac> on all vlan interfaces connected to interface rl1
funny start a tcpdump on the vlan interface. This will put the interface in promiscuous mode and it will process all packets. Now the packets destined for the original MAC address (and active on the vlan interface)
bypass Do not use tagged interfaces on a interface with spoofmac

Remarks
It is very confusing that when a vlan is created, the GUI a refernece shows to the physical/original MAC address, even when the MAC addres of the untagged interface is
2007-11-01 18:14:16 +00:00
..
ascii-art
inc multiple vlans + spoofmac result in unexpected behaviour 2007-11-01 18:14:16 +00:00
ssh Set ClientAliveCountMax to 5. 2006-10-17 17:12:07 +00:00
ssl
auth.conf
bogons Remove private networks 2007-10-25 10:36:03 +00:00
crontab Backport cron handling from HEAD. 2007-01-29 04:09:12 +00:00
current-supfile Use /root/ 2006-01-13 23:39:47 +00:00
devd.conf Do not process link down events. we may revert this but lets let Scott test. 2007-02-14 05:49:33 +00:00
disktab
fbtab
gettytab Actually enable the serial port correctly and present the menu when needed. 2006-09-08 20:45:53 +00:00
group Add _ntp to passwd and group 2006-10-02 21:37:22 +00:00
host.conf
hosts.allow
libmap.conf Add library mapping 2005-11-15 17:29:20 +00:00
login.conf * Turnoff console idle time feature * Ensure capabilities database is created on each boot 2007-02-21 22:28:03 +00:00
master.passwd OpenNTPD requires _ntp user and group 2006-10-02 21:31:40 +00:00
motd
networks
pamd.conf
passwd Add _ntp to passwd and group 2006-10-02 21:37:22 +00:00
pccard.conf
pf.os
platform
protocols
pubkey.pem Update release key 2005-11-08 04:58:23 +00:00
rc Use nohup construct for launching 2007-05-20 17:36:08 +00:00
rc.banner Nuke the console detection code. The bug appears to be gone with the recent banner changes. 2006-06-11 03:11:59 +00:00
rc.bootup Start dns cache updater script on bootup 2007-09-25 17:50:30 +00:00
rc.captiveportal_configure These files are not rc.filter_configure 2006-09-29 23:50:33 +00:00
rc.cdrom Set export VARMFS_COPYDBPKG=yes during varmfs mounting so that we can see the entire /var/db/pkg/$PACKAGENAME/$CONTENTS structure 2006-09-06 22:06:45 +00:00
rc.conf_mount_ro Correct filenames in (C) header 2006-09-22 19:48:39 +00:00
rc.conf_mount_rw Correct filenames in (C) header 2006-09-22 19:48:39 +00:00
rc.dhclient_cron Check DHCP interfaces every 6 hours for dhclient issues. Launch dhclient if it is not bound to an interface correctly. 2006-12-12 18:18:50 +00:00
rc.dyndns.storecache
rc.dyndns.update Zap Informational: services_dyndns_configure() is starting. 2006-06-30 17:37:26 +00:00
rc.embedded Use a much larger growable ram disk (128 megs) vs the default low one. 2006-09-01 21:40:09 +00:00
rc.filter_configure Invalidate the cache before reloading filter. 2006-09-26 18:42:59 +00:00
rc.filter_configure_sync These files are not rc.filter_configure 2006-09-29 23:50:33 +00:00
rc.firmware Unlink upgrade file on upgrade. 2007-05-09 05:35:07 +00:00
rc.firmware_auto Echo to WALL when upgrades begin 2006-04-02 23:01:48 +00:00
rc.halt Do not reboot or halt if a config_write() operation is in progress 2006-03-13 06:07:56 +00:00
rc.initial Ticket #1427 - webConfigurator is a better choice, it is used everywhere else 2007-10-16 23:54:21 +00:00
rc.initial.defaults Close STDIN ($fp) handle before returning back to shell. Major doh's. 2007-06-02 22:05:30 +00:00
rc.initial.firmware_update Exit immediately after firmware update operation completes. 2007-08-28 18:31:45 +00:00
rc.initial.halt Close STDIN ($fp) handle before returning back to shell. Major doh's. 2007-06-02 22:05:30 +00:00
rc.initial.password global s/[wW]ebGUI/webConfigurator/ - brought up via ticket #1427 2007-10-17 00:25:25 +00:00
rc.initial.ping Close STDIN ($fp) handle before returning back to shell. Major doh's. 2007-06-02 22:05:30 +00:00
rc.initial.reboot Close STDIN ($fp) handle before returning back to shell. Major doh's. 2007-06-02 22:05:30 +00:00
rc.initial.setlanip Ticket #1464, only allow y* or n* 2007-10-19 19:17:59 +00:00
rc.initial.setports MFC Seths most excellent RRD graphing items 2006-03-21 23:07:28 +00:00
rc.initial.store_config_to_removable_device Close STDIN ($fp) handle before returning back to shell. Major doh's. 2007-06-02 22:20:40 +00:00
rc.interfaces_carp_configure These files are not rc.filter_configure 2006-09-29 23:50:33 +00:00
rc.interfaces_lan_configure These files are not rc.filter_configure 2006-09-29 23:50:33 +00:00
rc.interfaces_opt_configure These files are not rc.filter_configure 2006-09-29 23:50:33 +00:00
rc.interfaces_wan_configure These files are not rc.filter_configure 2006-09-29 23:50:33 +00:00
rc.linkup Do not reconfigure on pptp interfaces. 2007-10-09 21:28:54 +00:00
rc.linkup.sh Remove /tmp/rc.linkup after processing 2007-02-02 18:31:52 +00:00
rc.newwanip Cleanup logging line so that it is more readable. 2007-06-09 20:04:42 +00:00
rc.ntpdate
rc.packages CORRECTLY set the package output area 2007-02-22 20:42:01 +00:00
rc.prunecaptiveportal
rc.reboot Woops, cd to / and then tar 2007-02-18 23:23:35 +00:00
rc.reload_all Log when we are relaoding all settings 2005-11-20 04:22:40 +00:00
rc.reload_interfaces OpenVPN cleanups by mposch@gmail.com 2006-01-30 02:25:00 +00:00
rc.restart_webgui Make sure RRD is running after a cvs_sync.sh. Gary reported that RRD is stopping after EVERY cvs_sync.sh 2006-04-19 15:56:17 +00:00
rc.shutdown Woops, cd to / and then tar 2007-02-18 23:23:35 +00:00
rc.start_packages Do not output Syncing packages twice, once is enough. 2007-02-23 01:24:54 +00:00
rc.stop_packages * Move stop package code out to it's own file rc.stop_packages 2006-11-17 15:46:40 +00:00
rc.update_bogons.sh Match on the beginning of the string so that the 110 network is included 2006-09-12 20:05:36 +00:00
services Add spamd-cfg to services 2006-01-28 00:20:26 +00:00
shells
sshd Remove extra PasswordAuthentication line. Ticket #1374 2007-07-06 18:16:37 +00:00
syslog.conf
ttys Missed commits 2006-09-08 21:27:23 +00:00
ttys_wrap Fix the no job control errors. 2005-12-11 22:25:54 +00:00
version Set RELENG_1 version to 1.3. 1.2 will be released form RELENG_1_2. 2007-04-09 17:03:16 +00:00
version_base Version bump 2007-03-16 00:50:40 +00:00
version_kernel Version bump 2007-03-16 00:50:40 +00:00