mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
d7028c7406
pfsense/etc
History
Scott Ullrich c5af8bf92a multiple vlans + spoofmac result in unexpected behaviour 
Ticket #1514

Introduction
I have an acceptable workaround, so the problem is not urgent, but before i fiogured out the workaround, is was severely impacting performance (3 interfaces not operating). I am a network specialist and I am available to assist wherever possible. If the issue si considered seriousenough for a fix, I can assist in more detailed pinpointing using tcpdumps on test-platforms.

Symptoms
If a interface is using vlan tagging for virtual interfaces and also the untagged interface is using MAC address spoofing, communication fails on the tagged vlans.

Description
On interface rl1 is untagged the WAN connection. This requires a spoofed MAC address, eg using <spoofmac>00:03:6b:f7:3b:3f</spoofmac>. On interface rl1 is also a vlan/tagged interface, eg vlan0 using rl1 and vlan tag 5. The tagged interface vlan0 expects to use the original MAC address of the interface rl0. But the issue is that interface rl0 is only processing incoming packets with destination mac address spoof_mac_rl1.

Workarounds (no code change required)
acceptable configure the <spoofmac>00:03:6b:f7:3b:3f</spoofmac> on all vlan interfaces connected to interface rl1
funny start a tcpdump on the vlan interface. This will put the interface in promiscuous mode and it will process all packets. Now the packets destined for the original MAC address (and active on the vlan interface)
bypass Do not use tagged interfaces on a interface with spoofmac

Remarks
It is very confusing that when a vlan is created, the GUI a refernece shows to the physical/original MAC address, even when the MAC addres of the untagged interface is
2007-11-01 18:14:16 +00:00
..
ascii-art Widen logo a hair 2005-08-28 01:44:34 +00:00
inc multiple vlans + spoofmac result in unexpected behaviour 2007-11-01 18:14:16 +00:00
ssh Set ClientAliveCountMax to 5. 2006-10-17 17:12:07 +00:00
ssl Create certificate for HTTP Server option 2004-11-17 22:59:17 +00:00
auth.conf Initial revision 2004-11-07 03:06:49 +00:00
bogons Remove private networks 2007-10-25 10:36:03 +00:00
crontab Backport cron handling from HEAD. 2007-01-29 04:09:12 +00:00
current-supfile Use /root/ 2006-01-13 23:39:47 +00:00
devd.conf Do not process link down events. we may revert this but lets let Scott test. 2007-02-14 05:49:33 +00:00
disktab Initial revision 2004-11-07 03:06:49 +00:00
fbtab Initial revision 2004-11-07 03:06:49 +00:00
gettytab Actually enable the serial port correctly and present the menu when needed. 2006-09-08 20:45:53 +00:00
group Add _ntp to passwd and group 2006-10-02 21:37:22 +00:00
host.conf Initial revision 2004-11-07 03:06:49 +00:00
hosts.allow Initial revision 2004-11-07 03:06:49 +00:00
libmap.conf Add library mapping 2005-11-15 17:29:20 +00:00
login.conf * Turnoff console idle time feature * Ensure capabilities database is created on each boot 2007-02-21 22:28:03 +00:00
master.passwd OpenNTPD requires _ntp user and group 2006-10-02 21:31:40 +00:00
motd Add trailing space 2005-06-21 02:58:06 +00:00
networks Initial revision 2004-11-07 03:06:49 +00:00
pamd.conf Initial revision 2004-11-07 03:06:49 +00:00
passwd Add _ntp to passwd and group 2006-10-02 21:37:22 +00:00
pccard.conf Initial revision 2004-11-07 03:06:49 +00:00
pf.os Add custom os.pf file which includes the latest versino of FreeBSD 2005-05-15 16:46:13 +00:00
platform update platform to pfSense 2004-11-24 23:51:30 +00:00
protocols add pfsync to /etc/protocols. 2005-03-17 20:53:11 +00:00
pubkey.pem Update release key 2005-11-08 04:58:23 +00:00
rc Use nohup construct for launching 2007-05-20 17:36:08 +00:00
rc.banner Nuke the console detection code. The bug appears to be gone with the recent banner changes. 2006-06-11 03:11:59 +00:00
rc.bootup Start dns cache updater script on bootup 2007-09-25 17:50:30 +00:00
rc.captiveportal_configure These files are not rc.filter_configure 2006-09-29 23:50:33 +00:00
rc.cdrom Set export VARMFS_COPYDBPKG=yes during varmfs mounting so that we can see the entire /var/db/pkg/$PACKAGENAME/$CONTENTS structure 2006-09-06 22:06:45 +00:00
rc.conf_mount_ro Correct filenames in (C) header 2006-09-22 19:48:39 +00:00
rc.conf_mount_rw Correct filenames in (C) header 2006-09-22 19:48:39 +00:00
rc.dhclient_cron Check DHCP interfaces every 6 hours for dhclient issues. Launch dhclient if it is not bound to an interface correctly. 2006-12-12 18:18:50 +00:00
rc.dyndns.storecache Exit 0 2005-07-10 21:16:02 +00:00
rc.dyndns.update Zap Informational: services_dyndns_configure() is starting. 2006-06-30 17:37:26 +00:00
rc.embedded Use a much larger growable ram disk (128 megs) vs the default low one. 2006-09-01 21:40:09 +00:00
rc.filter_configure Invalidate the cache before reloading filter. 2006-09-26 18:42:59 +00:00
rc.filter_configure_sync These files are not rc.filter_configure 2006-09-29 23:50:33 +00:00
rc.firmware Unlink upgrade file on upgrade. 2007-05-09 05:35:07 +00:00
rc.firmware_auto Echo to WALL when upgrades begin 2006-04-02 23:01:48 +00:00
rc.halt Do not reboot or halt if a config_write() operation is in progress 2006-03-13 06:07:56 +00:00
rc.initial Ticket #1427 - webConfigurator is a better choice, it is used everywhere else 2007-10-16 23:54:21 +00:00
rc.initial.defaults Close STDIN ($fp) handle before returning back to shell. Major doh's. 2007-06-02 22:05:30 +00:00
rc.initial.firmware_update Exit immediately after firmware update operation completes. 2007-08-28 18:31:45 +00:00
rc.initial.halt Close STDIN ($fp) handle before returning back to shell. Major doh's. 2007-06-02 22:05:30 +00:00
rc.initial.password global s/[wW]ebGUI/webConfigurator/ - brought up via ticket #1427 2007-10-17 00:25:25 +00:00
rc.initial.ping Close STDIN ($fp) handle before returning back to shell. Major doh's. 2007-06-02 22:05:30 +00:00
rc.initial.reboot Close STDIN ($fp) handle before returning back to shell. Major doh's. 2007-06-02 22:05:30 +00:00
rc.initial.setlanip Ticket #1464, only allow y* or n* 2007-10-19 19:17:59 +00:00
rc.initial.setports MFC Seths most excellent RRD graphing items 2006-03-21 23:07:28 +00:00
rc.initial.store_config_to_removable_device Close STDIN ($fp) handle before returning back to shell. Major doh's. 2007-06-02 22:20:40 +00:00
rc.interfaces_carp_configure These files are not rc.filter_configure 2006-09-29 23:50:33 +00:00
rc.interfaces_lan_configure These files are not rc.filter_configure 2006-09-29 23:50:33 +00:00
rc.interfaces_opt_configure These files are not rc.filter_configure 2006-09-29 23:50:33 +00:00
rc.interfaces_wan_configure These files are not rc.filter_configure 2006-09-29 23:50:33 +00:00
rc.linkup Do not reconfigure on pptp interfaces. 2007-10-09 21:28:54 +00:00
rc.linkup.sh Remove /tmp/rc.linkup after processing 2007-02-02 18:31:52 +00:00
rc.newwanip Cleanup logging line so that it is more readable. 2007-06-09 20:04:42 +00:00
rc.ntpdate Add perioditc ntpdate script 2005-09-15 00:15:31 +00:00
rc.packages CORRECTLY set the package output area 2007-02-22 20:42:01 +00:00
rc.prunecaptiveportal Add $Id$ tags 2005-03-27 22:39:00 +00:00
rc.reboot Woops, cd to / and then tar 2007-02-18 23:23:35 +00:00
rc.reload_all Log when we are relaoding all settings 2005-11-20 04:22:40 +00:00
rc.reload_interfaces OpenVPN cleanups by mposch@gmail.com 2006-01-30 02:25:00 +00:00
rc.restart_webgui Make sure RRD is running after a cvs_sync.sh. Gary reported that RRD is stopping after EVERY cvs_sync.sh 2006-04-19 15:56:17 +00:00
rc.shutdown Woops, cd to / and then tar 2007-02-18 23:23:35 +00:00
rc.start_packages Do not output Syncing packages twice, once is enough. 2007-02-23 01:24:54 +00:00
rc.stop_packages * Move stop package code out to it's own file rc.stop_packages 2006-11-17 15:46:40 +00:00
rc.update_bogons.sh Match on the beginning of the string so that the 110 network is included 2006-09-12 20:05:36 +00:00
services Add spamd-cfg to services 2006-01-28 00:20:26 +00:00
shells Remove bash from /etc/shells (it isn't installed). 2005-03-07 03:30:05 +00:00
sshd Remove extra PasswordAuthentication line. Ticket #1374 2007-07-06 18:16:37 +00:00
syslog.conf * Send ipsec log to system for the time being 2005-07-11 00:07:59 +00:00
ttys Missed commits 2006-09-08 21:27:23 +00:00
ttys_wrap Fix the no job control errors. 2005-12-11 22:25:54 +00:00
version Set RELENG_1 version to 1.3. 1.2 will be released form RELENG_1_2. 2007-04-09 17:03:16 +00:00
version_base Version bump 2007-03-16 00:50:40 +00:00
version_kernel Version bump 2007-03-16 00:50:40 +00:00