IP unnumbered VLANs

Urbán Csaba ucsaba at freemail.hu
Fri Apr 22 05:20:44 PDT 2005


Hi,

I have a situation as follows:

       +--------+ dot1q +---------+
 -----| router |---------| VLAN    |vlan4
eth0| box A  |eth1    | switch  |-------------+
       +--------+           +---------+                 |
                                vlan2  | vlan3            |
                                     |    |                      |
                             +----+    |                      |
                             |            |                      |
                             |            |                      |       
                      +--------+   +--------+  +--------+ 
                       | client |    | client  |   | client |  
                       | box B |   | box C  |   | box D| 
                      +--------+   +--------+  +--------+ 


1. Users (client B, C, D) sould be on the same IP subnet but in different 
VLANs (let's say IP(B): 192.168.0.2, IP(C):192.168.0.3, IP
(D):192.168.0.4. Default GW (box A) is 192.168.0.1 for all.

2. Users should not be able to communicate with each other in Layer2

3. They should be able to use only those IP addresses that I assigned 
to them - but they can change their MACs so startic ARP won't work 
here

Did anybody try something like this - with success, of course :)

Thanks,

Csaba



More information about the freebsd-isp mailing list